home

intva31.messengermedia.info

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
messengermedia.info

The domain intva31.messengermedia.info has been seen to resolve to the following IP address.

52.72.142.4
ec2-52-72-142-4.compute-1.amazonaws.com
July 23, 2016

File downloads found at URLs served by intva31.messengermedia.info.

2 / 68      (false positives)
http://intva31.messengermedia.info/dl-pure/1203367/.../?bc=1203367&checksum=64325572&ephemeral=1&filename=adobe_flash_player.exe&cb=122521271&hashstring=sJnmeIDPzAPk&usefilename=true&executableroutePath=1202485&stub=true  (wrar420.exe)

The following 10 files have been seen to comunicate with intva31.messengermedia.info in live environments.

TCP » 52.72.142.4:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.72.142.4:80
UCBrowser.exe (by UCWeb)

TCP » 52.72.142.4:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.72.142.4:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.72.142.4:80
adobe_flash_player-71871229.exe

TCP » 52.72.142.4:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.72.142.4:80
adobe_flash_player-77344887.exe

TCP » 52.72.142.4:80
pmropn.exe (PremierOpinion by VoiceFive)

TCP » 52.72.142.4:80
updateadmin.exe

TCP » 52.72.142.4:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.