home

a.jobcreditspy.net

Robert Fedusku

Domain Information

The domain a.jobcreditspy.net registered by Robert Fedusku was initially registered in May of 2015 through ONLINENIC, INC.. Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
ONLINENIC, INC.

Server location:
Oregon, United States (US)

Create date:
Monday, May 11, 2015

Expires date:
Wednesday, May 11, 2016

Updated date:
Tuesday, May 12, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
jobcreditspy.net

Whois:
1 jobcreditspy.net record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

The domain a.jobcreditspy.net has been seen to resolve to the following 4 IP addresses.

141.8.226.19
May 19, 2016

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
October 13, 2015

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
October 13, 2015

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
October 13, 2015

File downloads found at URLs served by a.jobcreditspy.net.

1 / 68      (Malware)
http://a.jobcreditspy.net/hp/?q=vUbWSecWDdmCJXZTVNGrI7JWlTcdzCP4mxD6/yWmW5 HYcL5IcqvRdnwsJmCC4S0vW 5JSZ85t1xbOgZhSJ3dmBmI2jxZKI2Yektt1 bu4MmQIf6cCoR75uc2lRe4Y2xOBehQuLT7MqPXRSYCejgWicdzC rziGQBpG/mv7SOavwtgoz4LCY/i/lvkYFqM8EFX/v3xzg7uucgBCm1ec/l131opQ8qYuq/2wFDF9ihdeqlFw0xv7i8X0wv55VQi0e3SZxw5OrI3Jbrw1InxPAky4CewgntZ/.../gBGRyCkAf0hPhrBACnEjvkJSo9Yz4BkCRAZPEv1CUA40mH6GlVqMrVEVhrJg0i7K1iFTp HQUAd8X9SIGsP5GINiIcosaNpyMj2d9p8mIV9uOqvMKoLuwDeQEISrys9ixrNEWvl52R7TQbgMHk9jkTBoae40eRpoNYPGSH RCBA8IGbDp8Fw97m6CQTaX5lzGwQKMqCtpSbxjyU7Ijbgu6KGikVFbRijvkXw6awGao4UZzDVjFhNVWU2Mt2uTaRwWidBmr  (idm 6.23 build 8 crack patch with serial free download.exe)

1 / 68      (Malware)
http://a.jobcreditspy.net/hp/?q=x0bWS3igLW2TQWYSUMFtbCgPZJOL/j4PPds4QItRzscwOSzK4LpcjhuuKdmzeq0JAMfrk1faQFmhGUy9JVwX2LVpUhweQfsNl4rKm NDA67MBh/HQF7zWuHeZy8ybKVeGT79VQGnV10Uf3byyMIoGloaBgLJdmg2GfbmlJVfr7LzCre4v45ukRdUZIJcgP94u4Lvpw83BFtd2RwX0RW03FmhwN/l3uXJkac5jYL5LZ wQlzfyMFNHt3x3/QTAZojfl/MKZ2whihePv6wLsFPI2EBS6GIQOWm0z/.../59w8ph0dphrfSju2qZR2KU4xmYzokDq577coizIECj8BrpADVd8q4A5KDook0VbtRztbYaMC046u QChisEG4rqzHlzuZqPhMC1nt uDp8nJBYkMmLJ4tH3ZaYTkPhd2YaE1CmDjbMKM56UqxvR8qN5YWopEzuEB7a76KK SA3VJn5uWiOp4PUc1WR7JZA0OkfvFmIO2B6ARaCdZ5P8fpcob5fH 0GhtFh  (yu-gi-oh! power of chaos game for pc free download full version.exe)

1 / 68      (Malware)
http://a.jobcreditspy.net/hp/?q=7XPupjA8VaAFs12345WkOA69xGWoR5Kb1KRu3DT6k8YjejDYCjfHhNShGUtqzEqj5ts4Ozmgy6BQ1NFP5gKdHVoBsB8lnR3B3kRS2fdgeKYftU XzgT7OiLDov3Lzg/ r/iqJTOpfOQGW97TKn5AeuI9xWtjxRbaARwWjxEOe0ePvWsCt1H8JxDN1LfcoJQ7mHu38/j2RwVWNxIsdp bo2JZkBgiKd1/buvvwijDRGk9xp2lZLtC/js3AwGWxa4SUabIx6AZs9JkRd6mVeyz97EOK5XHP1ljUidz8HL4puDI6gGPdbNmZ5lb0wOf6gtjIXOT6GRCSkqBWcvh6yyjSarL1JYYV92kYI03epHkvTNIv7hFAiAZu/zzdR0duKI 37zUDr3LqcsL qjv5EbB3dBCocaPPTW3qjz Bt6m70sAQ2uTyWxXfufzIz/jXlwbuo/o8S2MG9dPVrcdGUxc8JcraR9 q/St7v4N3nDd5YDCTCbNmoloFTKd1oi1LZ NMqfD4iADaQXndmQbomsnJYseGZUwJ/RCZ5lRWbTeRcc/0JcNXlsc1wx6QwfDflZP1jGggNVraebScsoLnJUr9rByfPii8Q51LxwbpdXWzq8Vx/Twg7 a/Zm6E0kwZuz 5k73LBUaTE3wjPI Zzi1Kd1pLD8RVKu3K8c4rXQB0i/LaIX/YlYj5kBoCaitGTKpPPg4FIx// UG/M07bKZSqbwm6zlVmXGbGsSYDBbGfEuuR2hBKQWOzOOEXgStp6vfgYQHA9Hab7qu/4yyWfia5W EAVpNmh2pJpTl/.../YHXzDI6N6FX LJqHW6t6 VdlUV5tbQbsNgL1Vs5lrvztXO3GggTJ4gArhD9RzQpwIH  (free download yugioh power of chaos game full pc _ get free game,free ebook and free download.exe)

1 / 68      (Malware)
http://a.jobcreditspy.net/hp/?q=bxXF69Fq0G4PLCDWYSJSYDj/5r5RP1mDo kZvuXBQPhT3gGO Mv06agmT6ojVJKpe aLvXxYGUjYR66HyZKNwGQ1qNhBYf5Et CSbyhB8XK4hVsa9Z baHFa9pE8hrUIqzxOHSw38iwQLfBJu/nliwJdU1Z4VA3DPfeO/jnqw7Fz5n/g1O5y6/f/Yehp5cwXaIZh8av5DecxAr/0QU93qPHiHuDAMFEB9XcaB0ddN0qaatANmo4ALJdjRIiGKIR4NTkkY4DJ/p7itZ7KaZbCAX/5x/JlzJ2hUCxIPiQN58DIejCI0r8y0RYpbN3pTdaGCEHFFhiqTx5BXg64MyT2U6SYYdgXqGuAyEePtD gx//6m4gO09Z3esSJ2gRdPqC93WeXe7P73n79cGuuKdkNYQxI0r5RlLR4jScUiteLFse2HZMus3EseSVb5shDVMRojamjnOAz62IYlbYv/.../VvPQTtUB0S0F9j92R1nNVeIdewTP  (iso windows xp sp3 [limpio y sin modificaciones].exe)

The following 2 files have been seen to comunicate with a.jobcreditspy.net in live environments.

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.