home

tesla.plunder.com

Dediweb Ltd

Domain Information

The domain tesla.plunder.com registered by Dediweb Ltd was initially registered in October of 2000 through GANDI SAS. The hosted servers are located in Hollywood, Florida within the United States which resides on the Prolexic Technologies, Inc. network.
Registrar:
GANDI SAS

Server location:
Florida, United States (US)

Create date:
Tuesday, October 31, 2000

Expires date:
Tuesday, October 31, 2017

Updated date:
Friday, August 1, 2014

ASN:
AS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Prolexic Technologies, Inc.,US

Root domain:
plunder.com

Whois:
3 plunder.com records

The domain tesla.plunder.com has been seen to resolve to the following 2 IP addresses.

72.52.4.119
unknown.prolexic.com
April 12, 2016

50.7.244.42
March 14, 2014

File downloads found at URLs served by tesla.plunder.com.

0 / 68
http://tesla.plunder.com/x/$yyKuCet1BY52ggZpKuo7oN9Z9u3XPzdM/.../iDate_manual_101216.exe  (4247b27879ce43390e719156a849feaa)

0 / 68
http://tesla.plunder.com/x/$Bl_up2Tk_H11KWHYpLs8Q6dvA_F_xpz4/.../Le Bot 8.4.exe  (a79040b854ef67bad885cffd3482a08c)

0 / 68
http://tesla.plunder.com/x/$MZnf5pEHEp8-OYAfSXoKqjmSIE28mA-U/.../Clash Of Clans Hack v.1.68.exe  (clash of clans hack tool v.1.68.exe)

0 / 68
http://tesla.plunder.com/x/$A8ykkRfApxJ_ARSkkfUygoB83RnDtz0-/.../Dark Mystic.exe  (6843f0251507f25582cfe793075364ef)

21 / 68    (PUP)
http://tesla.plunder.com/x/$aQ-sb1-GWMWpMYDyEtQNA_pAhcbhq7ma/.../645507df32_10924_i25497916_il345.exe.zip  (cd329453819ece31a28685beb1d75066)

0 / 68
http://tesla.plunder.com/x/$W8CjIFXfIL0Sqo8uupZYYdW7GUakcMGw/.../Le Bot 8.4.exe  (a79040b854ef67bad885cffd3482a08c)

0 / 68
http://tesla.plunder.com/x/$430nl-n87GZRPcbsVusaai0r7ajRIqC3/.../RObotzi.exe  (b33f966f1932b693e30d642c9d9057cd)

0 / 68
http://tesla.plunder.com/x/$3h896ZIRHdc1J4EC9xVMlQDJoQueNzX-/.../Dark Mystic.exe  (6843f0251507f25582cfe793075364ef)

0 / 68
http://tesla.plunder.com/x/$XdDBAVAklLmdcLZnsedj9N9YzKoQYqKx/.../Le Bot 8.2.exe  (e283b5f86f0d875021319ececc14a1a8)

0 / 68
http://tesla.plunder.com/x/$5VqIVRQAF6Y9UlzHhM7-rn-Ib4OlbD9N/.../BlueStacks-ThinInstaller_0.7.0.722.exe  (a2c04dc1e91113291afcbeda088bf7fb)

The following 28 files have been seen to comunicate with tesla.plunder.com in live environments.

TCP » 72.52.4.119:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.119:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 72.52.4.119:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.119:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 72.52.4.119:80
online-guardian-v2.0.9.exe

TCP » 72.52.4.119:80
updat.exe

TCP » 72.52.4.119:80
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 72.52.4.119:80
autorun.exe (SoftFullDownload.blogspot.com)

TCP » 72.52.4.119:80
hbpzabffmyx.exe

TCP » 72.52.4.119:80
cpx.exe (Google Embedded Application)

TCP » 72.52.4.119:80
jingling.exe

TCP » 72.52.4.119:80
xkyuizxr.exe

TCP » 72.52.4.119:25
wrk.exe

TCP » 72.52.4.119:25
www.exe

TCP » 72.52.4.119:80
pbiiuvda.exe

TCP » 72.52.4.119:80
swlynnf.exe

TCP » 72.52.4.119:80
websiterecommendation_2_2.crx

TCP » 72.52.4.119:80
fanaticoonline.crx

TCP » 72.52.4.119:25
tiddiszagtor.exe (Faster Aids Manager by XIGMATEK)

TCP » 72.52.4.119:326
tgvbgq.exe

 
Latest 20 of 33 files

URL:
http://tesla.plunder.com/

Title:
“plunder.com -&nbspThis website is for sale! -&nbspplunder Resources and Information.”

Description:
“This”

Web server:
Apache (PHP/5.3.3-7+squeeze28)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.