home

dl.mega-search.ws

Domain Information

Server location:
California, United States (US)

ASN:
AS3561 CENTURYLINK-LEGACY-SAVVIS - Savvis, US

Root domain:
mega-search.ws

The domain dl.mega-search.ws has been seen to resolve to the following IP address.

64.70.19.203
mailrelay.203.website.ws
June 7, 2016

File downloads found at URLs served by dl.mega-search.ws.

0 / 68
http://dl.mega-search.ws/megadecoder-windows.exe  (megadecoder-setup.exe)

The following 16 files have been seen to comunicate with dl.mega-search.ws in live environments.

TCP » 64.70.19.203:15000
swk1as1gw95owe.exe (League of Legends Cache by Riot Games)

TCP » 64.70.19.203:80
AppleMobileDeviceService.exe (by Apple)

TCP » 64.70.19.203:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.70.19.203:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.70.19.203:80
cloudprinter.exe

TCP » 64.70.19.203:80
dbxsvc.exe (Dropbox by Dropbox)

TCP » 64.70.19.203:1111
microsoftcorp.exe

TCP » 64.70.19.203:80
nbteroetpl.exe

TCP » 64.70.19.203:80
hh.exe (IrfanView Installer by Irfan Skiljan)

TCP » 64.70.19.203:8888
minerd.exe

TCP » 64.70.19.203:80
FBAgent.exe (AFBAgent by ASUSTeK Computer)

TCP » 64.70.19.203:80
hotfresh.exe

TCP » 64.70.19.203:80
online-guardian-v2.0.9.exe

TCP » 64.70.19.203:80
java.exe

TCP » 64.70.19.203:80
DiscSoftBusService.exe (DAEMON Tools Lite by Disc Soft)

TCP » 64.70.19.203:15000
ipdgqv54a5.exe

cineblog01.ws

fidora-online.ws

keygen-0day.ws

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.