home

get.utedevour.one

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
utedevour.one

The domain get.utedevour.one has been seen to resolve to the following 16 IP addresses.

52.84.125.203
server-52-84-125-203.iad16.r.cloudfront.net
September 16, 2016

52.84.125.198
server-52-84-125-198.iad16.r.cloudfront.net
September 16, 2016

52.84.125.178
server-52-84-125-178.iad16.r.cloudfront.net
September 16, 2016

52.84.125.114
server-52-84-125-114.iad16.r.cloudfront.net
September 16, 2016

52.84.125.75
server-52-84-125-75.iad16.r.cloudfront.net
September 16, 2016

52.84.125.41
server-52-84-125-41.iad16.r.cloudfront.net
September 16, 2016

52.84.125.37
server-52-84-125-37.iad16.r.cloudfront.net
September 16, 2016

52.84.125.204
server-52-84-125-204.iad16.r.cloudfront.net
September 16, 2016

52.84.125.124
server-52-84-125-124.iad16.r.cloudfront.net
September 1, 2016

52.84.125.117
server-52-84-125-117.iad16.r.cloudfront.net
September 1, 2016

52.84.125.96
server-52-84-125-96.iad16.r.cloudfront.net
September 1, 2016

52.84.125.61
server-52-84-125-61.iad16.r.cloudfront.net
September 1, 2016

52.84.125.8
server-52-84-125-8.iad16.r.cloudfront.net
September 1, 2016

52.84.125.184
server-52-84-125-184.iad16.r.cloudfront.net
September 1, 2016

52.84.125.144
server-52-84-125-144.iad16.r.cloudfront.net
September 1, 2016

52.84.125.140
server-52-84-125-140.iad16.r.cloudfront.net
September 1, 2016

File downloads found at URLs served by get.utedevour.one.

0 / 68
http://get.utedevour.one/?lo_PLUS_9CYj0Wtdc_SLASH_HpQvurSs2gOn27FWOxfILqRae9TfmM_EQUALS_&flp=1  (ea sports ufc 2 pc.rar)

0 / 68
http://get.utedevour.one/?HIEza9LaNr0Wx6OXtIs97b_SLASH_aQOuqJzQzDov35svNjZ4k3y0e5bpxOxV6KhwRZdka&flp=1  (hitman absolution professional edition. pc. prophet torrent.rar)

1 / 68      (PUP)
http://get.utedevour.one/?Ku6qOxMFbmaeBZ5mYS4zNL4mB8Lh8Lz2lj_SLASH_21xRCkRk_EQUALS_  (ryal_mdryd_galtt_sray.exe)

The following 25 files have been seen to comunicate with get.utedevour.one in live environments.

TCP » 52.84.125.203:443
strummer.exe (Strummer)

TCP » 52.84.125.75:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.61:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.61:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.144:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.96:80
clearscreenplayerbrowser.exe

TCP » 52.84.125.144:443
oozes.exe (Oozes)

TCP » 52.84.125.184:80
browser.exe (Browser)

TCP » 52.84.125.117:443
browser.exe (Browser)

TCP » 52.84.125.117:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.41:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.114:80
Client.exe

TCP » 52.84.125.203:443
stormwatchapp.exe

TCP » 52.84.125.203:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.203:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.37:443
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 52.84.125.75:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.84.125.117:80
Weather.exe (WeatherBug Desktop by AWS Convergence Technologies)

TCP » 52.84.125.144:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.178:443
browser.exe (Browser)

 
Latest 20 of 69 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.