home

yahoo_messenger.en.downloadastro.com

Domain Information

Server location:
Illinois, United States (US)

ASN:
AS32475 SINGLEHOP-INC - SingleHop,US

Root domain:
downloadastro.com

The domain yahoo_messenger.en.downloadastro.com has been seen to resolve to the following IP address.

108.163.213.235
lb1.forsetup.com
July 15, 2016

File downloads found at URLs served by yahoo_messenger.en.downloadastro.com.

0 / 68
http://yahoo_messenger.en.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=yahoo_messenger  (yahoo_messenger.exe)

The following 62 files have been seen to comunicate with yahoo_messenger.en.downloadastro.com in live environments.

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 108.163.213.235:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 108.163.213.235:80
UCBrowser.exe (by UCWeb)

TCP » 108.163.213.235:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 108.163.213.235:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 108.163.213.235:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 108.163.213.235:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 108.163.213.235:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.163.213.235:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 108.163.213.235:80
Client.exe

TCP » 108.163.213.235:80
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 108.163.213.235:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 71 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.