home

www.metagifttoday.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
metagifttoday.com

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.RE11 (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.EST (M), Adware.Bundler (M), PUP.InstallCore.FC (M)
97.87%

ESET NOD32
Win32/InstallCore.ACQ.gen potentially unwanted application, Win32/InstallCore.ACY.gen potentially unwanted application
6.38%

Dr.Web
Trojan.InstallCore.1903
4.26%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.13%

F-Secure
Application:W32/Generic.70053c248f!Online
2.13%

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
2.13%

The domain www.metagifttoday.com has been seen to resolve to the following 24 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 3, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
September 1, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 24, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 24, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 24, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 5, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 24, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 24, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 24, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 2, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 2, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 5, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 5, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 17, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 17, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 17, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 17, 2016

File downloads found at URLs served by www.metagifttoday.com.

1 / 68      (PUP)
http://www.metagifttoday.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  (inkscape-12218-dp.zip)

1 / 68      (PUP)
http://www.metagifttoday.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  (adobe-reader-12627-dp.zip)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=ItJEVmwB08sx6c8H8bGILfhuwWtBhl/5Cjp1L43HoRY=&c=EPtR6Esboy83tHGEQuuWPBs9wEe4xEaUnKe6F nPmtuzafPmEplbnX18Wcl6/jMsurOzo6B6tOaDl4z3UYL1DlVrwxyQUUnZ5fxkXVQpwtLj1iv7eAkLI46ppBKG0Y3h&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (5e272ede6bd84184d7e0437b6f2dd29c)

1 / 68      (PUP)
http://www.metagifttoday.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  (camtasia-studio-12665-dp.zip)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=vA7zte7fx8PE66UtoM7gX5IUL3T3u9aW8fuR2IRVxQU=&c=EGb/eFtZ/fIJepp7Xi/fIwRQcjY94l1VlaJIpSstOTP7Sy t9pEG3qLgPHZaQF3caNX53WWI9IC/IkxmYvJhXwjMB2BkpSdceTehlb5PlMsWVWt7d9aMCl2aCaUHeCMU&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/45.0/win32/.../Firefox Setup 45.0.exe&downloadAs=Firefox-13108-dp.exe  (9fdeb173f2f5318b3aa8684e88c2e5a4)

3 / 68      (PUP)
http://www.metagifttoday.com/c?x=lpZgEdbNK3YK0doB/4pWxUxbcxoUyp8pqnJ42D7R8jo=&c=uOZlTwkxhWaQIKL5n42SUyz/Qjk0U08lDkYYpNvfx5EkJFWVKpDVd2U2CUYmNLftpn/d4wfrFVnWj3iN k0ufaCPCMkEHQ8mgnIvqmZl/ZCe/xSpj5VQ8bQY2W26Jort&fallback_url=http://storage.dobreprogramy.pl/.../WYD_Installer.exe&downloadAs=Whos-Your-Daddy-68861-dp.exe  (5772355679b8a0e7f5b13793f91205fd)

