home

get-goal.info

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain get-goal.info is registered by proxy through PDR Ltd. d/b/a PublicDomainRegistry.com. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
2 get-goal.info records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Bundler.Installer.Meta (M), PUP.NewMedia.Installer.NewMediaHoldings.Installer (M), PUP.installCore (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.InstallCore.S (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.RE48 (M), PUP.InstallCore.Internet.Installer.Meta (M), PUP.InstallCore.RES (M)
100.00%

F-Secure
Gen:Variant.Adware.Kazy
4.76%

VIPRE Antivirus
Threat.4786018
4.76%

Dr.Web
Trojan.InstallCore.152
4.76%

ESET NOD32
Win32/InstallCore.ZM potentially unwanted application
4.76%

Bkav FE
W32.HfsAdware
4.76%

Malwarebytes
PUP.Optional.InstallCore.A
4.76%

K7 AntiVirus
Adware
4.76%

G Data
Win32.Application.InstallCore.EG
4.76%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
4.76%

Panda Antivirus
PUP/Multitoolbar
4.76%

AVG
Generic
4.76%

The domain get-goal.info has been seen to resolve to the following 3 IP addresses.

54.88.203.136
ec2-54-88-203-136.compute-1.amazonaws.com
February 18, 2016

54.88.93.196
ec2-54-88-93-196.compute-1.amazonaws.com
February 11, 2016

54.84.209.207
ec2-54-84-209-207.compute-1.amazonaws.com
June 30, 2015

File downloads found at URLs served by get-goal.info.

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=AzawAzc3Aza1AM==&osos=VdluDrW3cw==&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sLQDj rcWDK4m7z0RvmiWAkDjIKiWXzgdNz7dOTMFASDPDdlChV81OZg3Nz73AZaz&pd=2323UmxJ2d4tcdWm2H2PcmLu7dWt&campaignId=9jn0AzMwATn4AZMq  (windowsmoviemakersetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=ATL0NTA0AzCRAg==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzMdAZMzOZMFASDPDdlChV81OZawAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Aza0OTM0AZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=ATc1NjL3AjgyNg==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck13IKFy7Xam2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXz7ROT7dOTMFASDPDdlChV81Aza4Azc3AZaz&pd=2323Um5wcHAtDdV0UmNJ i==&campaignId=9jn0AzidOZgyAZMq  (winrarsetup.exe)

1 / 68      (Adware)
http://get-goal.info/?dl=1&pi=Azn4AzayNTC4AM==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWTVgm7dREhKVuvmAWASDChTMm7dlChV8yOTg3AzgwOTnm7K2pDZ1fNTCyATaROTn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AzA4ATLyAZMq  (firefoxsetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=AjC3OZLwOTnyAg==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXznRNZidOTMFASDPDdlChV80NZiRAZA3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AzAdOZLdAZMq  (javaruntimeenvironmentsetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=Ajg4NzcyAT71Aw==&osos=VdluDrW3cw==&dr=cHaWck1C 32u rWPDk1t7KFPDdVyvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVngm7dREhKVuvmAWASDChTMm7dlChV84NzLRNzCwOTnm7K2pDZ1fNjc0Aj7dOZMyAw==&pd=2323Umluc3xP rwt mV3UmNJ i==&campaignId=9jn0AjgRNZg4AZMq  (downloadmanagersetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=ATAROZLwOZLFNi==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1PDH2j rVP mVyvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWx0am7dREhKVuvmAWASDChTMm7dlChV8dOTLFOZCwOTnm7K2pDZ1fNzCFAznzAjnyAw==&pd=2323Um5wcHNGIKFCUmNJ i==&campaignId=9jn0AzAFNjgyAZMq  (adwcleanersetup.exe)

