home

uk-mg-bt.mail.yahoo.com

Domain Information

Server location:
California, United States (US)

ASN:
AS10310 YAHOO-1 - Yahoo!

Root domain:
yahoo.com

The domain uk-mg-bt.mail.yahoo.com has been seen to resolve to the following 4 IP addresses.

206.190.57.61
r2.ycpi.vip.dcb.yahoo.net
February 5, 2014

216.115.101.179
r2.ycpi.vip.nyc.yahoo.net
February 5, 2014

206.190.57.60
r1.ycpi.vip.dcb.yahoo.net
February 5, 2014

216.115.101.178
r1.ycpi.vip.nyc.yahoo.net
February 5, 2014

File downloads found at URLs served by uk-mg-bt.mail.yahoo.com.

0 / 68
https://uk-mg-bt.mail.yahoo.com/.../download?mid=2_0_0_21_350462_AI5UfbwAAA8MUq2SqwAAALfsbBQ&fid=My emails&pid=2&clean=0&appid=YahooMailNeo  (phototocartoon.exe)

The following 38 files have been seen to comunicate with uk-mg-bt.mail.yahoo.com in live environments.

TCP » 206.190.57.60:443
ekrn.exe (ESET Smart Security by ESET)

TCP » 206.190.57.60:80
snackr.exe

TCP » 206.190.57.60:443
plsapp.exe (plsapp.exe by Sendori)

TCP » 206.190.57.60:443
ContentExplorer.exe (ContentExplorer)

TCP » 206.190.57.60:80
Seagate.Dashboard.Uploader.exe (Seagate Dashboard by Seagate Technology)

TCP » 206.190.57.60:443
Client.exe

TCP » 206.190.57.60:80
pokki.exe (Pokki)

TCP » 206.190.57.60:443
PastaLeadsService.exe (PastaLeadsService)

TCP » 206.190.57.60:443
Client.exe

TCP » 206.190.57.60:443
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 206.190.57.61:80
avwebgrd.exe (Avira Professional Security by Avira Operations GmbH & Co. KG)

TCP » 206.190.57.61:80
Seagate.Dashboard.Uploader.exe (Seagate Dashboard by Seagate Technology)

TCP » 206.190.57.61:80
xlqEng1.exe (XLQ by Leo van Rijswijk)

TCP » 206.190.57.61:80
palemoon.exe (Pale Moon by Moonchild Productions)

TCP » 206.190.57.61:443
saina.exe (Saina by Mozilla)

TCP » 206.190.57.61:443
ekrn.exe (ESET Smart Security by ESET)

TCP » 206.190.57.61:80
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 206.190.57.61:80
yahoomessenger.exe (Yahoo! Messenger by Yahoo!)

TCP » 206.190.57.61:443
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 206.190.57.61:443
HD-Network.exe (BlueStacks by BlueStack Systems)

 
Latest 20 of 48 files

flickr.com

tumblr.com

ymail.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.