1 / 68      (PUP)
http://www.metagifttoday.com/c?x=nsOlyaqSYj0EaXwA/IANxviCV4kJV1FvLcMnCQ08x/M=&c=Pnf1UwFrrv2Jj9T1b2zbbLP7V8WFOiPJnbSUCOQYyjJa5/LmCRJkX3nz tn97reVpJU7C1TOfiMCdieo2E4zML7FX9VrvlZPWFYesRrDnW8sDhfHuk4OTjCrYoTKP9u8&fallback_url=http://.../ccsetup515.exe&downloadAs=CCleaner-13061-dp.exe  (32dfe463c88e0ee21f55a66981dcf647)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=ulD/xGNjtC386P3Qg5JxSuEIxqJSlRCHozx6jbwRjE8=&c=y ZuVakBjFfsuYye7p70iM99EMpvxpVaJDMC7oSLKIu14 3jYB3CoFGYT20DXbQSLn/UcoYIL54s8WEUHq6DkIqrBOWSc1ZBTGEK9liCpa13pcWLptP9y cTV5fPZnzW&fallback_url=http://www.mega-tech.com.pl/.../setup_faktura.exe&downloadAs=Faktura-Small-Business-41591-dp.exe  (7c8355a428e790c2e221127a145fc1fe)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=IKoS8qIU3ChFtfYvH9mRzdC6aso4zhtPPbSGogX6A30=&c=ciUYfBNxOnOQdWUc8rWWkCpvvQk7hwuL/G2mP uANUX cwQD3Xg3COe 4CJKGtlRQjyssHVMJdrzQhAQY5MsyUcsSxZg8G6lW4asMdp6hs2rq0NdCaoAYsOwRt3CWvmG&fallback_url=http://storage.dobreprogramy.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe&downloadAs=Apache-OpenOffice-12754-dp.exe  (4c056f6e5a4a9762f46f85a24b0c4d1f)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=SvIFQQxjowFkeS2SLVOg37e8xIY/wn0BSQK5pLEpdT0=&c=r63k29 unXKrwKHDI2ewLzO0sFVQ4ycCn3ty0KdhFAnLku7CFH0UR0wZVVuP/qxtoXdZIHdBLYE4qu0uxB65pLVcqS4vGas8u1kIjExREj8NB5YnhAlYIRl0YlbHrtqq&fallback_url=http://storage.dobreprogramy.pl/.../OOo_2.4.2_Win32Intel_install_pl(dobreprogramy.pl).exe&downloadAs=OpenOffice.org-12495-dp.exe  (7ff64dd8436fb09a0de7963cc37c7506)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=mfSvlM18phfpHWcKiWQ8PErugU3QqQyUOIaqyvQKHiw=&c=plem0D5Idv/r8nOrOYIXqR30oZcH1kNjN47Qcmd3y7eL4Mw33Z/7hVqg7RlZsbt9rA6mB6d9uHGO90 rD6RQmSJkJgve6QvMIEoa8zMvmy4Y4kN1ZNuq2cqHGgejQRxX&fallback_url=http://download.gimp.org/pub/gimp/v2.8/.../gimp-2.8.16-setup.exe&downloadAs=GIMP-13219-dp.exe  (559dc7f4fc16f81eb41a3e1426294db2)

0 / 68
http://www.metagifttoday.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  (bluestacks2_native.exe)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=/ddjYmeukN6b5ZEP3f3IrR8Xb6lBXq PFZpbrBwM2Lc=&c=Tf78vEwWR4wFyZpoTkW/112KBQP3LntiaJG6i0VKQ/9iqDDhKB9vsnQEFLxltilC WG9/CTEVWKWA9xzrx4guoZyt7pAiAgmvP6UKB7QewDOE6j6B0Vs8k0f9ibEq Hm&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (6ba6b7477142620a1747027380e716c0)

3 / 68      (PUP)
http://www.metagifttoday.com/c?x=yOrA78qjFuxFSjdGB3YdpCTK99ltCGYJWQazaonY2DU=&c=oXnAEkqA5mm17yr941tNUd1BPTqzwEoUiqOPeM5b4sQA0R7XAi3MtdAlO1ZrZj8UeEQOOKHUWBYy5Z4 mPu aX7s S18Esh5yxDX3oGYjPkGONIbzJCeRzmRgEkPHVj&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/45.0/win32/.../Firefox Setup 45.0.exe&downloadAs=Firefox-13108-dp.exe  (e2b9ccaa907ee75cb1cbc0212344287c)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=lQO/rax95m fTlSFgWuZ9 ZkXSfF7MNTKoyC9DmoaZM=&c=QD1cJWlsxlHcnuFDmo/BejYq6ZEgMHHNFsOF31O3AJkpttzh5M2VUy 12xXteyDyj ZksWEZR7j8HeK/HkHdpVdikmuhIjnhJf4nudlKgXsYMurlHmLVb6yakV7I7 95&fallback_url=http://www.rarlab.com/.../winrar-x64-531pl.exe&downloadAs=WinRAR-12398-dp.exe  (40ef75f637cf97a5837b630f34f3ea94)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=GdYlFQYrzCqF/D9PxtGwYBFSFbjuSkk4eZMHx2zZn/s=&c=6STbxUSjSlgUMnHt6jUm QnKwuOPBF9XCJ7mPf1IPAwDmpkKl65Uq1HWeMnucCZt7fq0Gly5cQtmpNLY4QK9gbE5wqLN7ZzxWOwEoldKTmiGKCP1Wb HqzNjPPWJojMH&fallback_url=http://.../tcmd852ax64.exe&downloadAs=Total-Commander-12316-dp.exe  (e5d8559b7bbced6cece5b9bb7dc698a1)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=kKY7MYK/bOR2d2jryh8MJBL88Gh9tuA8pAwbWTS51hI=&c=1LSXHWZYE4tdY2GC44RT lGnYMDkGIbDAyaL3crqQDusl6fS6X3z/4C87N1w6Q0UgaEatJwEv0KseeDthcZ3VaonOB0ZPXyK1SIQd2gKXk1tHBOZT/AIkeTpsdnVwse1&fallback_url=http://www.rarlab.com/.../winrar-x64-531pl.exe&downloadAs=WinRAR-12398-dp.exe  (27d7865fa3e921d329a856f1dfe9082f)

