home

img.over-blog-kiwi.com

JFG NETWORKS

Domain Information

The domain img.over-blog-kiwi.com registered by JFG NETWORKS was initially registered in December of 2011 through GANDI SAS. The hosted servers are located in Toulouse, Midi-Pyrenees within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GANDI SAS

Server location:
Midi-Pyrenees, France (FR)

Create date:
Friday, December 23, 2011

Expires date:
Wednesday, December 23, 2015

Updated date:
Sunday, October 25, 2015

ASN:
AS43424 PROCEAU _PROCEAU_ s.a.r.l.,FR

Root domain:
over-blog-kiwi.com

Whois:
1 over-blog-kiwi.com record

The domain img.over-blog-kiwi.com has been seen to resolve to the following 5 IP addresses.

195.20.15.37
pfs-lb1e.srv.proceau.net
October 26, 2015

195.20.15.36
pfs-lb1d.srv.proceau.net
October 26, 2015

195.20.15.35
pfs-lb1c.srv.proceau.net
October 26, 2015

195.20.15.34
pfs-lb1b.srv.proceau.net
October 26, 2015

195.20.15.33
pfs-lb1a.srv.proceau.net
October 26, 2015

File downloads found at URLs served by img.over-blog-kiwi.com.

0 / 68
http://img.over-blog-kiwi.com/1/94/23/56/.../ob_1aa491_como-ver-la-tele-en-la-cama.jpg  (ff0bab90-99eb-9cf2-c995-a5afd3a51df8_1d1d7da45a5d000)

The following 15 files have been seen to comunicate with img.over-blog-kiwi.com in live environments.

TCP » 195.20.15.34:80
jingling.exe

TCP » 195.20.15.37:80
jingling.exe

TCP » 195.20.15.37:80
apptrailers.exe

TCP » 195.20.15.33:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 195.20.15.35:80
apptrailers.exe

TCP » 195.20.15.34:80
jingling.exe

TCP » 195.20.15.35:80
jingling.exe

TCP » 195.20.15.34:80
apptrailers.exe

TCP » 195.20.15.36:80
jingling.exe

TCP » 195.20.15.37:443
apptrailers.exe

TCP » 195.20.15.37:80
jinglingsinemafi.exe

TCP » 195.20.15.33:80
jingling.exe

TCP » 195.20.15.36:80
jingling.exe

TCP » 195.20.15.33:80
hack 2 adf.ly.exe

TCP » 195.20.15.34:80
hack 2 adf.ly.exe

TCP » 195.20.15.35:80
jingling.exe

TCP » 195.20.15.37:80
jingling.exe

TCP » 195.20.15.35:80
sys.exe

TCP » 195.20.15.37:80
jingling.exe

TCP » 195.20.15.34:443
ssn.exe (ssn)

 
Latest 20 of 32 files

Facebook:
Likes:  1
Shares:  14
Comments:  4

Twitter:
Shares:  149

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.