home

www.grabfarmtown.com

Communigal Communication Ltd

Domain Information

The domain www.grabfarmtown.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, February 9, 2016

Expires date:
Thursday, February 9, 2017

Updated date:
Tuesday, February 9, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
grabfarmtown.com

Whois:
1 grabfarmtown.com record

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
95.00%

Clam AntiVirus
Win.Malware.Agent3850084642/CRDF-1
5.00%

The domain www.grabfarmtown.com has been seen to resolve to the following 16 IP addresses.

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 29, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 29, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 29, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 29, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 29, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 25, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 25, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 1, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 1, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 1, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 1, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 1, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 1, 2016

File downloads found at URLs served by www.grabfarmtown.com.

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=AoS2chROa0MYe36wzb4N5V3pEmdIYnVDp8/zOHdhrFc=&c=d0qZnIUVzrDc1B oWZUVU3CCbJatgUswCQ3vI2BxlpR7mc BWYC2dj5mNGK4BsJtFh P/j3ExmfxylWOqSUYmLfinkgYNxkItD20gwVxIDxTSiWSqb7xBVPYHCq36zZR&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=syCRJNSFYAPC4FaBocvxthSCQziOKmJjSqNJ9YznyX8=&c=l1GzgGe/0hlGluLgdrEjYmkHeFp/6rmSueQJ kJSAXknmbnG02GTRACE8cOJnbP9xxrgqQaz2y6rAz7vPlTC/Rb2/ /h7 fOQWWGLB5fOhJqZZGG5qIFbj2wizbHfage&fallback_url=http://res.hufftos.com/.../Photoshop.exe  (3f3eab26b169d1b01f18475367d6abd1)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=PZVf0YvHqKcG HYVSJN5ai2NGr/9q 5I2ZSXCKHOSoE=&c=bg1cz3B6Kk7iapB8hz0kvmBrygDv09opkFoImsUTpk/fxhzP5uye1Cbip 5YCpbBcrW7a6OMRMb8p9uU1XJ4z5IgJhIP81g43lp1mjRbUND8tYQROVT9jTaM1tIsa763&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=9fJjERJy5tnnuySskbpiWrep9g6UjIF6jLCX mISd2M=&c=ch86FN8ZUtJ5CHjuRazWhIfnlVkDED7SYqd9he0JZhvc /5KQIOmcpDzxeWECrziooSpk/3uNB6moWAPvW0JejqjIXsLUOVrgJFTSiS34t76HaSoUrQtyQkqnfO2HxPL&fallback_url=http://res.nobistex.com/.../install_reader11_fr_mssd_aih_fr.exe  (860e94a7b8793a7884cf3b049d2cf855)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=4iEg3XRRJqk88HbHrVQOpjveA5QNf03MiUugJsRU4m4=&c=so40465jAkF6E4WqoBrrKVOVEPger14/ E eO2qIT51MZxCkWXgfq8AUkx8Ac4lsSvREEjTvQnZLBEDbRic04YCPuGS8JEfdUIoboQFfvyTy7WdV6T3G3Hn8hdDMObg9&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=B zGoA7HvluVo1wVULDYXO 0PlDKu/2hkK90g9LzH0k=&c=Ou/AhAY92ACL23KeYpGp1iMug6naaY6WPUMvdyFwHT Rkcg POC1ZCiez4oEP0Icbztjwvrg2HCOEkD7EEY2v 7FuH9KvZzviO86h16Wrc4QkbEGCtpTFeMTEb7HJ5pz&fallback_url=http://res.nobistex.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (a0e37964eba16ade6d7a8fb002fc486c)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=lRlspX4mfan0qaZg9YqK7ggHImCimLmCGv7RAASx/Gk=&c=y9gaHwzJKQRAL4HtNBzGfZeVsQo6FmXTGV2c4EiSd8gXQ50YGLnxitexkdFilu2I5lBTS8IRj/xBkMKJcd6x0KAYyvs2nYvAPF49Fswn8mrs Y9cs5dAQgG9B/dNgUZS&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=NvYGFRrcuSFiK0gA9IhQQCtwOxTd100 CojV0zcMP9E=&c=vtltZHF/9jcm1e32QWYsEz1lNBqb/OCw4J68Xmgx9j0reBVlNte/210vBXscWFCyNSdD0iEQk/B2BC82swZUIQ/ze1ONrepKuoRZ08XrAH1Wdua56mA0KSmG6m1XUj12&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=RS5XL/FuxJCGBFv1KtvRP61sSZUJ93GAJ6uZ397Jz o=&c=F3zhCTeXGjedM2v7uxyXzOh7VrtD5J 8k3aO3kG58fe 7gpUFM9JssEfMDqF1VNMJTONH7ps4v3FxVpUVt6ZYJ5QSl0qy2nu/l BaRcG9EXUauHw9qsQ6u98IuRy2G7B&fallback_url=http://res.hufftos.com/.../Opera_22.0.1471.50_Setup.exe  (7e4ae6af5a01268116f7843aa35dbbf5)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=7K1TWGU9/V079VXh XPtO/i7TxDhPzYAcqt6QBTbxqg=&c=6EyW8Pqt6mJKFuscYtyTcCgM/9hYu21BeFgJhEfV7ugZ9vNuWjIuqrPMJ1/4g80yuSMdluj5uD0cT7G5 I/hp fohHw6pbW8bNNXgFzhmfR1ztikAi8rxBd2uv9Q4sYM&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (78d93695c9dc259907eaa78f58250cbe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=H0aIklYhEeGCBVlGDjcDELQbqqrVAdX023HSIqSu5ks=&c=CaX5twkblqA5PBh W3j3v/9TsdeVL490shyMGOGXkJSDJJjbct8Dy28 Pz3ciyhr/ydC9xbFSNo/p3tvvCoj5pumfuqxILNPGqEhVI 1h/yR96BwcsHbtNUl05d4shPy&fallback_url=http://res.hufftos.com/.../Opera_22.0.1471.50_Setup.exe  (7e4ae6af5a01268116f7843aa35dbbf5)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=ARFNSrcODR0aKfkRV0mIvzqKuhmZJybXorfkxzlbUyw=&c=SY3IEwV3rK0LHFmuoP tTK17LuHKtt9PO j4wH4HYa4SoiPHBoNrNQkSFMfqfQYQ35i0M1PgLQGnqBI0lGbDl4/DHhMvw6/6dhGiKPilfo4kURpdr5AXLvmrbtfo4qMC&fallback_url=http://res.futboldwnld.com/.../SopCast-3.5.0.exe  (icreinstall_sopcast-3.5.0.exe)