1 / 68      (Malware)
http://www.metagifttoday.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  (geogebra-24054-dp.zip)

1 / 68      (Malware)
http://www.metagifttoday.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  (adobe-reader-xi-21590-dp.zip)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=YRS3eiqPCpGVYsKzuWsOa4za9GMwcqFmiamqOvT7B7g=&c=LNhehWxaSs4XR11GpxtZCwESX4WXBMkqJxDM23F57wQ3VYelBV6Wy14rlZmZC7PovjbvHT 6qUg Ut50tmSEBvERKjnRQdazuQTlaOSbmqI1LB1lMXTUmOF4NNVhIhku&fallback_url=http://.../ez_cd_audio_converter_setup.exe&downloadAs=EZ-CD-Audio-Converter-16035-dp.exe  (5ab19e911a981087cd1df09e69a558b9)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=YltqL2RVXpSzYD3kptfGXIvYkay99kzJ6IEZX51xgKM=&c=v/iCZP53m3U85EuLOcgB2ACvYMOfcEwt4qGiJkxr NLl/LYZrgxv4tjmQTJUZHY2kjc22Jcy3343T MwNaibmqLslUmXKn6DKUVUhD6Dk7PjvjqWf1zljWOMjiTRGti&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (96a85fe7a3c19b644eaf5ca10362f28c)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=Ui7ZxUCzMoKdHUeHsrogBgcOgjOeVhmYXUCFVz6kOuU=&c=FS64FiNuih4 gS66Iy29G5OJz62x5pYQqmWPouxc0BQf4J5lv2rWjPtDisbJ6miPNXEjDIVW91vlrhE9JEFj8RERrHiM5sJeHwqjzEywc5NqSADa akH/05e1WRC9L7f&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/45.0/win32/.../Firefox Setup 45.0.exe&downloadAs=Firefox-13108-dp.exe  (9fdeb173f2f5318b3aa8684e88c2e5a4)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=DbaBss6msT4M7FKoNETsOMOeRj/k9xS xGJKhrvq3Mc=&c=rQH/BiFzHQGR3RRi53wFPwkevDL0G5s871pidA1LaigbGht/dpQEmNVXLQdtrXJ6WqvsNAOcJvsWfK6fnXBCE7wSK8FZDBlgBbrmdlnpdFgEo5lcvc3J7VFrIaBFOwM8&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (461130c08f52fd16185ffd696a63ac2e)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=rgIlANpreTZH7QGu23feV21O8uWz7uV7lVlnjYOp SQ=&c=K7yN3y6AUGbyO1DUE3A0Qv26r8rUvpCXJap0bokUA6ARXu8iHqCID0qkQml9zYg /WTA4hRYV5LuFyJhfS0YBe2vLyL924EJteXePoZ8mg7gyO9h6s5vf3mHTAtfAQZX&fallback_url=http://download.microsoft.com/download/2/9/C/.../officesuite2010sp1-kb2460049-x64-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-25796-dp.exe  (be8a0cef43247f73c71964bacd6e1df7)

