home

v1.fbcim.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain v1.fbcim.com is registered by proxy through GODADDY.COM, LLC and was originally registered in January of 2012. The hosted servers are located in New York City, New York within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Sunday, January 29, 2012

Expires date:
Sunday, January 29, 2017

Updated date:
Tuesday, April 28, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
fbcim.com

Whois:
2 fbcim.com records

The domain v1.fbcim.com has been seen to resolve to the following 32 IP addresses.

52.84.125.161
server-52-84-125-161.iad16.r.cloudfront.net
August 31, 2016

52.84.125.152
server-52-84-125-152.iad16.r.cloudfront.net
August 31, 2016

52.84.125.72
server-52-84-125-72.iad16.r.cloudfront.net
August 31, 2016

52.84.125.24
server-52-84-125-24.iad16.r.cloudfront.net
August 31, 2016

52.84.125.224
server-52-84-125-224.iad16.r.cloudfront.net
August 31, 2016

52.84.125.203
server-52-84-125-203.iad16.r.cloudfront.net
August 31, 2016

52.84.125.182
server-52-84-125-182.iad16.r.cloudfront.net
August 31, 2016

52.84.125.180
server-52-84-125-180.iad16.r.cloudfront.net
August 31, 2016

52.85.142.73
server-52-85-142-73.iad12.r.cloudfront.net
June 18, 2016

52.85.142.29
server-52-85-142-29.iad12.r.cloudfront.net
June 18, 2016

52.85.142.19
server-52-85-142-19.iad12.r.cloudfront.net
June 18, 2016

52.85.142.228
server-52-85-142-228.iad12.r.cloudfront.net
June 18, 2016

52.85.142.223
server-52-85-142-223.iad12.r.cloudfront.net
June 18, 2016

52.85.142.145
server-52-85-142-145.iad12.r.cloudfront.net
June 18, 2016

52.85.142.116
server-52-85-142-116.iad12.r.cloudfront.net
June 18, 2016

52.85.142.113
server-52-85-142-113.iad12.r.cloudfront.net
June 18, 2016

54.230.102.221
server-54-230-102-221.iad2.r.cloudfront.net
April 10, 2016

54.230.102.214
server-54-230-102-214.iad2.r.cloudfront.net
April 10, 2016

54.230.102.154
server-54-230-102-154.iad2.r.cloudfront.net
April 10, 2016

54.230.102.115
server-54-230-102-115.iad2.r.cloudfront.net
April 10, 2016

54.230.102.29
server-54-230-102-29.iad2.r.cloudfront.net
April 10, 2016

54.230.102.5
server-54-230-102-5.iad2.r.cloudfront.net
April 10, 2016

54.230.102.229
server-54-230-102-229.iad2.r.cloudfront.net
April 10, 2016

54.230.102.225
server-54-230-102-225.iad2.r.cloudfront.net
April 10, 2016

54.240.190.249
server-54-240-190-249.jfk6.r.cloudfront.net
December 28, 2013

54.240.190.125
server-54-240-190-125.jfk6.r.cloudfront.net
December 28, 2013

54.240.190.58
server-54-240-190-58.jfk6.r.cloudfront.net
December 28, 2013

54.230.52.67
server-54-230-52-67.jfk6.r.cloudfront.net
December 28, 2013

54.230.54.21
server-54-230-54-21.jfk6.r.cloudfront.net
December 28, 2013

54.240.190.108
server-54-240-190-108.jfk6.r.cloudfront.net
December 28, 2013

 
Showing 30 of 32 IP Addresses

File downloads found at URLs served by v1.fbcim.com.

0 / 68
http://v1.fbcim.com/FBCIMSetup.exe  (59a3b2d4d56930cbd6dce4f66a809c9d)

0 / 68
http://v1.fbcim.com/FBCIMSetup.exe  (9ed41061257f5126d9368e6a90210c87)

11 / 68    (Infected)
http://v1.fbcim.com/FBCIMSetup.exe  (98f4b30fd246fb5e06b929da148152da)

0 / 68
http://v1.fbcim.com/FBCIMSetup.exe  (9a3952ee01ad0d5c51e3ba88e82f0777)

The following 38 files have been seen to comunicate with v1.fbcim.com in live environments.

TCP » 52.84.125.203:443
strummer.exe (Strummer)

TCP » 52.85.142.228:443
jingling.exe

TCP » 52.85.142.228:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.223:80
browser.exe (Browser)

TCP » 52.84.125.180:443
oozes.exe (Oozes)

TCP » 52.85.142.145:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.85.142.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.223:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.180:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.224:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.29:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.228:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.116:80
se.exe

TCP » 52.85.142.116:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.145:80
browser.exe (Browser)

TCP » 52.85.142.116:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.29:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.29:80
whatsapptime.exe

TCP » 52.85.142.29:443
browser.exe (Browser)

TCP » 52.85.142.228:80
DriverAssist.exe

 
Latest 20 of 93 files

URL:
http://v1.fbcim.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.