1 / 68
http://www.grabfarmtown.com/WVl6OTRQV2hQYlVoMFUwWkROVWhZY2tkQldFbDFKVEpHTTJvNFUzaExjMnRDSlRKQ1dFWnBWRFFsTWtKaVltUWxNa0l5V1VodldTVXpSQ1pqUFRSTU1GbFdZVEoxUmpKRFIyaDBkemhSVlhKc0pUSkNlbWx3VUcxNFlVZGtOMG9sTWtabVFqVjJZMDgwVm5BNU5tTlpNV0VsTWtKa00xZ3laamR5Ym1kaVNVWTFaMDQyUVZkRFdFbHBWeVV5UmtFMFJ6TmxlV3d3VWtZMmRHTlVVems0VmtnMVdGRkpjSEJPTlVkMmFqQm9OWFY1Wkd4TGVXaDVVREF4VkhjbE1rWkphVmhxSlRKR1lqVnhUbWRQZDNWbk9GSTJZa2RVWlhGTlpVOTJkRVJpVEhabWVuUWxNa0pFZDIxQ1YxbDRUVXQ1YTI5NFFrSnpKVE5FSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHY21WekxuQnliMmR5WVdKaGVTNWpiMjBsTWtadGFXNWxZM0poWm5RbE1rWk5hVzVsWTNKaFpuUmZNUzAxTFRJdVpYaGw=  (Minecraft.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=3fcCsHljEf T3r56DwQNMbnc6QjekK77Ey1x8nCPLrE=&c=77G5PUluk9yFhgztZ1aY2tPAAn8676Gal6jtv4nio2xnyA7znrlSZDtIzyhkDH8 X3Rb5ji9grwof6eS7LrxERv4IFKvNsPusP0WTS XoghzxdcrJdG9DSVQ5xYtoYq2&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe  (12665dbcf1b969d8f0cf4032da7a662c)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=UAGIEE3HtCrvjkS8NuwAJcvQFXl/ZHyYIRJ HaIhUhA=&c=0mUOdmWq0QEkVrT5NGcrz8qhQC2TvKbTYQOcg0mHUR y7QdJypWkiUxDd 4mM2nkblg9uURSchj1uIlT uFMQ5nrV PsjDV7rgYQnhL lQpKzRQc9V46pg1gSF 82s7x&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=Qp3OxUa4LB9nQ Pi0oIuyxn9xWrRCjeVbLFKxzh2EEg=&c=5 0qJ8cJWB6g/RmsIDW0luBYyqSBJ2YNJvolykvCbgAhG3/R4J4Iu5lFTXVPUsAy VZ3p67EqtzLj/dtRe3GzH9oRmyR/4eqbCtLr8amh22nilyS0P9OM OGS/4K4QAD&fallback_url=http://res.hufftos.com/.../install_virtualdj_home_v7.0.5.exe  (4d2895bc83da4c39409c4ec7af76e030)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=uWEd9dFL2PKyEeVd2At5ad5H5Q1UpT6RqIfIY7WFKTA=&c=NjMqAECM0D2okDhfUYoWf7Y3ahe7KOqzePzxha4BLiXdI4zjZ1NQ8MX7RiGH7gLMntvygRy20ShO1u4xDSgJNj9SGxBEy2d/MHOzU1PfqnWjma6PnlrhkI2ZTQ0ArGbq&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=bU zlb8RmFE23DdMEyPKfZKtEWL1u606kxoKnbhyuBw=&c=fEXiF10ZJrf8lYC0NoFlTbhWbwBxsBtSSiHxYA1kiwiwBSuqoHIz9WFPWVaY6j1cOwgGpiGv7/TSQM7lX2PzFCfRLBbjyYNKB2jmZI6rWZ2/pXi3fM8HsoYVOMhCC5qP&fallback_url=http://res.prograbay.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (a07ae151593fda3f536e064c8c78518e)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=bPDO5UICKb7zMO8yN3 WsNR9krSSdFGfljRTgJhqoPw=&c=hngXPTpUjBd933vqjpkFmBUDeub lAxtCx JwvLh9v61N3l5wNuY7U22fLSXSgO51eKtxfCmLm1nI frwttafOBU2kZd88Gx9nxRSj1lQhqCvzDKEe j3dftRjiA0SiQ&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=s ka0KFPYYG7gqcdCIFomHaGsZd0ti4k5dfXvCPKxR8=&c=tqifaAy0SiVXtJxJIGlkgYIF5MxyIpLOpYldG3uuUxGCAGYnRihHecSKQcjhqSmF9cG1xWi6zRCpWk05xPNNsBrmU2yhxvQ2UyLzjXeoV7EDtks3RWLAKnWuJwZ mvby&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=uoKSI4rLQSjsRBke9xxdZfu9BTeQlVCzG50i75P5iHQ=&c=H50fehlbbcUs0aSL43EYS