2 / 68      (false positives)
http://www.metagifttoday.com/c?x=S4nN/M6yNyOMZ3IDXHoqa1mJ5TNHEa9qAMYyjOohbC4=&c=aDTzwkCnu9lbfH0Q ArY32/TfWlfAA7Sd4nMERFw8d3kYU6ssyl/tdn8almC0kMAUfORKITtuslZQNF80BwvyMfKis9O/gol6fttXIW1MaAYPGCuEBECueVe6T6N9iI7&fallback_url=http://ftp5.gwdg.de/pub/tdf/libreoffice/stable/5.1.1/win/.../LibreOffice_5.1.1_Win_x64.msi&downloadAs=LibreOffice-21562-dp.exe  (wrar420.exe)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=Fy5aqTZGRYJYMDovR74aRjogOY4cYlg9QRMCuoVpnI4=&c=eHlDjwmKBF/J7NUtUe3CX1qq2Dk vf5EIoIvO8/DNV 0VGr0DFAXdnJll7Yd3FVM6 XTvjvZ20tKEDa0QDmKXoayXmV0ApFPighBlwwgDfLAvrpQ3j7IK NQR0mt7dDy&fallback_url=http://storage.dobreprogramy.pl/.../instspeedfan451.exe&downloadAs=SpeedFan-13166-dp.exe  (af85fac45dfe52bd87629b9bee991d5d)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=oONSHkwRFdEEuy4ycS0JlgWKc3Mmdc1xnoLIqZmVVZE=&c=uYZzpc6/t2 JOxPMpVaAbCxXshi0e4Ll7voxieFZewcpbe7G4iiRfl1ALoDszfbFjvxMnmeNCvWTVMGiMefQTqDe6MiONSc f6MMXPjDaXDyFIdHIZp3GOqV3OdlUx1e&fallback_url=http://off.dvdvideosoft.net/.../FreeYouTubeToMP3Converter.exe&downloadAs=Free-YouTube-to-MP3-Converter-22251-dp.exe  (2cf80861badb3bfa7c3fcb01befc4fab)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=OZpK8S27OzNtxkeSgd0lepVX6Lb4xcufEfRZb66twoQ=&c=2p5QvSxtUeJYIytzn352Wv2O3GM OIduVhZUPk6KoPujs8m0M3vdPqn/cTaELepZSutjspkC 9MLlOTuUYZ6Ws/oDI9/m5iHhYjkykkzw26jdAtxjnrHEgfhKx3NDH5Z&fallback_url=http://download.microsoft.com/download/6/d/d/.../Office2003SP3-KB923618-FullFile-PLK.exe&downloadAs=Microsoft-Office-2003-PL-Service-Pack-3-12060-dp.exe  (0343af764e009e4c924fa57c5eca6216)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=9lVSkfhkMZXe9sRDzbPOnRJnnNU8h1/4wOwmUFFh2fA=&c=K1f2njgRxl2eYPR6Q7Se6SRqUeY9O652eMYEp5bSgUVTlRca4fU78536q1qrUZXk8nh45JpiniHomDuACPx zzXCX1V/3GB9 mFTZ5VxVa0eTGQFhPzz3uCezNOXuq3C&fallback_url=http://ftp.4players.de/pub/hosted/ts3/releases/.../TeamSpeak3-Client-win32-3.0.18.2.exe&downloadAs=TeamSpeak-46554-dp.exe  (7616ccf9b333e1878a9db5b0e91e6362)

1 / 68      (Adware)
http://www.metagifttoday.com/c?x=oyD6vv4YPFwHqPKUHncF2AY6GES1R6e9qu6JOFZu0Kk=&c=W76zfDsVaodtcC4RafqDRtJg0 9KjyrVdaCmlZKCo/lxxPu5yV54NnSeMYTk5c5D9PiNVcRTNpwjzASmgpv3sgrl3djqik57TGMxk05eX4hEN8qVBJ5E6/MoGU43Ld2H&fallback_url=http://.../RemoteAssistant365_3_9_1205.exe&downloadAs=Remote-Assistant-365-33533-dp.exe  (f0988c43c288df36f8bbb5a08de76229)

 
Latest 30 of 228 download URLs

The following 50 files have been seen to comunicate with www.metagifttoday.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.