home

www.prepbc2016.mx

Name: Administrador de Dominio Podernet

Domain Information

The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
Akky (Una division de NIC Mexico)

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
prepbc2016.mx

Whois:
1 prepbc2016.mx record

The domain www.prepbc2016.mx has been seen to resolve to the following 8 IP addresses.

52.84.125.152
server-52-84-125-152.iad16.r.cloudfront.net
June 20, 2016

52.84.125.150
server-52-84-125-150.iad16.r.cloudfront.net
June 20, 2016

52.84.125.144
server-52-84-125-144.iad16.r.cloudfront.net
June 20, 2016

52.84.125.105
server-52-84-125-105.iad16.r.cloudfront.net
June 20, 2016

52.84.125.68
server-52-84-125-68.iad16.r.cloudfront.net
June 20, 2016

52.84.125.26
server-52-84-125-26.iad16.r.cloudfront.net
June 20, 2016

52.84.125.9
server-52-84-125-9.iad16.r.cloudfront.net
June 20, 2016

52.84.125.205
server-52-84-125-205.iad16.r.cloudfront.net
June 20, 2016

File downloads found at URLs served by www.prepbc2016.mx.

0 / 68
http://www.prepbc2016.mx/xls_c3.csv  (1d255af5-c5e7-0b3b-40dd-45f170dd47a6_1d1c0f7722e3c3b)

0 / 68
http://www.prepbc2016.mx/BD_BAJA_CALIFORNIA.zip  (539740f7-2036-5e81-42a0-71ae5adcf421_1d1c0f777730d13)

The following 18 files have been seen to comunicate with www.prepbc2016.mx in live environments.

TCP » 52.84.125.26:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.9:80
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.84.125.150:80
se.exe

TCP » 52.84.125.144:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.105:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.105:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.144:443
oozes.exe (Oozes)

TCP » 52.84.125.150:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.26:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.26:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.26:80
niches.exe (Niches)

TCP » 52.84.125.26:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.84.125.26:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.9:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.105:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.105:443
stormwatchapp.exe

TCP » 52.84.125.144:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.150:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.150:443
online-guardian-v2.0.9.exe

 
Latest 20 of 38 files

URL:
http://www.prepbc2016.mx/

Title:
“Prep bc2016”

Network:
Amazon Cloudfront

Web server:
nginx

Facebook:
Likes:  1,971
Shares:  957
Comments:  766

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.