home

www.tagtownbundle.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
tagtownbundle.com

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.InstallCore.11 (M)
100.00%

Clam AntiVirus
Win.Adware.Application-693
33.33%

Rising Antivirus
PE:Malware.Generic(Thunder)!1.A1C4 [F]
33.33%

IKARUS anti.virus
PUA.EoRezo
33.33%

The domain www.tagtownbundle.com has been seen to resolve to the following 19 IP addresses.

54.230.102.66
server-54-230-102-66.iad2.r.cloudfront.net
April 14, 2016

54.230.102.26
server-54-230-102-26.iad2.r.cloudfront.net
April 14, 2016

54.230.102.242
server-54-230-102-242.iad2.r.cloudfront.net
April 14, 2016

52.85.131.196
server-52-85-131-196.iad53.r.cloudfront.net
April 12, 2016

52.85.131.167
server-52-85-131-167.iad53.r.cloudfront.net
April 12, 2016

52.85.131.155
server-52-85-131-155.iad53.r.cloudfront.net
April 12, 2016

52.85.131.114
server-52-85-131-114.iad53.r.cloudfront.net
April 12, 2016

52.85.131.51
server-52-85-131-51.iad53.r.cloudfront.net
April 12, 2016

52.85.131.30
server-52-85-131-30.iad53.r.cloudfront.net
April 12, 2016

52.85.131.235
server-52-85-131-235.iad53.r.cloudfront.net
April 12, 2016

52.85.131.206
server-52-85-131-206.iad53.r.cloudfront.net
April 12, 2016

54.230.102.167
server-54-230-102-167.iad2.r.cloudfront.net
April 11, 2016

54.230.102.158
server-54-230-102-158.iad2.r.cloudfront.net
April 11, 2016

54.230.102.157
server-54-230-102-157.iad2.r.cloudfront.net
April 11, 2016

54.230.102.60
server-54-230-102-60.iad2.r.cloudfront.net
April 11, 2016

54.230.102.52
server-54-230-102-52.iad2.r.cloudfront.net
April 11, 2016

54.230.102.51
server-54-230-102-51.iad2.r.cloudfront.net
April 11, 2016

54.230.102.21
server-54-230-102-21.iad2.r.cloudfront.net
April 11, 2016

54.230.102.211
server-54-230-102-211.iad2.r.cloudfront.net
April 11, 2016

File downloads found at URLs served by www.tagtownbundle.com.

3 / 68      (PUP)
http://www.tagtownbundle.com/alejandrojoniblankenship/.../installer.exe  (98c517d9c2b537466dfd6045ace31681)

2 / 68      (PUP)
http://www.tagtownbundle.com/alejandrojoniblankenship/.../installer.exe  (625222624ff4237bc90ae97f785f5748)

0 / 68
http://www.tagtownbundle.com/alejandrojoniblankenship/.../installer.exe  (93619e36cc63e588deb9450528904c3f)

1 / 68      (PUP)
http://www.tagtownbundle.com/alejandrojoniblankenship/.../installer.exe  (ibrickr-jb113.exe)

The following 2 files have been seen to comunicate with www.tagtownbundle.com in live environments.

TCP » 52.85.131.30:443
browser.exe (Browser)

TCP » 52.85.131.196:80
SimpleDriverUpdater.exe (Simple Driver Updater)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.