home

www.citypackagetown.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
citypackagetown.com

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.11 (M), PUP.InstallCore.FC.Installer (M), PUP.installCore.Gotume.Installer.Meta (M), PUP.InstallCore.RE11 (M)
100.00%

The domain www.citypackagetown.com has been seen to resolve to the following 17 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 14, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
September 14, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
September 14, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 6, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 6, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 6, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 6, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 6, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 6, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 20, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 20, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 20, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 20, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 20, 2016

File downloads found at URLs served by www.citypackagetown.com.

1 / 68      (PUP)
http://www.citypackagetown.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  (format-factory.exe)

1 / 68      (Adware)
http://www.citypackagetown.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  (gta-iv-san-andreas.exe)

1 / 68      (Adware)
http://www.citypackagetown.com/c?x=/dKbJ1cM7QYCxK2DAdltStWFe43vbTs 65W/IoWo2b8=&c=rwtE/dPILZrFo57l BqZwstnoyNlIkMm13xxtiLl9BTP4AGBrvwJGzb51eB5sgfRaj HwYpXTRWJ0OKl3IRIqYpZHJJxRoE5Rk78I8Mlji5KW4vhE/KiOfT9gVaFzOrvIYbRZQds wYn foKjhkoTTGaAV8iRYdp KCHeAMJdPg=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-office-2010.exe  (516d2cd9a66effd6f2f7589472c5f6e0)

1 / 68      (Adware)
http://www.citypackagetown.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  (icreinstall_feeding-frenzy-game.exe)

1 / 68      (Adware)
http://www.citypackagetown.com/c?x=NCRSzLF8pRV 1NaWV20P7AklovWhrWJXWFELSkzEbaw=&c=4isauwPHEAFHQvmBkDoLBWmlpeu4z/5qWA4ZXDAE1C00G1tdsAZVg8GBXwNK/DSKdCZFNPDMNCX2/it0ohHG6GQX8zMWMnF8WozVD418E NafD2GysFH bRsLdIssVl8L9m pvyKWgPN/VHmtF1hXT/EtxkHXh pbEtkidRt8hw=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=VFZfqOWbqXZDnivHdmyF-g&e=1458588500&downloadAs=the-sims-3.exe  (28ec2f1f9c1f069f8e5c2a7117befb67)

1 / 68      (Adware)
http://www.citypackagetown.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  (google-chrome.exe)

1 / 68      (Adware)
http://www.citypackagetown.com/c?x=w0iHkD2BL8IQaMHEZGB37wu4kEMF/SanBkmLh4etrsk=&c=otwnrN2fn7Khs3qtFlh8f4JQ5WnfZsSBSM4nTcNr1NEX6L5R2Orb37aISleHgd YE9jQX2QN2JVYFlP6ZoZ8fK7bKnSzUCaAGL0BFBlQGvi37conK4XlQHzHq5nzYjQMD9/QrxtdmbnN5uir FWtKjoxvUOb9x9Pvk3zYC2BOzY=&e=0&fallback_url=https://secure.inndl.com/.../minecraft-server.exe  (dbca25b6f7ff4c55aa091d91716821cc)

1 / 68      (Adware)
http://www.citypackagetown.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  (prison-architect.exe)

1 / 68      (PUP)
http://www.citypackagetown.com/WVl6OTRQVVJrZFRGekpUSkNTWFEyVVNVeVFrTk1SREYwTkVkblJHVmtOREJVYkRoTlNIQkNOVzE0WmtOdGVUbFpOV3hCSlRORUptTTlXbTFSUmxoa1owUjVWaVV5UWlVeVFsZERUV1JqTlZKR1pHNTBOVTVXY0V3bE1rSm1NelkxTm0xb2IzQk9WRWx6TVZKTVJUUkVaVGRHYlZGblRqZFdlR3hQTmpOSFVITmFNelpPVUdsaFJrcFdaVlZ3U1hsT1FrdEtjMk5pWXpaYVpsTlpabXRxVTB4b1EzbGxibEJrU2xwcGRtTlBjakpyZVZWTkpUSkdUbTE1VG5JM1pGTnRWRmcxUlUxMFZsSnNUbHBsTm5SNlYyWlpXbXA0VlZFbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd2N5VXpRU1V5UmlVeVJuTmxZM1Z5WlM1cGJtNWtiQzVqYjIwbE1rWlZVeVV5Um5CeWFYTnZiaTFoY21Ob2FYUmxZM1F1YlhOcEpUTkdjM1FsTTBReVYwOVVORmhNTVVWRlYzQlhjM3BMUkZjMWRtVjNKVEkyWlNVelJERTBOVGcxT0RnM09USW1aRzkzYm14dllXUkJjejF3Y21semIyNHRZWEpqYUdsMFpXTjBMbVY0WlE9PQ==  (prison-architect.exe)