QNEHMXH9IEUKoaPTHh2UfUZMge /zbesMJGi8RxpsfVCMC9bezKj6Sg6A1BFlE4UxAVcKS4f2sWWB82Z9jBK5jwslKTh4PUy48GjcYqaSq&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=6178mymv20/aiUxfGJ/EUMx2stQ1Dx8MT0/l4nIzyig=&c=Aw/XMiTCn8EsoewbAKON6Y9smylfJj6q6df L8bWn39pJHvOfBjzXdJvPyM1O4oT/1sq6QPv6pTRiU3KincOmxZrhqrtUTRbJ9q2WxPs/Vec7ea/l3qyX4AFdY/oA26C&fallback_url=http://res.mshist.com/.../AndroidEmulator.exe  (e61e2ef4b1d114d405e747a37a82e2de)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=NgcioZYNrDHN5DnZThr wN4ETGuLWDngV5uloZVhlUI=&c=U7fjt67PVPIaFDWRNJVfujcy1OX1Ks7fd01eyzCGfJ9hZOz52oJSCtaNdBtV2cKWhbHVmQSz68jDTwsSEXQLFAn77eBBGJsQW0CW1ienDfoDvV2C9wsl10mxHdxOYQ i&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=n1FtbZRiMspJFH4oXnCHmomNyZeB88Y r8lNbkMx2TI=&c=ew8D62E3raPqC6IfPvW4RTJAnmOLuLx7W4IUQvORFXgRopU0JccJxXSk42rqCFTF4ah OLa/MEtPn2Di1DZsApVzB8lWpJ4sfIwsfRpqHtNhRTxeqDL8SE61FNCkJOrF&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=ZrLXGqkdav8ltcN1Lb56EldDewa4hf861eTj2M0zH5c=&c=2fxlEPgIGZ18E0BGikcXichR9SFyxWfa4sGjVg06zABoTepy7xB4gDMpmNjzvj2Yi3eeqLI4L8ZxuQ3UwUcXeWNiUPaAzEVFKeI5mw70aa8T/aJcfa9RlJfCRLFDrhX/&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=NaYR6mbFqbY T29bbPxlktgc7SWa/UZ0Z6aRJYmAFTc=&c=T1iMZsXCLn1WzbTLeY8ymPyr6BBe4mLUrGHi2MmyaJnIvE0wHHlvFWPSvM2YLRDmgZXxlJxPbFeu6KY3/x6sOmqi4F7wK3qRyho7wni h12AjZNPrgUdQgbWSFrDxplx&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=EMbIby/fd9UouNh BBwSMzcx8gbfcgdWpr5eJN4s3cs=&c=L GaqdbGWJ3gD4AKY//Syyy9YEfXdG48BgRmnUINVMmHIv 4xEtkhCimterc8q/9xIhF7U8ArDPUcD06ildibuHMpYq1uDm9OXxfdo6U7U0c2/vjEIoJ8bB/VuvkBEy8&fallback_url=http://res.nobistex.com/.../Minecraft_1-5-2.exe  (c292c8ba682a6d34fb51bac19d9c64f7)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=jY97Clxzz vLVXgz/9CwTJcXQ/I9g2jRCsprP30D6uY=&c=9FGrOkbwCnrtcJauS7VECAGQIXcLymSVMktQBfjkUW8Hj9mqWdM/I03x90iaHuSF7ED1ZtKHk/nY0OMyTA1oH46B06DkjTm00OdGJfh2LsDBr3QIY1RYc2JygXPfahXU&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=4phRggUjWQl7sUXp7z8qnsCAPL crYmtNQAwRmbGdZA=&c=MZIIiIXjFDEmxvY41oUTNcZs6bXZ7D/AHvg2LC/5psqZsbOHtL3dm6ZiTtSh0CWcYUb23tfDc4cMjnnrzWRjCT T688XytHOeMRy3lqzAAomHjmrzSUlFCYVsdhLxXvB&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (8ef1f66128c856fdfe4eb4ba0d005f39)

1 / 68      (PUP)
http://www.grabfarmtown.com/c?x=noOWr/bZrs 7V40xKsD6s1Ygaf4BIaWla7F4ipHPJW8=&c=WaAuAwTZdXar22Dro4nsPUEtRuVAsXS4n52JxedJWTi6PvdeuRcVGMujlEuJ7martXjmMxInRJWM8aJPc9 Anyqb 16xdl336goAzzu SY/5viltm7x5yVpT2Wd9oKM8&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

 
Latest 30 of 112 download URLs

The following 23 files have been seen to comunicate with www.grabfarmtown.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.