home

s2.cloudfrount.cf

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
cloudfrount.cf

The domain s2.cloudfrount.cf has been seen to resolve to the following 3 IP addresses.

54.208.99.166
ec2-54-208-99-166.compute-1.amazonaws.com
April 14, 2016

104.27.144.198
March 4, 2016

104.27.145.198
March 4, 2016

File downloads found at URLs served by s2.cloudfrount.cf.

0 / 68
https://s2.cloudfrount.cf/tor/a3N5cmIzcy56Ymlnei5jb20=/.../DTLite.exe  (dtlite4402-0131.exe)

0 / 68
https://s2.cloudfrount.cf/tor/dHRtbGhmZjMuemJpZ3ouY29t/.../CS 1.6.exe  (0f4ef5a4e125b3bd253473e9977fdca5)

The following 3 files have been seen to comunicate with s2.cloudfrount.cf in live environments.

TCP » 54.208.99.166:80
neabas.exe (Maskiseft Visaal Studio 2010 by Maskiseft Corporatien)

TCP » 54.208.99.166:80
PastaLeadsService.exe (PastaLeadsService)

TCP » 54.208.99.166:80
elroulq.exe (by Anurisel Corporatu)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.