home

www.gifthosttours.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
gifthosttours.com

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Vittalia.QUICKIDEAS.Installer (M), PUP.installCore.MICROMAX.Installer (M)
100.00%

Trend Micro House Call
TROJ_GEN.R0C1H05K314, TROJ_GEN.R02SH05EF15
7.69%

The domain www.gifthosttours.com has been seen to resolve to the following 13 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 26, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 27, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 18, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 18, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 10, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 9, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 9, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
July 9, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 9, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 9, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
July 9, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
July 9, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 9, 2016

File downloads found at URLs served by www.gifthosttours.com.

2 / 68      (PUP)
http://www.gifthosttours.com/c?x=grJcNC6UDW7rzIJCwjyLjFwAJzZSQ5RIjjibDSVt7DQ=&c=SdLES/YKn/9BRnskTfLR4jg9N76pz1emRjCavGyO R9QGAwTgqsOo71YVW KlErRynrcGyq4vuV0Lmix2NLmrgmNLa/Qs5zcyDDeUVh972PV5TiUwWQjjcqyLogEDJ3/O3kpiJO 6ZZBiQGWxkm H8W/UPoeZFylsHf3ImhyQSM=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (17277c52e48ed4f0dd449c9441e05863)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=TWT7KRsMsb8DftVX40 J9YQPS59x6sd4igBf8H39Asw=&c=0RJnij1RKUAqm1eAyRK9hqs9vZsSPyGCPoGUxW3cBcOaXJ8xp9apwvL167vVu0s6EapDKycuFoSFBtbuaYD yqP0j5Oq1MndfXKBQaPFnnmR7xQQZgNJ6AcVJ 5gKEaIUn68QXShBTb0TPQJ7npE29qlWvDkUKnhn4pBpbMFjxs=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (92798c9858b4ed49da7405fe9deb566d)

1 / 68      (PUP)
http://www.gifthosttours.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  (install_virtualdj_home_v7.0.5.exe)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=zg1WAqZYZRQMhBJ9G0GcA FKenAUXzRIdAT5Q/05yjA=&c=A0Ecy3HXhz5NGCnyaJFzxk2xYmKToWPQdxaeHb8dqfsQ /kkhQRIs6M5MnsBkVFbyBiEyzkcTsEh1yAvpqJy5yZ6yi2n/B9xxyT0QZfUilsbea7zqJBS37BTLVMqDQpAWrW/YbihpByBqdmW8oi9cQ4iNV7RJPRwQjEGgaTilcI=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f2c0907fda37bf63d3d94edf3152b57e)

1 / 68      (PUP)
http://www.gifthosttours.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  (updatechecker.exe)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=TEhhsxW0kiSoWdsu3UacgjD8fEEcCQrmegDi5Olpixk=&c=cG33usbZ0xSHnXXL4gOZH2BRlNocfIFuCZ6OrZl ZJ sWAhw8N03eQnID5DIEno0d7qrUdibumyA0VOb8ui51J4KXXcGvMN9puBkV3IVnvQ09szUe5NdwNRnnu1gmqfPepPP45rK2j9RRFTDxhLOdwpmNxNZ176biT5eC4XOT8E=&e=1&fallback_url=http://res.mshist.com/.../ClashRoyale.exe  (32a3cce29c36e8442f3dd19ac94d099b)

2 / 68      (PUP)
http://www.gifthosttours.com/c?x=d/GfBZ05eVy0f8rEU7awLy8R8aIoOzmHdcAguOaW5aU=&c=i1CzJOi8EPcVmYD05r4R4oap8zcPpwGKMP45P3uCAZmuoAtULNe0w2ICewqqPyT8Zy0xfre FIICNANizOEbKAxe2PTev54/X5n5x8gOWG8QRUkuF49PD9t8eLeeACCdhaqCFwMxPheqgoy1ZTzTnv1nts7pGsPzP1rpasJRegk=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (e555e9c59da4d0efbb2d68b4f8c330f8)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=P09peloCG80qUHL2NBGCHWKbgsa RgVKCKPIX7Q8YHA=&c=0tc2 Yvo11rkirQDLxzM/ZcWKPMfHHIXDwoaWqDqgfSL4M 5IZn6ziupAQDroRlY6KKJrbcbJcRYdd2LtaRlotL6Vgd6h54cktOcSIvo6fzWV2 mubl0XJ qCRgmCu6G&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi  (9c93b18dc09215098a8e27f6a0e875f2)

