home

a.ukcat.link

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ukcat.link

The domain a.ukcat.link has been seen to resolve to the following 3 IP addresses.

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
May 16, 2016

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
May 16, 2016

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
May 16, 2016

File downloads found at URLs served by a.ukcat.link.

2 / 68      (false positives)
http://a.ukcat.link/hp/?q=jBS BOVH/bxEcBCDWYRLbYrQCo0a2VM2qSmX6EtDovYy D60xHm/ry/ya/Fk3ePtdOattF2qU0h9OjHJIiTJRSSFb8UdUHqrnnqgM /w4wKYZBvrlw3h3RaMT7XCy7Y8aQd0D7GfWmi1ESy7r giP1agQa0O3SxZpFDJ/gk1lUHkUHALIfWcmsF0A1bCZL0fWA0GMR2GHPpi921oO05bQFvvCXpfBTcNXj2Ateadb8/Klz2OnzaBzCs8qqNaytloxO5RLPNECWqa82K3aGvYYmYGNynCLRa9BhS0XiY8fKA3khafWah6Cv4aZ giESnZrrMtytlnpFDJWhlZYrzIZrK3If gYubhmr2TTjcgRGC8d6itco3c82yMCPm/.../n6IQ35ge9Opev8Imtq2N 9kVXPACGbURD&external_id=1438280642169527786  (wrar420.exe)

The following 2 files have been seen to comunicate with a.ukcat.link in live environments.

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.