home

l7lu.mj.am

Domain Information

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

The domain l7lu.mj.am has been seen to resolve to the following 2 IP addresses.

5.196.44.188
r-2.mailjet.com
February 21, 2016

5.196.44.187
r-1.mailjet.com
February 21, 2016

File downloads found at URLs served by l7lu.mj.am.

0 / 68
http://l7lu.mj.am/link/l7lu/xw9tq74o90pv/2/.../aHR0cDovL2JvdXRpcXVlLmhlcmVkaXMuY29tL2luZGV4LnBocD9jb250cm9sbGVyPWdldC1maWxlJmtleT05NDQ1OWY1MTRjN2MxMjYzODQ3MTgxZWRlNDY4ZWMyMjNjMmJhODZmLThlZmEyNzgzOTI3OGNhNWZmMjk4YjcxMzM4ZTJmYjA5MjE4NDRiM2MmaWRfb3JkZXI9NDE2NTk5JnNlY3VyZV9rZXk9YzIyZjY1ZmI2NDA5Y2I5OTM4MGVjNTljYmFjMjhhNTk  (installheredis2015.exe)

The following 3 files have been seen to comunicate with l7lu.mj.am in live environments.

TCP » 5.196.44.187:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 5.196.44.187:80
internetenhancer.exe (Internet Enhancer)

TCP » 5.196.44.187:80
offerboxhttpproxy.exe (OfferBoxHTTPProxy by Aedge Performance BCN SL)

lvtp.mj.am

pr9i.mj.am

screenpresso.com

srg.mj.am

swhy.mj.am

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.