» data.getu.com
Overview
Analysis
IPs Addresses (15)
Downloads (6)
Network (140)
Website Detail
Related Domains (19)

data.getu.com

Conduit LTD.

Domain Information

The domain data.getu.com registered by Conduit LTD. was initially registered in March of 2000 through GODADDY.COM, LLC. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.

Registrant:

Conduit LTD.

Registrar:

GODADDY.COM, LLC

Server location:

Massachusetts, United States (US)

Create date:

Tuesday, March 7, 2000

Expires date:

Tuesday, March 7, 2017

Updated date:

Tuesday, April 28, 2015

ASN:

AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:

getu.com

Whois:

2 getu.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Update.Conduit.I, PUP.Update.Conduit.S

100.00%

Dr.Web

Trojan.DownLoad3.27407, Trojan.DownLoad3.31971, Adware.Conduit.132

83.33%

McAfee

Artemis!F4F61D88A3AD

33.33%

Trend Micro House Call

TROJ_GEN.F47V0915, TROJ_GEN.F47V1210

33.33%

Comodo Security

Heur.Suspicious

33.33%

VIPRE Antivirus

Conduit

33.33%

Bkav FE

W32.Clod64e.Trojan

33.33%

Boost by Reason

Adware.Update.Conduit.I

16.67%

herdProtect (fuzzy)

a variant of 802917392312919f7c78a2acb19c898727c0783b

16.67%

The domain data.getu.com has been seen to resolve to the following 15 IP addresses.

23.67.250.136

a23-67-250-136.deploy.static.akamaitechnologies.com

May 3, 2015

23.67.250.114

a23-67-250-114.deploy.static.akamaitechnologies.com

May 3, 2015

23.62.6.218

a23-62-6-218.deploy.static.akamaitechnologies.com

August 17, 2014

23.62.6.193

a23-62-6-193.deploy.static.akamaitechnologies.com

August 17, 2014

23.67.242.57

a23-67-242-57.deploy.static.akamaitechnologies.com

April 13, 2014

23.67.242.48

a23-67-242-48.deploy.static.akamaitechnologies.com

April 13, 2014

23.66.230.97

a23-66-230-97.deploy.static.akamaitechnologies.com

February 2, 2014

23.66.230.104

a23-66-230-104.deploy.static.akamaitechnologies.com

February 2, 2014

23.66.230.137

a23-66-230-137.deploy.static.akamaitechnologies.com

February 2, 2014

23.66.230.107

a23-66-230-107.deploy.static.akamaitechnologies.com

February 2, 2014

23.66.230.176

a23-66-230-176.deploy.static.akamaitechnologies.com

February 2, 2014

January 14, 2014

January 14, 2014

December 18, 2013

December 18, 2013

File downloads found at URLs served by data.getu.com.

2 / 68 (Adware)

http://data.getu.com/.../UBrowser.exe (f6cfadfb0e9827092bb3933453ed4325)

3 / 68 (Adware)

http://data.getu.com/updater/srl/.../ubrowser.exe (9e2212e8ac5c362eb2f9ee97146615dd)

2 / 68 (Adware)

http://data.getu.com/.../UBrowser.exe (ConduitUpdateSetup.exe)

8 / 68 (PUP)

http://data.getu.com/.../UBrowser.exe (f4f61d88a3ade618deed997e163a9aca)

1 / 68 (PUP)

http://data.getu.com/updater/srl/.../ubrowser.exe (25fe6401d2594c634b64d5a09cdb0a0d)

7 / 68 (PUP)

http://data.getu.com/updater/srl/.../ubrowser.exe (5c8cc2f688c97b78a5f022b9a1c161ee)

The following 140 files have been seen to comunicate with data.getu.com in live environments.

TCP » 23.62.6.193:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.193:80

browser.exe (Browser)

TCP » 23.62.6.193:443

kometa.exe (Kometa by Kometa Authors)

TCP » 23.62.6.193:80

apptrailers.exe

TCP » 23.66.230.107:80

eseme.exe

TCP » 23.66.230.107:80

client.exe (ClientWrapper)

TCP » 23.66.230.176:80

ibokihboaojdolnlgbejebillmaodnfc.crx

TCP » 23.66.230.176:80

cfgnifjaajfcpedaghpomgemfkkdiblj.crx

TCP » 23.66.230.97:80

eseme.exe

TCP » 23.66.230.97:80

wsmallstub.exe

TCP » 23.67.242.57:80

songza.crx

TCP » 23.67.242.57:80

sidebar.crx

TCP » 23.67.242.57:80

socialframework.crx

TCP » 23.67.242.57:80

facebook.crx

TCP » 23.67.242.57:80

365scores.crx

TCP » 23.67.242.57:80

accuweather.crx

TCP » 23.67.242.57:80

feedly.crx

TCP » 23.67.242.57:80

instagram.crx

TCP » 23.67.242.57:80

youtube.crx

TCP » 23.67.242.57:80

feedly.crx

Latest 20 of 143 files

URL:

http://data.getu.com/

Web server:

AmazonS3

Related Domains

conduit.com

conduit-services.com

greattoolbars.com

communitytoolbars.com

ourbusinesstoolbar.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.