1 / 68      (PUP)
http://www.citypackagetown.com/WVl6OTRQWGRGYVdwb1pIcGtTVE51WjJGbVpIQWxNa1pJUVZnMllWVnNUMXA0YVROaVkyOXlWSEU0V1cwbE1rWlFKVEpDVDFFbE0wUW1ZejFTYlRSaVJWSjRjMnhRZVc0MldWa3laVTFtYVdSamVXdDNRbkUzZWs5d2EydzVZbTVGTVRWTGVVSktVMFE1U0d4UlVHeFRKVEpDY0VwSlIzaE1PRkkxTjNwVFZXSllUMWN5TjB4b1VUQWxNa1pKZWs4M2NsSTFkMHRWTlhsb1FVTldXazQzU213bE1rSlRjMUF5Yld4NFMyMUNja2hqZG05b1RTVXlRbW94UTJ0cmJrdFdWQ1V5Um1sbVJXTmpVa1pQUkRBd1NWQk5PVmx6Y21oU0pUSkNUR2NsTTBRbE0wUW1aVDB3Sm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3Y3lVelFTVXlSaVV5Um5ObFkzVnlaUzVwYm01a2JDNWpiMjBsTWtaVlV5VXlSbTFwYm1WamNtRm1kQzF6YTJsdUxYWnBaWGRsY2k1NmFYQWxNMFp6ZENVelJEaE5ObkZrUkd4bWFucEtRbFJFYTBSdE1UVlNiWGNsTWpabEpUTkVNVFExT0RVNU1qa3dNQ1prYjNkdWJHOWhaRUZ6UFcxcGJtVmpjbUZtZEMxemEybHVMWFpwWlhkbGNpNWxlR1U9  (minecraft-skin-viewer.exe)

1 / 68      (PUP)
http://www.citypackagetown.com/c?x=y74tfxrWE/Dg5dDZI29/7K1A1dQ 917Q2OjsOM26QLY=&c=AMzK1anBKYzYxvsJhDZ9qHi8s2FGHfl Ca3rxANPJB1p9O/EvZgEIBaCdVA5dZCOoFX1AV7MSOdDqzPwk6v6ab1GQEaqsT1f5gtYfBBgUxfpc7XRUwwBaa3ErXOaUhJWZvese4x9MK5pKuv2P5Wfp2wUke CMORZNEkMoz0x1o0HMmF7gLh0c/fU/CsraPda&e=0&fallback_url=https://secure.inndl.com/.../warcraft-iii-the-frozen-throne.exe  (icreinstall_warcraft-iii-the-frozen-throne.exe)

1 / 68      (PUP)
http://www.citypackagetown.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  (realplayer-cloud.exe)

1 / 68      (Adware)
http://www.citypackagetown.com/c?x=hz/NEHQexLbtCdKEJcy9bpzBNBQ 2SOTK5T0T1ZAsrg=&c=SNtNRWtmRLy0s/xpQfgV6PsWSTYkJu3wFtcJhN7OSqfO9wbR3tHS5QdlD7OFOMsdM/Zok1h5BAEdT9 O9uFvh54dbkXXYaH22MOrG0tYB/kBclrejHP6cPkxu3P bhbxzaPWZ4mBO1MlmOoX4QnnOHrjGQ9Ny4blXI9wD9npx7o=&e=0&fallback_url=https://secure.inndl.com/.../counter-strike-global-offensive.msi  (counter-strike-global-offensive.exe)

1 / 68      (Adware)
http://www.citypackagetown.com/c?x=7m/fHhVhm/gVFKiDQUOiNvtbgBR7rsojoMJWE6PyMBU=&c=5ob744pOUiyJJ6erltt5pM2l1jjq7UIXL6bxutCoBHLumEqC6lgeZtvAJ8XBlCYOWjbCI68fdvgLuGkVkv3ps1R5lM1PV6zjugPadq p9coXqR WUHCEErlwTQEenYai&fallback_url=https://secure.inndl.com/.../microsoft-office-2010.exe  (icreinstall_microsoft-office-2010.exe)

1 / 68      (PUP)
http://www.citypackagetown.com/c?x=UJnNtBuPcEOSo4Yk8IhvrktVgBl0gNjvWfy0SVsp7Lw=&c=w6IRgeK8Oj9MbozUEsT0d2yM5z6ti2g8vLbyxQ4kwJUXuNG2SUivftkJ9nQtkEVqXd9ZqPYJQNdIs4 0SHYcumyAflLdiyNSN DPKneb0MxK9tWwrT2hZe2f0SHAQSxL/ 6QUfKUCy9y/Iy0FQqZD94vuvvB9ygncDswbrUYHZOtlapMJXyoDZ/HmyYzkugN&e=0&fallback_url=https://secure.inndl.com/.../readon-tv-movie-radio-player.zip?st=1NxX5lLSlcmLVnEUnTlyyA&e=1458587886&downloadAs=readon-tv-movie-radio-player.exe  (538c07993206f36e525c891459acb36d)

