home

www.key-logger.ws

Domain Information

Server location:
Florida, United States (US)

ASN:
AS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Prolexic Technologies, Inc.,US

Root domain:
key-logger.ws

The domain www.key-logger.ws has been seen to resolve to the following IP address.

72.52.4.91
unknown.prolexic.com
August 12, 2015

File downloads found at URLs served by www.key-logger.ws.

0 / 68
http://www.key-logger.ws/.../mysql-connector-odbc-3.51.23-win32.msi  (myodbc-3.51.23-win32.msi)

The following 17 files have been seen to comunicate with www.key-logger.ws in live environments.

TCP » 72.52.4.91:80
jingling.exe

TCP » 72.52.4.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 72.52.4.91:80
crossbrowse.exe (Crossbrowse)

TCP » 72.52.4.91:80
hbpzabffmyx.exe

TCP » 72.52.4.91:80
pbiiuvda.exe

TCP » 72.52.4.91:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 72.52.4.91:80
winsysapp.exe

TCP » 72.52.4.91:80
chromeplugin.crx

TCP » 72.52.4.91:80
winalert.exe

TCP » 72.52.4.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 72.52.4.91:80
autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 72.52.4.91:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 72.52.4.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 72.52.4.91:80
emuletorrent.exe

TCP » 72.52.4.91:8080
smu.exe (W by Search Module)

TCP » 72.52.4.91:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 72.52.4.91:80
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.