home

www.giftgrabbest.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
giftgrabbest.com

Scanner detections:
Malware distribution  (78% detected)

Scan engine
Details
Detections

Norman
Gen:Variant.Adware.Symmi.59817, Win32.Ramnit, Win32.Sality.2.OE, Win32.Sality.3, Win32.Ramnit.N, Win32.Sality.4
80.95%

Dr.Web
Trojan.Swizzor.19586, Win32.Sector.5, Win32.Sector.30
76.19%

Microsoft Security Essentials
Threat.Undefined
71.43%

ESET NOD32
Win32/Ramnit.A virus, Win32/Sality.NAO virus, Win32/Sality.NBA virus, Win32/Ramnit.H virus, Win32/Sality.NDR virus
71.43%

McAfee
Virus.W32/Ramnit.a, Virus.W32/Sality.gen, Virus.W32/Sality.gen.z, Trojan.Artemis!CC6A55CDA7D8, Program.Artemis!CC6A55CDA7D8
71.43%

avast!
Win32:RmnDrp, Win32:Kukacka, Win32:SaliCode, Win32:Sality
71.43%

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.59817, Win32.Ramnit, Win32.Sality.2.OE, Win32.Ramnit.N
61.90%

Kaspersky
Virus.Win32.Nimnul, Virus.Win32.Sality
61.90%

F-Prot
W32/Sality.AJ, W32/Virut.AI!Generic, W32/Sality.gen2, W32/Ramnit.E
57.14%

VIPRE Antivirus
Threat.4726519, Threat.355724, Threat.4758034, Threat.4732184, Threat.4721115
47.62%

AVG
Win32/Ramnit.A, Win32/Tanatos.T, Win32/Sality, Win32/Zbot.G
42.86%

Sophos
Virus 'Mal/Sality-D', Virus 'W32/Ramnit-A'
19.05%

F-Secure
Variant.Adware.Symmi, Win32.Sality.3, Win32.Sality.4
14.29%

Clam AntiVirus
W32.Ramnit-1, W32.Sality-27
9.52%

Avira AntiVirus
W32/Sality, PUA/InstallCore.613319
9.52%

The domain www.giftgrabbest.com has been seen to resolve to the following 78 IP addresses.

