home

www.giftfungrab.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
giftfungrab.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
100.00%

The domain www.giftfungrab.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 18, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 13, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 13, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 13, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 13, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 13, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 13, 2016

File downloads found at URLs served by www.giftfungrab.com.

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=6Q1ac1TMb4nYqV OK2Vg3LORxNJdExWieb6NFyxWzZA=&c=gw30izuYBewBGvAt1k3yEuiYbpkiP3xqLx1ctxj6WYYE29zfl4/hIwBvDjxr80aD9Czk48dUSFAV36FOp gzSz5WZRsP4Jz20IVXBKXBOBf18M98VduUQI7P1uhr510u&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=gf9zwtIFCIvdoB/OxsYhVJFakqw0/2gbRXlNLC3 /xg=&c=tLyrP6DzmfF4YPRxxQ1mRPBAT1taHPH DOuMpF8QTEs6UU6kzqd48Fqn6yrh/xyzJ9N4nkTFK/sB2kRiuovqHqObQ0cVlsiXuCRP18EHBeOwe3pdVmSUFQCn1PMLhn5S&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=duPXXJbo72vwjBXF2nGqBu70Z2sr4mb Z6181h3nv70=&c=eD e MW74NfGCrqBrMZa4bzhn4Uh5RnbgEZMNPLTnlZP/UpPW10YeDQzFdkJShrRNY4cbzNDi5d1kQwcgFuJpMYD0q06ZJgaNZ4vquQhREgtfwRfyKbpwG4eA7GsozDN&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (icreinstall_bitzipper2015setup.exe)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=N2BxynGKAztekj27X0rlB05uIiePqF9kacTTYT H2i8=&c=oDHALGPzqkqarIfKn3On 2gdR7xojfEym747mhjtVl9XUgQvW60mtzZpGOKarvIIts4JQqEdwHzG/jGPH8fjEaLS/4yTnIB0Vg9iUFgOxSayxaPmXbo8bCiQmX3TA3KM&downloadAs=FinalTorrentSetup.exe&fallback_url=http://www.finaltorrent.com/.../newest.exe  (9f95670f9d37f8fee437eb616f6dd09a)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=dtjG84RatI3OeQzvZfeAGYkRakcoT 9zE8q2J tvc1U=&c=LKEX0tPCQkZch1HBvuzdAm4MVHla7WsdMmi9rwk YOUyRmnyh9DM3bz2nqtNy4GWLMef 41WtnHU/DDCb 5Df1Nskg 02ypFzlzk6cahNCBTk y/KoRL00sU7kmn0wFb&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=xAloUuya1sHI8suCYJA2VlrxfcADPkRAoy7y9FEXofQ=&c=oVo8YfrOtKLCHCtjHnKMjPLGFfMdIHaIVQD B1lPJDeSCae /PvzkhsOGQteMKfcplIbhe/f/nVJp2EW 6bsyXyJ9zYxXy9LHWCCCiW9haa0ToJu1hnXhuz7Zd0HBIY9&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=Q9m/m4qPpCj9sACPMwMWN8P TeZipoHvgZM U u1ao=&c=bfoVbTRWMXGQBqa0q56WrmPRMV53vfKqay3qqYiFAlxMVFh2GyHk3z8vt WO1pZqoJbiX5sO7PGzDKIaV3MuwgPM lm4aD7ikmgIWP4X Onet0wiz1NZK1Jrvc5r4 F3&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=xk1DFR2DDKmMT19UDJBs7Zj00UsDhIrlDR8x/fD82is=&c=7y9m1nislW1srxiZi7 g0t3A4lYTRI668vB1MqamP7I3tiNdSDrsWR669u7LdDM1x/IGs4cz7qUwcA0fR1P15BWNLkpNIoe 9VLAXSDbblXGS7fjPYqaBr9V8exOi6Ed&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=6OeVbdB20xL oDTmEBOqy3YsdCcgqEj4Qy0WEKrBOGI=&c=ywT/CW2OVj4rWZ9SFUxB7raMCNr/27A1BrtkydIqYeDY4diBALniLNmmnY0FIrBjr60pqsSEKDPi815mDZnkkrfO5GWqA2eGwvaakGY1cdBaoZrlVmMaf5rnm5y/p2Yd&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=OoU1ifpc5372T 27EDKe9mSh/AknBo17wX1reE78EmU=&c=EgHWlK0pYEpROy3cTht2rC1XVDwQBiKcdVqjtMnv8WjodAFY8Y5hhwrRjUSE9SAM53vR6v tk40fomQbI111RinTRuxAO6ld8MkYhR0p fLv7fOznNzJiPB0GTpqSLeY5NCpG5XYdmYdKibmkzzhVC6uRvWm/Ba6K1CJziJoujhuRTVtDQqNZQgnNKyre/NB&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (d51f59a99061818bd8bf4c9590d58cb6)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=BAsWfBdG sfEgJuYISjcdRkj25we5a08SJhPbDK450A=&c=cnZBL8tYbXFW0g5Z6CzHGVp3YVAnSePmDOPwzPFBWjZ4 tUh3yuhSwroAepgQRXvM5R2GzHFRqqBfWb 2Lkw9oxe3IAKlfV9yYyqRx Q5RbXenoD6xj93sdsYI7GR7QF&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (icreinstall_bitzipper2015setup.exe)

