home

t.fee.bz

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
fee.bz

Scanner detections:
Detections  (56% detected)

Scan engine
Details
Detections

Kaspersky
not-a-virus:AdWare.Win32.BrowSecX, Virus.Win32.Sality
66.67%

K7 AntiVirus
Riskware
33.33%

Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen, HEUR/QVM06.1.Malware.Gen
33.33%

ESET NOD32
Win32/Sality.NBA virus
33.33%

Dr.Web
Win32.Sector.30, Detection.Undefined
33.33%

Avira AntiVirus
ADWARE/BrowSecX.1086691
22.22%

Fortinet FortiGate
Adware/BrowSecX
22.22%

F-Prot
W32/Sality.gen2
22.22%

McAfee
Virus.W32/Sality.gen.z
22.22%

Emsisoft Anti-Malware
Win32.Sality
22.22%

avast!
Win32:SaliCode
22.22%

Norman
Win32.Sality.3
22.22%

Microsoft Security Essentials
Threat.Undefined
22.22%

Baidu Antivirus
Adware.Win32.BrowSecX
11.11%

VIPRE Antivirus
Adware.Win32.BrowSecX
11.11%

The domain t.fee.bz has been seen to resolve to the following 25 IP addresses.

52.205.218.105
ec2-52-205-218-105.compute-1.amazonaws.com
August 25, 2016

52.7.213.252
ec2-52-7-213-252.compute-1.amazonaws.com
August 25, 2016

52.206.36.195
ec2-52-206-36-195.compute-1.amazonaws.com
August 25, 2016

52.5.14.12
ec2-52-5-14-12.compute-1.amazonaws.com
July 4, 2016

52.87.124.218
ec2-52-87-124-218.compute-1.amazonaws.com
July 4, 2016

52.4.235.69
ec2-52-4-235-69.compute-1.amazonaws.com
June 27, 2016

54.165.125.29
ec2-54-165-125-29.compute-1.amazonaws.com
June 27, 2016

54.208.124.218
ec2-54-208-124-218.compute-1.amazonaws.com
June 7, 2016

52.203.146.90
ec2-52-203-146-90.compute-1.amazonaws.com
June 7, 2016

52.5.57.82
ec2-52-5-57-82.compute-1.amazonaws.com
June 5, 2016

52.203.78.46
ec2-52-203-78-46.compute-1.amazonaws.com
May 30, 2016

52.72.162.128
ec2-52-72-162-128.compute-1.amazonaws.com
May 30, 2016

54.210.166.20
ec2-54-210-166-20.compute-1.amazonaws.com
January 5, 2016

52.7.138.198
ec2-52-7-138-198.compute-1.amazonaws.com
January 5, 2016

52.3.21.93
ec2-52-3-21-93.compute-1.amazonaws.com
December 23, 2015

54.172.168.97
ec2-54-172-168-97.compute-1.amazonaws.com
December 23, 2015

52.4.190.211
ec2-52-4-190-211.compute-1.amazonaws.com
November 13, 2015

52.0.124.241
ec2-52-0-124-241.compute-1.amazonaws.com
November 13, 2015

107.23.118.52
ec2-107-23-118-52.compute-1.amazonaws.com
November 13, 2015

54.175.187.52
ec2-54-175-187-52.compute-1.amazonaws.com
November 7, 2015

52.2.106.76
ec2-52-2-106-76.compute-1.amazonaws.com
November 7, 2015

52.2.7.203
ec2-52-2-7-203.compute-1.amazonaws.com
November 7, 2015

54.173.193.7
ec2-54-173-193-7.compute-1.amazonaws.com
October 29, 2015

54.86.172.158
ec2-54-86-172-158.compute-1.amazonaws.com
October 29, 2015

107.23.100.205
ec2-107-23-100-205.compute-1.amazonaws.com
October 29, 2015

File downloads found at URLs served by t.fee.bz.

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&source=e-il&aff_sub=e-il  (clipgrabsetup.exe)

1 / 68      (inconclusive)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1049&url_id=5&source=new1  (clipgrabsetup.exe)

5 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&aff_sub=golstar2&source=golstar2  (clipgrabsetup.exe)

6 / 68      (PUP)
http://t.fee.bz/aff_ad?campaign_id=5&aff_id=1055&format=url&hostNameId=8297&aff_sub=ben  (clipgrabsetup.exe)

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&source=linkbaxov&aff_sub=28  (clipgrabsetup.exe)

1 / 68      (inconclusive)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1051&url_id=5&source=naga2&aff_sub=n2  (clipgrabsetup.exe)

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&source=clipmyliks  (clipgrabsetup.exe)

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&source=fixtube_yarin&aff_sub=10000  (clipgrabsetup.exe)

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&source=isra&aff_sub=2135  (clipgrabsetup.exe)

6 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1055&url_id=5  (clipgrabsetup.exe)

1 / 68
http://t.fee.bz/aff_c?offer_id=12&aff_id=1049&source=bannerpop&aff_sub=youtubedown  (fixpopcornsetup.exe)

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&aff_sub=golstar2&source=golstar2  (clipgrabsetup.exe)

1 / 68
http://t.fee.bz/aff_c?offer_id=12&aff_id=2&url_id=5  (clipgrabsetup.exe)

9 / 68      (Infected)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1049&url_id=5&source=new1  (clipgrabsetup.exe)

10 / 68    (Infected)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1049&source=bannerpop&aff_sub=youtubedown  (fixpopcornsetup.exe)

5 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1049&url_id=5&source=new2  (clipgrabsetup.exe)

5 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1049&url_id=5&source=new1  (clipgrabsetup.exe)

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&source=vodmoves&aff_sub=0001  (clipgrabsetup.exe)

1 / 68      (inconclusive)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1051&url_id=5&source=pailotmhapnet&aff_sub=001&aff_sub2=001  (clipgrabsetup.exe)

3 / 68      (PUP)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1038&url_id=5&source=newisrael&aff_sub=israekgokstar  (clipgrabsetup.exe)

1 / 68      (inconclusive)
http://t.fee.bz/aff_c?offer_id=12&aff_id=1051&url_id=5&source=nagan&aff_sub=n001  (clipgrabsetup.exe)

The following file have been seen to comunicate with t.fee.bz in live environments.

TCP » 54.86.172.158:80
myradiobox.exe (youtubePlaylist)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.