home

d3.myairbridge.com

MYAIRBRIDGE LTD.

Domain Information

The domain d3.myairbridge.com registered by MYAIRBRIDGE LTD. was initially registered in July of 2012 through ASCIO TECHNOLOGIES, INC. DANMARK - FILIAL AF ASCIO TECHNOLOGIES, INC. USA. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
ASCIO TECHNOLOGIES, INC. DANMARK - FILIAL AF ASCIO TECHNOLOGIES, INC. USA

Server location:
Arizona, United States (US)

Create date:
Monday, July 30, 2012

Expires date:
Saturday, July 30, 2016

Updated date:
Saturday, March 12, 2016

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc., US

Root domain:
myairbridge.com

Whois:
1 myairbridge.com record

The domain d3.myairbridge.com has been seen to resolve to the following 4 IP addresses.

104.23.122.189
May 25, 2016

104.23.123.189
May 25, 2016

104.20.22.148
May 17, 2016

104.20.32.148
May 17, 2016

File downloads found at URLs served by d3.myairbridge.com.

0 / 68
https://d3.myairbridge.com/package/.../myairbridge-TTPGY979DE6429A7.zip  (cf492f0a7e5539590fe0158c0c36002a)

0 / 68
https://d3.myairbridge.com/package/.../myairbridge-MVKA1MNLFHXGMCYP.zip  (e7ca9ae05c5f8b52963094afe46b7227)

0 / 68
https://d3.myairbridge.com/filev2/.../flash_player21_install.exe  (flashplayer21_ak_instal.exe)

2 / 68      (Malware)
https://d3.myairbridge.com/filev2/.../flashplayer_install21.exe  (35e4d4db888dcf90948e4e399d57086e)

0 / 68
https://d3.myairbridge.com/filev2/.../booter_api.rar?dlid=CCME0D4CP2TUFYMGPSS5EB  (booter api.rar)

0 / 68
https://d3.myairbridge.com/filev2/.../VTS_01_0.IFO?dlid=TL3DNLRS8W35FGUKYO4AFZ  (b238972c13a0736d8ce5a3a10ce797e5)

1 / 68      (inconclusive)
https://d3.myairbridge.com/filev2/.../flashplayer21_ka_installl.exe  (flashplayer21_ak_installl.exe)

0 / 68
https://d3.myairbridge.com/filev2/.../Flash_Player_Install.exe  (flashplayer21_ak_instal.exe)

0 / 68
https://d3.myairbridge.com/filev2/.../Meu_Filme....wlmp?dlid=K4JICZRK79IZVK1IM8G694  (meu filme....wlmp)

0 / 68
https://d3.myairbridge.com/filev2/.../ejendomme_samt_hoteller_guld.xlsx?dlid=AWG0BLAECL2DUIDLCJYCTL  (b16171a0-13b9-e224-349c-c7c806cbbad2_1d1b680261dec4f)

0 / 68
https://d3.myairbridge.com/filev2/.../flashplayer21_ka_install.exe  (flashplayer21_ak_instal.exe)

2 / 68      (Malware)
https://d3.myairbridge.com/filev2/.../flashplayer_install21.exe  (35e4d4db888dcf90948e4e399d57086e)

1 / 68      (inconclusive)
https://d3.myairbridge.com/filev2/.../flashplayer2.1_ka_iinstalll.exe  (flashplayer21_ak_installl.exe)

0 / 68
https://d3.myairbridge.com/filev2/.../flashplayer21_ka_install.exe  (4c3bc4371ac9090dda836b36898a7dd9)

0 / 68
https://d3.myairbridge.com/filev2/.../flashplayer_21_ka_install.exe  (flashplayer21_ak_instal.exe)

URL:
http://d3.myairbridge.com/

SSL certificate subject:
CN=ssl368776.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.