0 / 68
http://www.gifthosttours.com/c?x=vDWcapIdJpO8Pem6UEtrVJVJI6kKEYRRoxVVQBNLmyQ=&c=FonYHOHD1412AOCL2OUtGw053v/EIJVL54mdU1zoCjYFoi9GVFcDQRf7zpK9IehARNpgKpE33qHZ/fxmJ /X9Dh4GO8ur6mgp8CXBBtBQTsqWcwmD/wghtABc72wtF cDvzrrOAvT QMfcJfTKwLVlLmjAG4xcjiMKSca8N1rus=&e=1&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (25535-671783-mozilla-firefox.exe)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=iU m6ABzmmXcj3auNZptJwVd0Ix1fFNlH27B19J6MXI=&c=JgakDcJwNFw 4z0n5hPAqKDdSC/nhvp4uXWG3KwdF9PNa3J2dWR01UF6ucedx zUM1YEChooJ DGcL8d8HGrRfz5u6vf87740tNS E5zaAlNCUVujoX7cZeAFkUteadhfKr2Qxqn9lXbSCRihabL6CMRRtix9eGqt3mtqG zzvk=&e=1&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (d1812f5aa070ada3f7384c83366c4866)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=TKt7gvmBrgkwCDd8objIKYwsD2cWuw71OLozfbK8jVM=&c=UvxIrgx GMoHb10nY LON8GBEUvEd/6xnzLwAOvGe0LaPHVuxIi/oF5qtQJ8I6/MoWr1JI3p9c 3wGnbZ2/Wz8SPRynwEkt/8G/cQotdIkAO9O8osZ7QqlQ6gldvwDrt&fallback_url=http://res.hufftos.com/.../Photoshop.exe  (8cc03c9ac87aad81e42a07c63d07b06f)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=7FrqXQ6PokrRZ rIGM2eak3AJI UlhB6CH2SY Oz6i0=&c=kehLFrBIJJ0OHZ3Xw6RqNAT0GGSFh79YjdnfdAa84Fcz k8eEBGUsB6yeF9B1A6BJs3LIo0MgTRIc 4Y8FkcK2f0TddzmZNwn6D3qfxiEyw8GEHxWE3F3o8H3wPld ur&fallback_url=http://res.hufftos.com/.../install_virtualdj_home_v7.0.5.exe  (3bd0fe651392ed173401f2081b64a434)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=cVprowruN9iQhtymgwgNCk1BEG5ijZuQoMUuoDoRJT0=&c=3AmQmrtEQ091IDdWwP2suAjZtQ7tAeOi5Li6ychwY0 1WlvZxVN6XwTcTDHXIjvUVPSgEPikQS9ZNsXB32hQtJ3c8zyYofXbj3xPECXJBK/nkDf0ilQ/e AZhbWBPZsC&fallback_url=http://res.mshist.com/.../CandyCrushSaga.exe  (icreinstall_candycrushsaga.exe)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=IviwTmOmZdTPmGl2g/De14FEpjOlR20dorzMpICDn1U=&c=PW6d8K12dO89xc7gJUmaj7pE0lLKYj1H/u1zIvdRO KUGYvYxTgxXhKtZd0p5gcYg0sL6xTA43b2L5loSssN BZTQwkCegUhtKghpbU7 YFwHAbDqUD2IDnOL8J5NMLW&downloadAs=hearthstone.exe&fallback_url=http://res.mshist.com/.../Hearthstone-Setup-frFR.zip  (7cf836e2db80fe3e1d23f1d88e5c0755)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=jwfVLhFpoBh8/Fui SszOg0Pa3wDlz/E DSbuGelYiE=&c=l2wLGRw2dODrYjCvjG Jkg AX5HxkezTZcvTGs1Gt2G9vNRWd9y/7vO6S/CFFAajV0kSN3DJYxVF/9ryReEuLF/bP9gBbmjHXbeoeDxGBoTWwaoOtydBXC7JCl7keoNwE5vXXBtIacuRHqKbukNCJLHjo96lFfOq1Ea5Kjcb5pg=&e=1&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (d1812f5aa070ada3f7384c83366c4866)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=d5KBJfWOJ5U3iY500Jr EIw1kZi1MT0tejBfBbRrVG0=&c=wNQPWkXgN K32UsB/rIK6jP8/45pnjNVAMjBMZZfxVbFyVHk0AhFRit74S8UELRt5ByzGzCk8meQdSNfmAS58WpyQ888ZrDQrMZ2sHSPsUzmJp6YU50uPZ2EE9 gPdnQ&fallback_url=http://res.emiln.com/cache/upch/.../UpdateChecker.exe  (83a42071a143ecbd6848090f1bc5577a)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=QW 6BvY/m2c5vhxyzCMuZh94Xa2A2w0SeWvsWVOD/os=&c=xpTL27TYr9prwQYnYIvx OLRAXVQnql79GkbyrYZaSXQE9ujdLkABVztKsTY3LthTEfdx1N sIMDR/fmGZK1Xa8qNKGtCNoDJLPRzJo2G8oMaqdodeet0PMG9btKsTbj&fallback_url=http://res.hufftos.com/.../install_reader11_fr_mssd_aih_fr.exe  (749c70d2606be8acfa30a9ab6bac9253)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=508BwFtbL0EAni1Ah9WVuGPQ7HKg5eem1aggHRKSxv8=&c=rISQMGXy71c22LWjq2xh44b47snREzf/9yjlpgyNWRMiqh5utR2XvtQ3xypFiOsp1N8xZ00nMNEMArThSVyn6B3dwNyRdtOrAGnGEoPD8XhJLrN/xa259iIIM13iS2vT&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (e63c0177d0618f722114d775ae959b3d)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=xRFcdBhgdw7Y8ZxwV3wu4dJun0quso8XxwRPPTgMfc8=&c=1cGALBHt4PNhk7lzDwh3cJtFToHg4uZ8y/bOxwjLHY0pccY Ql9J8uDQ/1BUmQZ2TFvRrjw4wJvs76PlBv2hFq90Lm3W2ZkKL5xUz1lWZpDIqnx23jw/cvtagV2BO93OkhmkmqGhCXB9fYi/kdwwZjfivDaSU4XpI2QNTXOSvjg=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (b69bc64090fc2a12b5ea79108912bb58)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=EpEV83MHyKTKrTSyTXYuW7iW0vx U9QoXtb2FnzDVmk=&c=UtnxDjMWgV wGkRfvm/GArElXxUlcGiRw10Ld7jH60VRzdx0c3PbH9vpqmOP QLQJz43e57geN3W1t4u8LQO3gV0eznDWFkNjFKNb zkuHhtr8AFls3JvQFVC7CykQGBSPRMtL7rOEBJOjm /2bGrnSxGu5O8d86LqGP6JcMzew=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (ccf728fef9faf65fab9a066c4a71219e)