1 / 68      (Adware)
http://www.giftfungrab.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  (bitzipper2015setup.exe)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=H dUnCe23uK6Yl a0XBtviApCjQ38vbrtnba0RQLPmE=&c=hNQH7z4vhu5vmsdUaM/xWVi/DDpSDGom2ePQI4WfJ3hppGAAYzFKqsCphPI/4icIXZD3/8XOS2 g61BGxHx29N6UfC75561d kaDhfNzydauje1kEyc Cm28P6BisCU7&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=7wxXyVU24P1VBpWgvpjUPy2iZlOmGda VLSlrQm90rM=&c=V1KVHa1sGwZio2e6v9QJRSI4vZtg 61BYkZGd8zqzKThPfzxVZ4lB2Y3rHHletbJZIKXrY4RLmxQeeRr9WNCBA eU txXfqhl72qT0HCiD3fZktUltKMfCPbiofHUblH&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=Wn /65kjNpyE3X1Ahjcs GZ/yDDJ8jCn3oYFPckJgic=&c=abuKZyPeZ1pNjUJRSUFY2331RdyGMcMn9ECdmav385VwEyYHljHKYN0NzCE9 eVOZkS7dUs9aV3lJdzvGG8kUbRz0k516pwTLQBTOKznyPEcqO1RgqXKdW9NhrCij6Ub&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=HfdJHGL1YuzjujNgumpK/ydnEp3bI1JbHnRWUsL7gEo=&c=pRMlhd/QTR7ZR1KFoAczJ/BKjO4GtEntIvF7cgeVE3tO k zqPtDlxVliBJJI7KQDr7Rvplj954QkFwbu4RiRc3hYvJTa90rh4YJKrfDiimdLWHy XId6ItrtGdBZCfj&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x= 3fXw/LuG AZaqgrWAhBvsm28wyntOpMS8gzCGciYSY=&c=NiCrNaOeT1NTLmENYujPa2Lz67HPy8K/NzlqQXoAwk2ATYy7QZAljssWi0kVf8I9fIEbf7ctAH/DErhFrrLReBsV3UfZPIa9KVrjvctxHmXvZNbMkzSB7Us5r2Y2k6IeSYwEr1fYsWyWYrpRphCg0eJrD0A0YVyunYP1XTn2v7CICVRUn9xF3d6nhS4ig0az&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (d51f59a99061818bd8bf4c9590d58cb6)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=xLQDQsJ63AsAlI MnFot5mE0QJOsK1I6lTnFFM43a1I=&c=P8iw y8Xz470A0b4kKU1VWXQieDFBUwIo/BHCr76aKWPztTQIF41O8MFAMeoN5MthGOE/Vm4hJ9wAN/a13BqwHTLADiMJNa2qWJHVPpFOWKzqOC/jxbcQKApTjkLS4CO&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=aFpUJqpYufG8FVjbYHV3MDND7ZKKczT2DMmNZzZxp7w=&c=fM7v3NX0EWVzvSaE1Xen0zqlFpMxA2ZCbaphI8jJX2mZ9VFNktzBFWbrT26T450e0/eFeph1rhC y8UJQ4gv WiYK7mQml7O7TTIC32asazieug sj/i89CNmh3BAbrA&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.giftfungrab.com/c?x=1D1xLzJ3SS63hJ 7eCoa2j2FjSu3L8bNgtWARlPpFkQ=&c=FJr6vIBspH6n59aWJ9/DOTcI3CCiepDvgpCDRe9M6jb5ofHpls7J3UABh/roZMiMXiW9 CNmiIC0PwPLC3O2g8QIRCtiGOqId0cucSnTJ2ycMTsxv5Bi7/Lr4EtGKaHP&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

The following 6 files have been seen to comunicate with www.giftfungrab.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.