home

grandilund.se

hotell0702-00176

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Schaumburg, Illinois within the United States which resides on the TravelCLICK Inc. network.
Registrar:
SE Direkt

Server location:
Illinois, United States (US)

ASN:
AS26646 TRAVELCLICKCORP1 - TravelCLICK Inc.,US

Whois:
1 grandilund.se record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

avast!
Win32:Injector-BWA [Trj], Win32:CeeInject-AP [Trj], Win32:Kelihos-CA [Trj]
100.00%

Emsisoft Anti-Malware
Trojan.Agent.BDVI, Trojan.Dropper.XBB, Gen:Heur.Zboter
100.00%

Dr.Web
Trojan.DownLoad3.33737, BackDoor.Slym.14318
100.00%

Microsoft Security Essentials
VirTool:Win32/CeeInject.gen!KK, Trojan:Win32/Napolar.A, Threat.Undefined
100.00%

MicroWorld eScan
Trojan.Agent.BDVI, Trojan.Dropper.XBB
75.00%

nProtect
Trojan.Agent.BDVI, Trojan.Dropper.XBB
75.00%

Quick Heal
VirTool.CeeInject.S4, Trojan.CeeInject.WR
75.00%

McAfee
Generic-FAUT!4A3B3059F6DA, Generic-FAUT!B64E72ABDCC9, Generic.dx!49F96E75C339
75.00%

Malwarebytes
Spyware.Zbot.ED, Trojan.Agent.ED
75.00%

SUPERAntiSpyware
Trojan.Agent/Gen-Napolar, Trojan.Agent/Gen-Injector
75.00%

K7 AntiVirus
Trojan
75.00%

NANO AntiVirus
Trojan.Win32.Zbot.dbyqjw, Trojan.Win32.ZPACK.dbxzlr
75.00%

ESET NOD32
Win32/Injector.BHBO, Win32/Injector.BHBA (variant), Win32/Napolar
75.00%

Trend Micro House Call
TROJ_SPNR.28GA14
75.00%

Kaspersky
HEUR:Trojan.Win32.Generic, Backdoor.Win32.Napolar
75.00%

The domain grandilund.se has been seen to resolve to the following IP address.

199.167.218.102
February 24, 2016

File downloads found at URLs served by grandilund.se.

38 / 68    (Malware)
http://grandilund.se/?em0c9a5lu7qo6b=a89f637e3834fa15d69733c  (photo_020.jpeg-www.facebook.exe)

38 / 68    (Malware)
http://grandilund.se/?7h4pbrx=530739a  (photo_020.jpeg-www.facebook.exe)

6 / 68      (Malware)
http://grandilund.se/?xe5a1ts1b=13927a505baf  (photo_020.jpeg-www.facebook.exe)

39 / 68    (Malware)
http://grandilund.se/?hz9mqyau=4a58c3f348  (photo_020.jpeg-www.facebook.exe)

37 / 68    (Malware)
http://grandilund.se/?juw22ge=091ae4  (photo_020.jpeg-www.facebook.exe)

37 / 68    (Malware)
http://grandilund.se/?sp2x2js5rq=2e89914db429ed3e03de4  (photo_020.jpeg-www.facebook.exe)

URL:
http://grandilund.se/

Google Analytics:
UA-2373876

Title:
“Grand Hotel Lund | Luxury Business Hotel in Lund, Sweden”

Description:
“Official Site: The Grand Hotel Lund is a 100-year-old hotel in Lund, Sweden. It is provided with a legendary cuisine, modern conference and banquet facilities.”

Web server:
Apache (PHP/5.3.3)

Facebook:
Likes:  9
Shares:  14
Comments:  23

Statistics above are for the previous month of January 2025.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.