home

birdieu.xyz

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

The domain birdieu.xyz has been seen to resolve to the following 7 IP addresses.

31.170.178.179
August 26, 2016

185.28.193.192
192.193.28.185.gransy.com
August 26, 2016

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
February 11, 2016

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
February 11, 2016

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
February 11, 2016

52.11.167.137
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
June 30, 2015

52.27.23.115
ec2-52-27-23-115.us-west-2.compute.amazonaws.com
June 30, 2015

File downloads found at URLs served by birdieu.xyz.

0 / 68
http://birdieu.xyz/Download.exe  (3e7bf6cc5fbe7aafff796720f164f0d5)

The following 23 files have been seen to comunicate with birdieu.xyz in live environments.

TCP » 185.28.193.192:80
mdquickyksvc.exe (ModenQuick Service by PT. USENET)

TCP » 185.28.193.192:80
mdruyksvc.exe (ModernRu Service by PT. USENET)

TCP » 185.28.193.192:80
winmbskillssvc.exe (MobinSkills Service by PT.USENET)

TCP » 185.28.193.192:80
triggerlogs.exe

TCP » 185.28.193.192:80
wdm.bin

TCP » 185.28.193.192:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 185.28.193.192:80
winmbtuscasvc.exe (MobinTusca Service by PT.USENET)

TCP » 185.28.193.192:80
online-guardian-v2.0.9.exe

TCP » 185.28.193.192:80
Downloader.exe (Downloader)

TCP » 185.28.193.192:80
onlineguardian-v2.exe

TCP » 185.28.193.192:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 185.28.193.192:80
d9re-markablep23.exe

TCP » 185.28.193.192:80
winzillsvc.exe (ModenZill Service by PT.USENET)

TCP » 185.28.193.192:80
online-guardian.exe

TCP » 185.28.193.192:80
online-guardian-v2.exe

TCP » 185.28.193.192:80
update.exe (by Winner Updater Solutions)

TCP » 185.28.193.192:80
windilandsvc.exe (ModinLand Service by PT.USENET)

TCP » 185.28.193.192:80
windihepssvc.exe (ModinHeps Service by PT.USENET)

TCP » 185.28.193.192:80
windimixsvc.exe (ModinMix Service by PT.USENET)

TCP » 185.28.193.192:8000
buool.exe (LgGJSHMt)

 
Latest 20 of 25 files

June 30, 2015
a.birdieu.xyz

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.