home

safe-secure5.com

MB MANAGEMENT GROUP

Domain Information

The domain safe-secure5.com registered by MB MANAGEMENT GROUP was initially registered in February of 2016 through GODADDY.COM, LLC. The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
Washington, United States (US)

Create date:
Friday, February 5, 2016

Expires date:
Sunday, February 5, 2017

Updated date:
Friday, February 5, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Whois:
1 safe-secure5.com record

The domain safe-secure5.com has been seen to resolve to the following 8 IP addresses.

52.84.125.89
server-52-84-125-89.iad16.r.cloudfront.net
August 23, 2016

52.84.125.56
server-52-84-125-56.iad16.r.cloudfront.net
August 23, 2016

52.84.125.47
server-52-84-125-47.iad16.r.cloudfront.net
August 23, 2016

52.84.125.241
server-52-84-125-241.iad16.r.cloudfront.net
August 23, 2016

52.84.125.215
server-52-84-125-215.iad16.r.cloudfront.net
August 23, 2016

52.84.125.204
server-52-84-125-204.iad16.r.cloudfront.net
August 23, 2016

52.84.125.193
server-52-84-125-193.iad16.r.cloudfront.net
August 23, 2016

52.84.125.151
server-52-84-125-151.iad16.r.cloudfront.net
August 23, 2016

File downloads found at URLs served by safe-secure5.com.

0 / 68
http://safe-secure5.com/.../TurboCleanPC.exe  (turbocleanpc@fbid99=56df1e6597dd44.12305779.exe)

The following 15 files have been seen to comunicate with safe-secure5.com in live environments.

TCP » 52.84.125.47:443
apptrailers.exe

TCP » 52.84.125.89:443
UCBrowser.exe (by UCWeb)

TCP » 52.84.125.193:443
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 52.84.125.47:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.56:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.215:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.241:443
browser.exe (Browser)

TCP » 52.84.125.47:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.193:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.89:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.89:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.151:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.47:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 52.84.125.89:443
clearscreenplayerbrowser.exe

TCP » 52.84.125.193:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.193:443
playthruplayer.exe (Playthru Player)

TCP » 52.84.125.47:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.89:443
UCBrowser.exe (UC Browser by UCWeb)

URL:
http://safe-secure5.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.