home

s205.kumpulbagi.id

Domain Information

Server location:
Singapore, Singapore (SG)

ASN:
AS59253 LSW-SG Leaseweb Asia Pacific pte. ltd., SG

Root domain:
kumpulbagi.id

The domain s205.kumpulbagi.id has been seen to resolve to the following IP address.

209.58.183.7
RJJB007.local
June 23, 2016

File downloads found at URLs served by s205.kumpulbagi.id.

0 / 68
http://s205.kumpulbagi.id/download?e=_ReaclvBX0hLoXJr4ge_XNcECOlKV7zzad5pJTbdqc7WVkXPpZN34HzZ2mvE_TYpS6m0_lkE4GXUYTk4PtliyEIo4G2qPRPPYDZRL_2aC2lOI6sV77RISaNbjLb3ImCVqVxhFqMukfxs4442K44L3fysPHf8uBbH1bgRoWmWAfy_1pC8lM5yIW_DWWMYP21KpM9UhgfOfAMIoSKniQj3sA  (winrar-x64-521.zip)

0 / 68
http://s205.kumpulbagi.id/download?e=mfpFT4rao5FJ5HDweABf5RD7VMlxki5Ielsf-d50OwXOksGIWDTHxCx2JCVENuHX9BAUVr3udOrYIO6lqlUBTK22Qhxiuio9uw-8o35E1UJP_QY5byPI2kjHDOxM0MZpKhKiEZZv0Ox3rnkjRVg_nwyJAws7b6pCjWjIcdLMch1jS3iRQHFXqwhzIWkXZHs88LJlkIvNHuPgfxF3lDctYA  (1a5831e3-4546-8769-10b5-8a1b18d86b1f_1d1e051e0812d13)

0 / 68
http://s205.kumpulbagi.id/download?e=brTYelSmZSH_2sIVEDRPYqHSbkO-0Oqzz_O2tZPo6u-R6oidCy0sPvleiAgUmWS_wwHkSUjMEeXKAJmIVT4BaWVakBP27A30ttN4JggYVkkJzjufZuCAI3soh5-_exg4v6CeWIJ7wOWLxbuJy78izokrzKQzKPEwi4m1icuLCSy_9SOI_on9MiSvW57jbsefMhEEnA-v2EQZSuG9LL2TH8r8wrJgZi5-zLo8qPrsoh5rRuQvYAoYb8s7RH_zKQ0jzSEagj_fzPXoy-eMFUN72Q  (fbec8091-d2ec-ed1e-1ce3-06c9b6baafc6_1d1cde964eaf602)

40 / 68    (Malware)
http://s205.kumpulbagi.id/download?e=dtS6lUtQuZTBJY-YS1tnb8DM7Y5q-3C0VjnpV9nQvE4eSdySKKOpaK-HYzwFI1Q51W5MEd2Rjf0Huaya5n6pgoYQ39eVx8FbyGpYeoOryskxZj4BVioxfszNijBROQdxRy7yQNjxoWhrlnUiVsTMK3fKyT5l4YiL4tZkJDhA291I1m41cXu4sFi84PmfT2OpyxqjCtnvQN7_B7LIRKSfLw  (aimp_3.60.1495.exe)

The following 3 files have been seen to comunicate with s205.kumpulbagi.id in live environments.

TCP » 209.58.183.7:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.58.183.7:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 209.58.183.7:80
UCBrowser.exe (UC Browser by UCWeb)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.