1 / 68      (PUP)
http://www.gifthosttours.com/WVl6OTRQV1VsTWtKbEpUSkdPRVlsTWtZMFNVdHVkMkl3TTNsQlRVZG5OelZIVFdkU05XTXdibE5UU201cFoxaElNRVJpU0djbE0wUW1ZejFQTm5aSEpUSkNOSG8zY1cxVFJ5VXlSakJUSlRKQ1VubEtjVlpWVGxwNVVsaE5KVEpHVlZSU2VtMVZaRFJMZW1ZemVUQldSbFV5VjFKTlVETmFOV2hVYzNadVowcHhUbkpTWlV4d2RYQkpWRFUzVjBaelpsQlpWbkpLU0hwbWFGaDBKVEpDZW1wb1ZUZEphWEZrYTNCaUpUSkdkVTFKTkZOemRHSkVaSGRFUkd4QmExbEtVMUpLUzJKR05rMXFXVEo0UW5oTU1VUlhXR2xrZFdOTlZGSlFiRkVsTTBRbE0wUW1aVDB4Sm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHY21WekxtVnRhV3h1TG1OdmJTVXlSbU5oWTJobEpUSkdkWEJqYUNVeVJtOXdaVzV2Wm1acFkyVWxNa1pWY0dSaGRHVkRhR1ZqYTJWeUxtVjRaUT09  (updatechecker.exe)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=5nHm56F0fqNq6VZt47u5IEVD9nEcny7gBZG8xHxlrOo=&c=P/WomZzz4LfV9ROEH7VvZl O2z9wO c5aowfoA lOaAdkvXM7KS0wNTFXrziDBTsWoK85tWiLGQMHS2Fm/oaKIGaWCyRwKge9Wc6hgLMiJUgKp T3L1yOA58iqW/LJ7l&fallback_url=http://res.kchuss.com/.../IE10-Windows6.1-x86-fr-fr.exe  (492515c6ba2667c7b376b2e0a58912e5)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=3wUeQ7unx7YmamUAmOmdrncxPWAfircnZCALtjYv7Sc=&c=z7cRfCRshNzYgl0bo/U7 0xpR4DoqFnOiOskjTQGFnvdx38UR7NAYUYn3ULAUd2A f5cDWZ/78u2JwGgJ6E8kUkz9YAIKLd7mjJqz6C 2fDymoYTBA 2BqzsFGGp37pp&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi  (9c93b18dc09215098a8e27f6a0e875f2)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=9WCRZXRhpbCTmJLINY/sKjNCFhYnDxtDe8KVJsjdQIg=&c=0Ey3pKkrqID7bk8A0s4im1xfQ83hyrMcn/hF9A1YOuDGmsm5nVhjyLo8Ehqcizzz4SKM/K0EQbizH5ya1nEg988ZnrfGqpSX/BID4hHnsSmSL8tRxiyaTmURnMNeqeWV&fallback_url=http://res.hufftos.com/.../audacity-win-2.0.2.exe  (d94f497692ea9b41563a76074c401aaf)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=ERBvcVKERmxByOMlotYkes2 evvIwFClWyuzogrQm7s=&c=/gge8zoB813Ck3bwrTC1n3xwnFLa5ACZ1YsWE5PsXftZ8mZxo1JyqrskNTS6Q9/VIrxVgtvtzTUS7/2sBTfXycFAECj EDhHcZySvTQwWSiMAib7KE/oKlb9uJxkHzNe&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (8a70d41180de71ac54f42d6b9d074de5)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=MFQvLjJh/KCrNB2j35uMyM3QHLoLj5ECj8pTsTPgXn8=&c=9OgosSUtAovUiD3iodyuq7coToZBL6RV7wV14ItN4XuFUZy4i9aD5/092PSwZ 1hhcuqTIvobxkIvQPkz kww/vEk2bO2nQGkVwrpIEsN5QGk/uxOliUrq8gyxupm7kH&fallback_url=http://res.ikkni.com/.../ChromeSetup_en.exe  (31107b989fb1432e81b1f0d6c7ba87b8)

