home

www.safeappgift.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
safeappgift.com

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
100.00%

The domain www.safeappgift.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 11, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 11, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 11, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 11, 2016

File downloads found at URLs served by www.safeappgift.com.

1 / 68      (Adware)
http://www.safeappgift.com/c?x=lTiovC36s7WGQdgeO7HGsFgw8ajeOeCp5zEehf/L5ho=&c=KPMctv9ja8OVk46CTolvfVp8BKFe6xZY9m8lyGAOFc3jUtiqK2hf5u3l5yRFQakKEHPIc8C5hhevVQmiJdkr87u4s/QqjoVTYisxm4gQH6hBSKKivK2XjuzK8/rwJtGt&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=kx 0Jri09XGh63iliLrxgTsXbSeLvWaAU/wd2TyEmpw=&c=y naPkaIQE7Kaf0tAlMzRIpxaIad27dkxDMz7SJX6jo5xNo7Quz4JOn0/iKruzalIhYHFdR6JU7q6nUJZo/DLrNv3u8XIM 57ck3WyThkEQUEH/rtB2l6oBOYakSVG H&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=k/a8dZg5c8Oo0DZgm0T8YmzckRVKMlmB3 7Y1PZ1Mw=&c=tbthp22dw2r1FfnDzsl0j3mjDqo9wRxTrxlyz8OoKqY/hosIxBVqm 2o5c/N1WCky2Q7M0dCZ8NCWa5FFcg/WHfMHYyVlSQEfkQYa1YH/uAcDvYQhkFmM5ne4oyNKzz/&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=i07tN0PGmS8VwCgL8iC7GOwyz5TOmowUhEd6nzAzLys=&c=bd/xA i86mPytmXUsCD7ri5ZDG2TNnmsKgIGnVkg 2A g0KEtKakXVAnql8rsVag3sTkiGQdAQMHkm VhQ6g hwdL9YdxA1KrISXm1DwQaz 0EYIHF2PHytK7bZpTnRT&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=yJTzUclRB31HheiJY2NJFcMCpDMD7XZpfxaJkQbwqTM=&c=PhPqhh/oZgXp4YrDNpt6n1B1kpi440vLP1Gy8Fw3VMD0bqmi5YQfnS8uqhvkE7xNici5TmJIUs3jWVfj6sF1PPS9jJfMJFOXWJ /YR4hULrE9elSxPkOySIy/laKB uc&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (4469bfb06c46dec3899dd00f2952046b)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=b2CYuZWJ fvUIpyU9xL LSNZk3GYpI1vIVlLPbGs9kE=&c=kfmiG4Ja2OhQLuicAsy4DeSNfGXOPfrQcw1LkGDHKTovwFID2uYKEHM4TVjJqp7UMQMILoFrjxukCvWEiFrt/VQ1xbX8ptWef 35YIIM/lhKke79bOYtXcE8gmiHycgWUQozBRJ9teGELiwvPC486l8AHIHV3YHN9V9/GvO9sebI YXStw2Eo/Lyf H4Gw86&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (d51f59a99061818bd8bf4c9590d58cb6)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=4vCt6u7FfsqkI4tv4sjtvWe0S6Mcyx35XgkRSt5Dtkg=&c=2 3M3r1UswDPuzmqWLSgvFhakOkeu7qyst2gX/DavuJ7cX3AfZNA6iLtsVDEDOaJOWUi73G7mnYCGV0AU4DyzNPYbUwjJKmU7J0JckUsGEQtiIREB/R94r5KouwyZ45n&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=NKvy7EKJhiN4EA18yeOLi29Y9Sq10hloCel4BtZO98M=&c=K Pjy8xW9fC7JCoZ6yTbe7m5LHPLPrHcJodxToW0WktQ 6qi26bzGikpI4YZcU8MhZCwfgwLcvXHgVcVxSWfkN9EuJRiYpARUJNdSvhUly g56aK/pGP0dnEOMP5BJYt&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=E3gw6zeMKj1Va9bLPMjI6DS/RgBaDy7QIGP/aiEEc20=&c=Ym4ziBsN5ayQwA2yfkzYMOFScxnz5xcpqZic899PlYInw49ohqZTE/SfJMCNZq0WXN8n8qTfcy0RZo71Bi96YI980tuFy8JDrtwBAYhvylAWGOX6LWTSBqY74J7VOKQr&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (icreinstall_bitzipper2015setup.exe)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=Geh8LP6pTD0kH9PMV3EneD8S2hMUSYnIj77Mi0ER4pE=&c=nB 4x6/guwRbqk W83fFKYSg0raJ6TsjgigYds3CKy8KIUwPxWb