home

greatstuffz.net

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain greatstuffz.net is registered by proxy through IMMINENTDOMAINS.NET LLC and was originally registered in January of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
IMMINENTDOMAINS.NET LLC

Server location:
Arizona, United States (US)

Create date:
Thursday, January 15, 2015

Expires date:
Sunday, January 15, 2017

Updated date:
Monday, January 18, 2016

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Whois:
3 greatstuffz.net records

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PSKLOGEUM.j, Threat.Win.Reputation.IMP, PUP.SmartInstaller.PSKLOGEUM (M), PUP.SmartInstaller.PSKLOGEU (M), PUP.SmartInstaller (M)
100.00%

avast!
Adware-gen [Adw], Malware-gen
25.00%

VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic
25.00%

Dr.Web
Adware.Downware.8658
25.00%

MicroWorld eScan
Gen:Variant.Application.Barys.35597
25.00%

nProtect
Trojan-Clicker/W32.SmartInstaller.682504
25.00%

McAfee
RDN/Generic PUP.x!cpq
25.00%

Malwarebytes
PUP.Optional.SmartInstaller
25.00%

K7 AntiVirus
Adware
25.00%

Agnitum Outpost
PUA.WiseInstaller
25.00%

F-Prot
W32/A-7fa7b163
25.00%

Clam AntiVirus
Win.Adware.Smartinstaller
25.00%

Kaspersky
not-a-virus:AdWare.Win32.SmartInstaller
25.00%

Bitdefender
Gen:Variant.Application.Barys.35597
25.00%

NANO AntiVirus
Riskware.Win32.SmartInstaller.dgkdju
25.00%

The domain greatstuffz.net has been seen to resolve to the following 4 IP addresses.

204.11.56.37
February 12, 2016

5.39.99.52
December 4, 2015

104.28.20.8
November 29, 2014

104.28.21.8
November 29, 2014

File downloads found at URLs served by greatstuffz.net.

1 / 68      (Adware)
http://greatstuffz.net/index.php/.../NdACe?&rk=&channel=pbbm&fln=VGhlX0h1bmdlcl9HYW1lczpfQ2F0Y2hpbmdfRmlyZV8oMjAxMylfNzIwcF9CclJpcF94MjY0Xy1fWUlGWQ==&ts=1416623993&t=1416624113  (the_hunger_games-_catching_fire__720p_brrip_x264_-_yify.exe)

0 / 68
http://greatstuffz.net/index.php/.../KUdTY?&rk=&channel=pbanl&fln=VGVlbiBUaXRhbnMgU2Vhc29uIDEtNQ==&ts=1416611594&t=1416611714  ({blocked}.exe)

1 / 68      (Adware)
http://greatstuffz.net/index.php/.../LnhQh?&rk=&channel=pbbt&fln=U0FNX0Jyb2FkY2FzdGVyXzQuMi4yXyhjcmFja2VkKV8uX3JlZ19rZXk=&ts=1416584925&t=1416585044  (sam_broadcaster_4.2.2_(cracked)_._reg_key.exe)

1 / 68      (Adware)
http://greatstuffz.net/index.php/.../fcwDr?&rk=&channel=pbbm&fln=U0FNX0Jyb2FkY2FzdGVyXzQuMi4yXyhjcmFja2VkKV8uX3JlZ19rZXk=&ts=1416584840&t=1416584960  (sam_broadcaster_4.2.2_(cracked)_._reg_key.exe)

1 / 68      (Adware)
http://greatstuffz.net/index.php/.../IVmed?&rk=&channel=pbanl&fln=TWljcm9zb2Z0LldpbmRvd3MuNy5QTC5BbGwuVmVyc2lvbnMueDg2Lng2NC1TdXBlckdvZA==&ts=1416775699&t=1416775820  (microsoft.windows.7.pl.all.versions.x86.x64-supergod.exe)

1 / 68      (Adware)
http://greatstuffz.net/index.php/.../TNHPg?&rk=&channel=pbanl&fln=TWljcm9zb2Z0IE9GRklDRSAyMDEwICBQcm8gUGx1cyBQUkVDUkFDS0VE&ts=1416528099&t=1416528216  (microsoft office 2010 pro plus precracked.exe)

1 / 68      (Adware)
http://greatstuffz.net/index.php/.../PqIkB?&rk=&channel=pbanl&fln=RG9jIE1jU3R1ZmZpbnMgU2Vhc29uIDIgRXBpc29kZXMgMS0xNQ==&ts=1416768552&t=1416768673  (doc mcstuffins season 2 episodes 1-15.exe)

28 / 68    (PUP)
http://greatstuffz.net/index.php/.../NQKHq?&rk=&channel=pbbm&fln=THVpel9Hb256YWdhXy1fRGlzY29ncmFmaWE=&ts=1416830324&t=1416830448  (luiz_gonzaga_-_discografia.exe)

28 / 68    (Adware)
http://greatstuffz.net/index.php/.../duiIZ?&rk=&channel=pbbm&fln=SGFsbG1hcmtfR3JlZXRpbmdfQ2FyZF9TdHVkaW9fRGVsdXhlXzIwMTQ=&ts=1416463364&t=1416463480  (hallmark_greeting_card_studio_deluxe_2014.exe)

URL:
http://greatstuffz.net/

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.