1 / 68      (PUP)
http://www.gifthosttours.com/WVl6OTRQVU5OTnpsc1JFNGxNa1ppU1hNNE9VdFBha2huTjA1eFEySmhjQ1V5Um5wcVJtWm1TREJwV21oaFpuSklTeVV5UWtrbE0wUW1ZejA0Y0UxNFIxZDJXR1pxUmlVeVFtc3pVbmRpYnlVeVFtSjFTbkJhUkhKNE5ETnFSbGN4U2tWd01tNTFZMVJNTXlVeVFqQWxNa1pTWW5WNFIwMTRTSFpyYVVoRlRYUXlZbEpCUmtNelJFNWtjV2xFYW5WUVoxYzRSVFJ2WjNoQlRUWjFXbE5DVXpCR01YVjVXVkphVkhOR1lWbEJlSFk1ZGtGTEpUSkNkbEJ5TUc5VVdEVTRja1paZHpOSVdteDFSVVJoVlZscWRsQmhiaVV5UW13eGQwTklTMmNsTTBRbE0wUW1aVDB4Sm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHY21WekxtVnRhV3h1TG1OdmJTVXlSbU5oWTJobEpUSkdkWEJqYUNVeVJtWnBjbVZtYjNnbE1rWlZjR1JoZEdWRGFHVmphMlZ5TG1WNFpRPT0=  (icreinstall_updatechecker.exe)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=LKsCwS04eLXsCQPNaIY8u0L7zb1pYa6uNVLLU69C4N4=&c=sXPX88og /rm5RP0OU3w42r8D/c1LCPXsCFGjQmoy6zVDFYfDvIAWDQ5TqLtCcL6VHgYBle5UpDuGQC2mGqjO3TH18F9MZMtZyowCZd1VGKvGBdvrQYluZC3gCm3DWrh&fallback_url=http://res.ikkni.com/.../ChromeSetup_en.exe  (31107b989fb1432e81b1f0d6c7ba87b8)

1 / 68      (PUP)
http://www.gifthosttours.com/c?x=EzNQJOxXMmJ1IFYwu5z0wBdH9y6XLBRFvnwLgtCeJ28=&c=LPN0EpQ IBPPk7pFLM/WPsT4reBJwINHDGGOMIRcPm8/OAlTucV8x9CRVK3LztpcyFnM8D5pPwOZnHQDw5JdawTabuNxrPGXnjpDBQBVCMYvIRXEOVWta6Ti6S5yPyja&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (e63c0177d0618f722114d775ae959b3d)

1 / 68      (PUP)
http://www.gifthosttours.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  (opera_22.0.1471.50_setup.exe)

 
Latest 30 of 33 download URLs

The following 36 files have been seen to comunicate with www.gifthosttours.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.