home

usv.goodgrubstadium.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
goodgrubstadium.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.InstallCore (M)
100.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted (variant)
50.00%

The domain usv.goodgrubstadium.com has been seen to resolve to the following 16 IP addresses.

52.85.131.55
server-52-85-131-55.iad53.r.cloudfront.net
May 18, 2016

52.85.131.46
server-52-85-131-46.iad53.r.cloudfront.net
May 18, 2016

52.85.131.24
server-52-85-131-24.iad53.r.cloudfront.net
May 18, 2016

52.85.131.234
server-52-85-131-234.iad53.r.cloudfront.net
May 18, 2016

52.85.131.208
server-52-85-131-208.iad53.r.cloudfront.net
May 18, 2016

52.85.131.201
server-52-85-131-201.iad53.r.cloudfront.net
May 18, 2016

52.85.131.130
server-52-85-131-130.iad53.r.cloudfront.net
May 18, 2016

52.85.131.64
server-52-85-131-64.iad53.r.cloudfront.net
May 18, 2016

54.192.195.57
server-54-192-195-57.iad53.r.cloudfront.net
January 3, 2016

54.192.195.39
server-54-192-195-39.iad53.r.cloudfront.net
January 3, 2016

54.192.195.226
server-54-192-195-226.iad53.r.cloudfront.net
January 3, 2016

54.192.195.199
server-54-192-195-199.iad53.r.cloudfront.net
January 3, 2016

54.192.195.186
server-54-192-195-186.iad53.r.cloudfront.net
January 3, 2016

54.192.195.171
server-54-192-195-171.iad53.r.cloudfront.net
January 3, 2016

54.192.195.142
server-54-192-195-142.iad53.r.cloudfront.net
January 3, 2016

54.192.195.129
server-54-192-195-129.iad53.r.cloudfront.net
January 3, 2016

File downloads found at URLs served by usv.goodgrubstadium.com.

1 / 68      (PUP)
http://usv.goodgrubstadium.com/Setup.exe  (0a6a4e18a48803ae7a5858d0429fb0ad)

2 / 68      (PUP)
http://usv.goodgrubstadium.com/Setup.exe  (34b99e20c599c8e50cf29ec6ba871774)

The following file have been seen to comunicate with usv.goodgrubstadium.com in live environments.

TCP » 54.192.195.171:443
browser.exe (Browser)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.