1 / 68      (Adware)
http://www.citypackagetown.com/c?x=H8wEN8e5AsS32AEJI1XX MngfawSqjEpMFWri9Cx0i0=&c=78Gck4FASgNbvBXvJMalCDnQjc9Xo9YUxa55z//PYMLB1u09L9S/93fH36 WOmO oG1iSGysTymbDZMD7swnPxgTjT9e4vd9YCtYGVIPqeqoUpYkSWz4R0PSoU25KmrR&fallback_url=https://secure.inndl.com/.../gom-video-converter.EXE  (1384bd0ff7b68e84c47c65582b7beafa)

1 / 68      (PUP)
http://www.citypackagetown.com/c?x=jROU3UOjlVEpDBpc8GX5ZqN8uEVQOEOEPn46R01sNWg=&c=78q64q fI mJoTBgo5ADFhNMA63u7eSi2 /gJCHUa0y3LkJ0KcVsof9c MSvhQDB6zBKLo6spFOH24ZM4nZl8d5u5Fx rLeiUDXYtnf/Qx/P1 gUzcP4NRtMr/1LTqO 7f5 3YdCLviT929Q7sIyLpCc/flPKuvHQFwl0kPANQRqGG2AtNBopufUOkhdbVFH&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe  (732fbcd99cc9218fe1d3d496995ac79c)

1 / 68      (PUP)
http://www.citypackagetown.com/c?x=9GnCBSd292h/ACsetqv2 0nalrkaVUIthZm2NjlY1KA=&c=BwnKcNXKRT0QJPGLODxvsbV/HnLoZmG1sPyG8ICAU0F1SkwLpWGRuBSUN PzXgol4NP53mE dlcVPIJfqjWHepaxv/SaxkQs/FzCbRlZJ2D4gsjtZIMZlemebWnekTRJdCfcYHFPjxIHUOnH5jtOQ3Lit/XOVGkhaHLQ kyYAyUyYgonEsmfnnfV0pCN57zF&e=0&fallback_url=https://secure.inndl.com/.../grand-theft-auto-iv.zip?st=c_W5PZBbNHCqj2OWoRIoFg&e=1458588653&downloadAs=grand-theft-auto-iv.exe  (25c03a98c522c32643d061915a70d108)

0 / 68
http://www.citypackagetown.com/c?x=mMZMU1nlCPmz36DiMNTnz3dT0EVWJBtIgobrikuFqqo=&c=ySYqWrOAW1XLIr04Aj0w317lAtC1xm7OckwzDT7DPNqyPeJ10re3WnQbUdZXaDpjfNqJchFMeuqVaICJh1or/R20OkpCNM6d6/i2KUoBaDKbqbn YAGUz0Pax6aA6/sRWMglVcmSW26WfLKcukp/Mc RKg1pri0by6oJeyTO9dGK/qe1l57jYlp7dR09VH2&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe  (professionalplus.exe)

1 / 68      (PUP)
http://www.citypackagetown.com/c?x=qYoiQxNK8taBEbEo0t9hEl4LqPYNkrbKkUhtlXfXUTY=&c=vEXPvV1hX1dbq6c/13/xSpHT42f0YfMD g7KMSYGWk97f 3OyMgONZv/eXxm21bXPauJyd9b0fl3EkZIg0MApApBb8XRl2Zf/Q SmUFD jDpoejStdYNu6YzVNtos2ODyYAgSsnzK5ByHboHf7s nC11jlxCzWkWxwMBqyfQqNU4Ay6CPA0Lqrr0cvK2RNct&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe  (732fbcd99cc9218fe1d3d496995ac79c)

1 / 68      (PUP)
http://www.citypackagetown.com/c?x=qAA LNhPb69pGTMo 8hdb7yaIQ1pcciZnWk38shi6N0=&c=Eiweo1LWk38HwE9sYDCvVtdI01dxsleZVR3eHi3kEWJPyKDzgSeYd1QNCjpkd B6zmK1zPUzTLdrnBDkHS5XxkMjMl2rmCVH8qL05Eeh9 wDMiNMNJsIotGPbj5t3Yte5IWFCXrsDLOWOGQK4K98PtQy9JHfAtJenC6fOQdyaIRr1FPjsN/YjW s3Hbx3Zww&e=0&fallback_url=https://secure.inndl.com/.../megacubo.exe  (e679bb4c302c4f6a99d0767addf88154)

1 / 68      (Adware)
http://www.citypackagetown.com/c?x=SwaqB13H/UGvrwdYw7vGFys 1QKX0TFddXF5fMWm40E=&c=cZN/i3VAt4XOoCzTUO/JbzkKoq5KwElBXRVuq90QFZRYUd54C i2JKSkAdvbKRE5OvowP7 RJR5llYkjozt624XIzKT1i5LChRMJ39ldjNQSIsROG2a7EShDUsxIl/ajYS6j4bpoC/3cGiDHKSuYW9G8eNMPi8tjIsLN0aeTn6A=&e=0&fallback_url=https://secure.inndl.com/.../age-of-mythology-the-titans-expansion.exe  (14e3c689b5b76b33121e33f9b925a50e)

1 / 68      (Adware)
http://www.citypackagetown.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  (hideallip.exe)

The following 50 files have been seen to comunicate with www.citypackagetown.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.