home

disturbedfestive.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PCCare.advanced.Installer.Meta (L)
100.00%

The domain disturbedfestive.com has been seen to resolve to the following IP address.

54.208.99.166
ec2-54-208-99-166.compute-1.amazonaws.com
August 23, 2016

File downloads found at URLs served by disturbedfestive.com.

1 / 68      (PUP)
http://disturbedfestive.com/d/p/anaheimgolf.net?k=c08b0892d2b38f9416aebb3f271efd1c.1468829966.562.1&r=http://www.searchcactus.com/.../trackofr.asp?chnl=199884&ofr=1075729  (advancedpc.exe)

The following 3 files have been seen to comunicate with disturbedfestive.com in live environments.

TCP » 54.208.99.166:80
neabas.exe (Maskiseft Visaal Studio 2010 by Maskiseft Corporatien)

TCP » 54.208.99.166:80
PastaLeadsService.exe (PastaLeadsService)

TCP » 54.208.99.166:80
elroulq.exe (by Anurisel Corporatu)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.