home

www.bestuniversecontent.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
bestuniversecontent.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
HW32.Packed
50.00%

ESET NOD32
Win32/FusionCore.E potentially unwanted (variant)
50.00%

AVG
Generic_r
50.00%

Panda Antivirus
Generic Malware
50.00%

Qihoo 360 Security
QVM08.0.Malware.Gen
50.00%

Reason Heuristics
PUP.installCore (M)
50.00%

The domain www.bestuniversecontent.com has been seen to resolve to the following 16 IP addresses.

52.85.131.93
server-52-85-131-93.iad53.r.cloudfront.net
July 20, 2016

52.85.131.16
server-52-85-131-16.iad53.r.cloudfront.net
July 20, 2016

52.85.131.251
server-52-85-131-251.iad53.r.cloudfront.net
July 20, 2016

52.85.131.230
server-52-85-131-230.iad53.r.cloudfront.net
July 20, 2016

52.85.131.217
server-52-85-131-217.iad53.r.cloudfront.net
July 20, 2016

52.85.131.201
server-52-85-131-201.iad53.r.cloudfront.net
July 20, 2016

52.85.131.143
server-52-85-131-143.iad53.r.cloudfront.net
July 20, 2016

52.85.131.109
server-52-85-131-109.iad53.r.cloudfront.net
July 20, 2016

54.230.102.201
server-54-230-102-201.iad2.r.cloudfront.net
April 12, 2016

54.230.102.171
server-54-230-102-171.iad2.r.cloudfront.net
April 12, 2016

54.230.102.103
server-54-230-102-103.iad2.r.cloudfront.net
April 12, 2016

54.230.102.96
server-54-230-102-96.iad2.r.cloudfront.net
April 12, 2016

54.230.102.94
server-54-230-102-94.iad2.r.cloudfront.net
April 12, 2016

54.230.102.42
server-54-230-102-42.iad2.r.cloudfront.net
April 12, 2016

54.230.102.37
server-54-230-102-37.iad2.r.cloudfront.net
April 12, 2016

54.230.102.29
server-54-230-102-29.iad2.r.cloudfront.net
April 12, 2016

File downloads found at URLs served by www.bestuniversecontent.com.

1 / 68      (PUP)
http://www.bestuniversecontent.com/.../installer.exe  (fc2031f1d8496d2fd2d902c3d51fe663)

5 / 68      (PUP)
http://www.bestuniversecontent.com/.../installer.exe  (75aee7391f5573e61478e744dc2ae398)

The following file have been seen to comunicate with www.bestuniversecontent.com in live environments.

TCP » 52.85.131.230:443
browser.exe (Browser)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.