1 / 68      (Adware)
http://get-goal.info/?dl=1&pi=Ajg4NzcRNZAdAi==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXi1vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1NKkDj rcWDK4m7z0RvmiWAkDjIKiWXzndAzgFOZMFASDPDdlChV8dNZC0AZgzAjiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajg3OTLwAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=ATawAzMwNTcROM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1zcrW0IKDFvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV84OTCdNjCwOTnm7K2pDZ1fAzLwNj73NzMyAw==&pd=2323UmxJ2dFB d5CDrW3 QFj d0=&campaignId=9jn0AzA0NZi0AZMq  (spotifysetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=ATgyNznRNZaFAM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1EIK1wvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV80NjgzNzCwOTnm7K2pDZ1fNTM3NjA0OTMyAw==&pd=2323Um5j2rlJ m5C KlyDSFj d0=&campaignId=9jn0Aza4NzawAZMq  (gimpsetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1z2rVP SDphXAmD3vpDZ0m rcWDK4m7dAWSVim7dREhKVuvmAWASDChTMm7dlChV8yOTLdNjCwOTnm7K2pDZ1fAj7yNjadNzMyAw==&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0AjgFNTLyAZMq  (steamsetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=ATLRAzi4OTnwNw==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1E dWE rLtDK5y2rgmIT1zvm2yIKiWvmREhKDyvmNjhLDSvmNBDz1mcQDjhTnmDZ0wvmNpDZ1fOTCROZC4AZCRvm5EIKiWXzg1AZcdNzAyNZa=&pd=2323UENJDEx37XvlUK2l2kFj d0=&campaignId=9jn0AzM3Azn4AZMq  (googleearthsetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=AzAwNjC0OTCdNw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1tDKxp7S1w r5FDXam2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fAZARNT7FAZCRvm5EIKiWXzaFNZMdNZcwAjA=&pd=2323Um2J dit7XswUmNJ i==&campaignId=9jn0AzaFNzidAZMq  (windowsmediaplayersetup.exe)

1 / 68      (Adware)
http://get-goal.info/?dl=1&pi=ATi1NTLRNjndAg==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1j7dRl7KFlcQD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV8FAza1NjCwOTnm7K2pDZ1fOTc1OZa1NzMyAw==&pd=2323Um5j2rldDS1E dWCUmNJ i==&campaignId=9jn0AzayNzC4AZMq  (ccleanersetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV8FNZnwAzgwOTnm7K2pDZ1fNzn3AzayOZn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AjCwOTLdAZMq  (firefoxsetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=AzA1OTc4AzAwNi==&osos=VdluDrW3cw==&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWTVgm7dREhKVuvmAWASDChTMm7dlChV8FAjM4AZMROTnm7K2pDZ1fNZMyNZnyNTnyAw==&pd=2323Um2l2k1oDXvlUmNJ i==&campaignId=9jn0AznFAza0AZMq  (openofficesetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=Ajg3NTi1ATCRAM==&osos=VdluDrW3cw==&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1LSkDj rcWDK4m7z0RvmiWAkDjIKiWXzcwOZ7dOTMFASDPDdlChV8zOTCzOT73AZaz&pd=2323UmxJ2d4tcdWm2H2PcmLu7dWt&campaignId=9jn0AzMRAza0AZMq  (windowsmoviemakersetup.exe)

1 / 68      (Adware)
http://get-goal.info/?dl=1&pi=ATL0Njn4OTa1NM==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzMdAZMzOZMFASDPDdlChV81OZawAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzA0NTg4AZMq  (googlechromesetup.exe)

12 / 68    (Adware)
http://get-goal.info/?dl=1&pi=ATAFNzczOT74Oi==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1ZSkDj rcWDK4m7z0RvmiWAkDjIKiWXzc4AjAzOZMFASDPDdlChV84OTiyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzM3Nj7wAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=ATM0ATn4AZMdNw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1mIKRlemlB rnm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzgzNjL3OTMFASDPDdlChV8wNjAdNzLFAZaz&pd=2323Um5j2rlJ Q1PDr1pcmLu7dWt&campaignId=9jn0Aza3Aji0AZMq  (filezillasetup.exe)

1 / 68      (PUP)
http://get-goal.info/?dl=1&pi=AT71NzndAzgyAg==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1PDH2j rVP mVyvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV83NzLRAzMROTnm7K2pDZ1fNTMRNzM0NjnyAw==&pd=2323Um5wcHNGIKFCUmNJ i==&campaignId=9jn0AzLROZn0AZMq  (adwcleanersetup.exe)

URL:
http://get-goal.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.