home

latam.iframed.cn.saoweb.io

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
saoweb.io

The domain latam.iframed.cn.saoweb.io has been seen to resolve to the following 8 IP addresses.

54.192.195.67
server-54-192-195-67.iad53.r.cloudfront.net
March 2, 2016

54.192.195.32
server-54-192-195-32.iad53.r.cloudfront.net
March 2, 2016

54.192.195.235
server-54-192-195-235.iad53.r.cloudfront.net
March 2, 2016

54.192.195.208
server-54-192-195-208.iad53.r.cloudfront.net
March 2, 2016

54.192.195.182
server-54-192-195-182.iad53.r.cloudfront.net
March 2, 2016

54.192.195.180
server-54-192-195-180.iad53.r.cloudfront.net
March 2, 2016

54.192.195.173
server-54-192-195-173.iad53.r.cloudfront.net
March 2, 2016

54.192.195.149
server-54-192-195-149.iad53.r.cloudfront.net
March 2, 2016

File downloads found at URLs served by latam.iframed.cn.saoweb.io.

0 / 68
http://latam.iframed.cn.saoweb.io/content/14/promotion/volta-as-aulas---hora-de-aventura/br/promo.bts.2016.br.4/.../CN-Wallpaper.zip  (8e80dffec4e8c17cedf68a2e1cdda43c)

The following 6 files have been seen to comunicate with latam.iframed.cn.saoweb.io in live environments.

TCP » 54.192.195.32:443
online-guardian-v2.0.9.exe

TCP » 54.192.195.182:443
online-guardian-v2.0.9.exe

TCP » 54.192.195.235:443
online-guardian.exe

TCP » 54.192.195.235:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.182:443
apptrailers.exe

TCP » 54.192.195.32:443
online-guardian-v2.0.9.exe

TCP » 54.192.195.182:443
onlineguardian-v2.exe

TCP » 54.192.195.182:443
online-guardian-v2.0.9.exe

TCP » 54.192.195.235:443
onlineguardian-v2.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.