home

ngo-jobs.net

Domain Information

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US

The domain ngo-jobs.net has been seen to resolve to the following IP address.

166.62.115.254
ip-166-62-115-254.ip.secureserver.net
August 4, 2016

File downloads found at URLs served by ngo-jobs.net.

0 / 68
http://ngo-jobs.net/wp-content/uploads/2016/.../ToR-field-officer.docx  (50f22143-7e51-a851-0329-3d5062a4da5d_1d1d96d33fa944a)

The following 13 files have been seen to comunicate with ngo-jobs.net in live environments.

TCP » 166.62.115.254:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 166.62.115.254:80
bfa0d68f.exe (Client Server Runtime Process by Microsoft)

TCP » 166.62.115.254:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 166.62.115.254:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 166.62.115.254:80
online-guardian-v2.0.9.exe

TCP » 166.62.115.254:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 166.62.115.254:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 166.62.115.254:80
onlineguardian-v2.exe

TCP » 166.62.115.254:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 166.62.115.254:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 166.62.115.254:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 166.62.115.254:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 166.62.115.254:80
online-guardian-v2.0.9.exe

TCP » 166.62.115.254:80
produpd.exe (produpd.exe by Vested Development, Inc)

removeallthreats.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.