home

dl132.dl.secure-dl15.pw

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
secure-dl15.pw

The domain dl132.dl.secure-dl15.pw has been seen to resolve to the following 8 IP addresses.

54.192.195.17
server-54-192-195-17.iad53.r.cloudfront.net
February 27, 2016

54.192.195.8
server-54-192-195-8.iad53.r.cloudfront.net
February 27, 2016

54.192.195.218
server-54-192-195-218.iad53.r.cloudfront.net
February 27, 2016

54.192.195.94
server-54-192-195-94.iad53.r.cloudfront.net
February 27, 2016

54.192.195.65
server-54-192-195-65.iad53.r.cloudfront.net
February 27, 2016

54.192.195.48
server-54-192-195-48.iad53.r.cloudfront.net
February 27, 2016

54.192.195.42
server-54-192-195-42.iad53.r.cloudfront.net
February 27, 2016

54.192.195.22
server-54-192-195-22.iad53.r.cloudfront.net
February 27, 2016

File downloads found at URLs served by dl132.dl.secure-dl15.pw.

0 / 68
http://dl132.dl.secure-dl15.pw/update_v5.msi  (014f416eaf717cc581ddd78e74eea847)

The following 2 files have been seen to comunicate with dl132.dl.secure-dl15.pw in live environments.

TCP » 54.192.195.94:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.94:443
online-guardian.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.