home

instancetide-all.xyz

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

The domain instancetide-all.xyz has been seen to resolve to the following 4 IP addresses.

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
July 2, 2015

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
July 2, 2015

52.11.167.137
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
July 2, 2015

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
July 2, 2015

The following 2 files have been seen to comunicate with instancetide-all.xyz in live environments.

TCP » 52.11.167.137:80
download.exe

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

July 2, 2015
a.instancetide-all.xyz

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.