home

get.evitating.bid

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
evitating.bid

The domain get.evitating.bid has been seen to resolve to the following 39 IP addresses.

54.230.193.129
server-54-230-193-129.iad53.r.cloudfront.net
September 15, 2016

54.230.193.81
server-54-230-193-81.iad53.r.cloudfront.net
September 15, 2016

54.230.193.30
server-54-230-193-30.iad53.r.cloudfront.net
September 15, 2016

54.230.193.19
server-54-230-193-19.iad53.r.cloudfront.net
September 15, 2016

54.230.193.238
server-54-230-193-238.iad53.r.cloudfront.net
September 15, 2016

54.230.193.234
server-54-230-193-234.iad53.r.cloudfront.net
September 15, 2016

54.230.193.181
server-54-230-193-181.iad53.r.cloudfront.net
September 15, 2016

54.230.193.144
server-54-230-193-144.iad53.r.cloudfront.net
September 15, 2016

52.84.125.128
server-52-84-125-128.iad16.r.cloudfront.net
August 20, 2016

52.84.125.62
server-52-84-125-62.iad16.r.cloudfront.net
August 20, 2016

52.84.125.55
server-52-84-125-55.iad16.r.cloudfront.net
August 20, 2016

52.84.125.42
server-52-84-125-42.iad16.r.cloudfront.net
August 20, 2016

52.84.125.33
server-52-84-125-33.iad16.r.cloudfront.net
August 20, 2016

52.84.125.7
server-52-84-125-7.iad16.r.cloudfront.net
August 20, 2016

52.84.125.231
server-52-84-125-231.iad16.r.cloudfront.net
August 20, 2016

54.192.19.74
server-54-192-19-74.iad12.r.cloudfront.net
August 16, 2016

54.192.19.57
server-54-192-19-57.iad12.r.cloudfront.net
August 16, 2016

54.192.19.47
server-54-192-19-47.iad12.r.cloudfront.net
August 16, 2016

54.192.19.31
server-54-192-19-31.iad12.r.cloudfront.net
August 16, 2016

54.192.19.225
server-54-192-19-225.iad12.r.cloudfront.net
August 16, 2016

54.192.19.178
server-54-192-19-178.iad12.r.cloudfront.net
August 16, 2016

54.192.19.165
server-54-192-19-165.iad12.r.cloudfront.net
August 16, 2016

54.192.19.160
server-54-192-19-160.iad12.r.cloudfront.net
August 16, 2016

52.84.125.64
server-52-84-125-64.iad16.r.cloudfront.net
August 16, 2016

52.84.125.25
server-52-84-125-25.iad16.r.cloudfront.net
August 16, 2016

52.84.125.249
server-52-84-125-249.iad16.r.cloudfront.net
August 16, 2016

52.84.125.241
server-52-84-125-241.iad16.r.cloudfront.net
August 16, 2016

52.84.125.227
server-52-84-125-227.iad16.r.cloudfront.net
August 16, 2016

52.84.125.194
server-52-84-125-194.iad16.r.cloudfront.net
August 16, 2016

52.84.125.184
server-52-84-125-184.iad16.r.cloudfront.net
August 16, 2016

 
Showing 30 of 39 IP Addresses

File downloads found at URLs served by get.evitating.bid.

0 / 68
http://get.evitating.bid/?PKOrsmnjb0bqQbC87NtbUO4lEv780hqouBhV7nc8S3hWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (3dsjuegoid556rar.exe.rar)

0 / 68
http://get.evitating.bid/?PKOrsmnjb0YPQyBA2oQDedk4GtLIf1ycAVSglsW_SLASH_Oz5WVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (league of legends hack.rar)

0 / 68
http://get.evitating.bid/?PKOrsmnjb0aWvldpBx_SLASH_b_SLASH_ebs9THOJyp3Mt_PLUS_S6vYoLE1WVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (gta- vice city.rar)

4 / 68      (PUP)
http://get.evitating.bid/?9ZJCd6T31cjVXWXVPDroa8uNDTv9koiT  (cafev.mp4.exe)

0 / 68
http://get.evitating.bid/?PKOrsmnjb0a8fLTr5a9Br_PLUS_R5khzHG5eHBxE6D7lUmu9WVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (fl studio 12 with crack.rar)

0 / 68
http://get.evitating.bid/?PKOrsmnjb0ZA1ERxe3iGzptfoXt_SLASH_3Nu_SLASH_Mt_PLUS_S6vYoLE1WVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (wrc 2- fia world rally championship full version.rar)

The following 151 files have been seen to comunicate with get.evitating.bid in live environments.

TCP » 52.84.125.173:443
Client.exe

TCP » 54.230.193.129:443
online-guardian-v2.0.9.exe

TCP » 54.192.19.160:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.192.19.57:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.192.19.31:80
saber.exe

TCP » 54.192.19.31:80
safwaf.exe

TCP » 54.230.193.129:443
online-guardian-v2.0.9.exe

TCP » 54.192.19.178:80
uvconverter.exe

TCP » 54.192.19.57:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.25:80
crossbrowse.exe (Crossbrowse)

TCP » 54.192.19.57:80
ed2k.exe (aMule by http://www.amule.org/)

TCP » 52.84.125.207:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.249:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 52.84.125.97:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.207:80
Client.exe

TCP » 54.192.19.225:80
saber.exe

TCP » 54.192.19.74:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.192.19.225:80
interhop.exe

TCP » 54.192.19.57:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.74:80
browser.exe (Browser)

 
Latest 20 of 292 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.