54.192.19.23
server-54-192-19-23.iad12.r.cloudfront.net
August 25, 2016

54.192.19.226
server-54-192-19-226.iad12.r.cloudfront.net
August 25, 2016

54.192.19.222
server-54-192-19-222.iad12.r.cloudfront.net
August 25, 2016

54.192.19.184
server-54-192-19-184.iad12.r.cloudfront.net
August 25, 2016

54.192.19.170
server-54-192-19-170.iad12.r.cloudfront.net
August 25, 2016

54.192.19.107
server-54-192-19-107.iad12.r.cloudfront.net
August 25, 2016

54.192.19.93
server-54-192-19-93.iad12.r.cloudfront.net
August 25, 2016

54.192.19.36
server-54-192-19-36.iad12.r.cloudfront.net
August 25, 2016

52.84.125.58
server-52-84-125-58.iad16.r.cloudfront.net
July 26, 2016

52.84.125.4
server-52-84-125-4.iad16.r.cloudfront.net
July 26, 2016

52.84.125.236
server-52-84-125-236.iad16.r.cloudfront.net
July 26, 2016

52.84.125.211
server-52-84-125-211.iad16.r.cloudfront.net
July 26, 2016

52.84.125.210
server-52-84-125-210.iad16.r.cloudfront.net
July 26, 2016

52.84.125.132
server-52-84-125-132.iad16.r.cloudfront.net
July 26, 2016

52.84.125.130
server-52-84-125-130.iad16.r.cloudfront.net
July 26, 2016

52.84.125.99
server-52-84-125-99.iad16.r.cloudfront.net
July 26, 2016

52.85.131.167
server-52-85-131-167.iad53.r.cloudfront.net
May 20, 2016

52.85.131.75
server-52-85-131-75.iad53.r.cloudfront.net
May 20, 2016

52.85.131.37
server-52-85-131-37.iad53.r.cloudfront.net
May 20, 2016

52.85.131.31
server-52-85-131-31.iad53.r.cloudfront.net
May 20, 2016

52.85.131.234
server-52-85-131-234.iad53.r.cloudfront.net
May 20, 2016

52.85.131.233
server-52-85-131-233.iad53.r.cloudfront.net
May 20, 2016

52.85.131.187
server-52-85-131-187.iad53.r.cloudfront.net
May 20, 2016

52.85.131.168
server-52-85-131-168.iad53.r.cloudfront.net
May 20, 2016

54.230.102.134
server-54-230-102-134.iad2.r.cloudfront.net
April 15, 2016

54.230.102.126
server-54-230-102-126.iad2.r.cloudfront.net
April 15, 2016

54.230.102.100
server-54-230-102-100.iad2.r.cloudfront.net
April 15, 2016

54.230.102.42
server-54-230-102-42.iad2.r.cloudfront.net
April 15, 2016

54.230.102.32
server-54-230-102-32.iad2.r.cloudfront.net
April 15, 2016

54.230.102.23
server-54-230-102-23.iad2.r.cloudfront.net
April 15, 2016

 
Showing 30 of 78 IP Addresses

File downloads found at URLs served by www.giftgrabbest.com.

8 / 68      (Infected)
http://www.giftgrabbest.com/.../installer.exe  (9b82df1d41aebde1a3747bce89eb7920)

6 / 68      (Malware)
http://www.giftgrabbest.com/.../installer.exe  (cd3df0f1e1cf22bad6b346bfb7572def)

9 / 68      (PUP)
http://www.giftgrabbest.com/.../installer.exe  (b869c3af54e4fef45ebd0120df8fc298)

10 / 68    (PUP)
http://www.giftgrabbest.com/.../installer.exe  (65346f3eddb6d5528196e663e33b6028)

0 / 68
http://www.giftgrabbest.com/.../installer.exe  (3958ebe4e372447dc1a13dc960c0b007)

0 / 68
http://www.giftgrabbest.com/.../installer.exe  (installer_3.exe)

3 / 68      (PUP)
http://www.giftgrabbest.com/.../installer.exe  (installer.exe.torchdownload)

2 / 68      (inconclusive)
http://www.giftgrabbest.com/.../installer.exe  (96104261a2b113d39fa810af325e91c2)

1 / 68      (PUP)
http://www.giftgrabbest.com/.../installer.exe  (installer.exe.downloading)

12 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (b45606e3a3e9eff352db6daf27282c69)

9 / 68      (Malware)
http://www.giftgrabbest.com/.../installer.exe  (5d8d62bd6d03f3e6012a200b70c7a5d6)

11 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (6c1bf09d61ea3319f886265f44ce137c)

11 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (43b57a88576f8a055e7f59c2738b9142)

3 / 68      (PUP)
http://www.giftgrabbest.com/.../installer.exe  (383430dbc30afb92081f6a8719624ec4)

2 / 68      (inconclusive)
http://www.giftgrabbest.com/.../installer.exe  (79635b418465ee9022602c25c757e1af)

11 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (48f08ba48414a00ffaddc7aaca7f6e9e)

11 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (7a1401c8acd258523c5fd4989c093818)

9 / 68      (Infected)
http://www.giftgrabbest.com/.../installer.exe  (1eaef539c32acd03c7e87e265a9e13c4)

8 / 68      (Infected)
http://www.giftgrabbest.com/.../installer.exe  (ae1df352feb0d60b81ac75877d1de982)

2 / 68      (inconclusive)
http://www.giftgrabbest.com/.../installer.exe  (cc6a55cda7d8fb4817f9e953f508fb2e)

11 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (6c32e1397e66b0def07dbb8508089867)

12 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (84bf5a59161c49c0dd11404d589d603f)

13 / 68    (Infected)
http://www.giftgrabbest.com/.../installer.exe  (f420665f965611b20ab0fc52e05e084d)

The following 139 files have been seen to comunicate with www.giftgrabbest.com in live environments.

TCP » 54.192.19.23:80
se.exe

TCP » 54.192.19.93:80
browser.exe (Browser)

TCP » 54.192.19.36:80
browser.exe (Browser)

TCP » 54.192.19.226:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.226:443
binkiland.exe

TCP » 54.192.19.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.211:443
clearscreenplayerbrowser.exe

TCP » 54.192.19.226:443
crossbrowse.exe (Crossbrowse)

TCP » 54.192.19.226:80
parishoners.exe (Parishoners)

TCP » 54.192.19.170:443
online-guardian-v2.0.9.exe

TCP » 54.192.19.23:80
uvconverter.exe

TCP » 54.192.19.23:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.170:80
BrowserWeb.exe (BrowserWeb)

TCP » 52.84.125.4:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.4:443
cdhtr.exe

TCP » 54.192.19.222:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.211:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.99:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.192.19.184:80
TData.exe (TDATA by TData.com)

TCP » 54.192.195.26:443
onlineguardian-v2.exe

 
Latest 20 of 235 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.