akzNtlDsGY4FNlQY4YZiApFwnj9vtCCUxdbB1o3SmS2QK9Hkg3AjjYdiNiXqS15srN1aHST6UX4jqom3WthPfzFf khEKdIXX76lqRWMqgCGNvW1dcXW7IAIskJpsosHLHbac 32/cPy&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (f810eeab914781b070db8c02fae77024)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=kEtdTTPBP2zHksUOjUX/x i7on72kSa8IeF7l/YcKo4=&c=NLQpzOzMa3O7MdFrg2iAV1at3H9rFhvneErTHCLiDNMf8GRdnf52D9zNGNOvMh6F2j7tTUafiKLFBmq5ul/9WgSzMJ/8rwi1uv4tGMS4tYxiOntj8CcJNWVs3nBh8h3q&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=sH1BOHHWR 95vI3nYpDEoP9xYcirQ14yLZD/IAMeJVU=&c=Jz9w9C6x 36ze MIAaeTtzWr3VGZ3WAf3WhXFSIpsVaXvbJ5fHaO1CteRtBYIBtGT/Xq5hvm8WNSa8tgMR/yR7Yhj sr3rYYUtuZa3EpQsRGHSG7RmzmjPupBc47pREQGVtASuUetJfPqandAijHIR2ng8k5Q DajVZtvDVDTaoys2hbUks2M4GFwRZWNhHO&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (d51f59a99061818bd8bf4c9590d58cb6)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=uCI7cnZWQJJQF2QOkGh9mV31SBwyJcKMGrxCEQPUCQQ=&c=eTAy8jRcAYgM6LQ/JjzRwei11PAGjLMoUH5tX8j1bvJBAr2skugdjfoHxLTfOgGpRfCdKl4gN1TOArJUlhJopZj7lzsSM23UkoXo3COZXuxgu4VoNWDssrQEZQVlXhjcJSfQ1WAmgoVT/wK1MA70dcBRMfwB97Vbej8oAcsYNNdNIDTWz/VigGlTRZlLDooM&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (f810eeab914781b070db8c02fae77024)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=BC5WaQkgGlumdPVPdKeO55VWpmJquB5ZlksxrgDe0Ns=&c=386Vq/pUwhn569re9nngFbuFNXhF7XCwjX0/4 qllokjtvQFmNwoo gZtVaNB6N1LLtB0inlek3GbA8KFzoqn t/zAmivPoCOB70rXJ sG1BDFf1w5nMowT7zgNfp/X5&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=PK mOm YT2E3ubUM5YHtofisXe1In4yzaFR/fz9JvXY=&c=aOi nM0FRg0lM94NO8u21niPGBEVmAeY7DUSEN1Zf7u4Plv/wZChFa9rljltnh8Z2egpE9/S4mrIMteUlCCo51zkLsjjdwzrRTk7EsI7eeEbqiQbO4/Zy5A3NBiomUMF3a9XYjfzdMFH92AxYrsg1HpXovOgk8WvqHOcDD23n5hkBt7ako22WfAd8NHq4FYN&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (d51f59a99061818bd8bf4c9590d58cb6)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=bFTNHlBaXDUbVF1YykvVoXDM9u6mCSt9mTvQXQ1dKEM=&c=/AlAxZaTSc21EVtYi2/INyfAQzxoRA6MSvnihWrHp15RRnc/TOZNZDviD4ik3zR0F6CfVpJ0d/y2rMt07kL53v2GfcykR64spONSVsPDqegQ8aaW1sZe3tIpzA6Bz1iY&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (icreinstall_bitzipper2015setup.exe)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=SoX6ZEgUQ450HCMINaqVv2SsYcQHBlNDo8Md0VO5XQA=&c=YVtipPfad70uWyZwAXNdphHgj2rrlZT4VsQOL3v/4E1pm3prQvb9rCqwu2JDGOPV8pwraqGJxh4ExNsS4Gpd0m SAGgtTDgShdnqTEkmzbfiqnQ1lAcHO12F6AWR2FyVmI9dwjaG3h8OPrdfWHLZaEPlU1OOEZwqEantouOVwEftUKqyrIq67yE1SfA434H1&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (f810eeab914781b070db8c02fae77024)

1 / 68      (Adware)
http://www.safeappgift.com/c?x=kKqkuMExT7u9qIH53oj/8l xPQyLxrv26eCJmKaici8=&c=5gws8VF5U0rHv6LdfYKlEzjW3fEtdFZrI1PoMipoqwVP1cgenHpcR1 LLAPgJtKYY3ZStMDvFpfMzd7tF9gCGITvAjZWnKm7aQ0lXkUt/ML1RDySc/HtwxCOHoALEThwI/ps os9xuMWG6o/252g5uXm68n76mx7xjcGJAqxGEid/AulOiZvCfz5hNODJzjF&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (c05343f0a1f530a43505c0f58da421a3)

0 / 68
http://www.safeappgift.com/c?x=w0E6nikCJZlf1ldPvfoLoT6JkfGhdwqdE7RSMrMF/3U=&c=vPxCFzgCbsvr0GMWZgUyWLf5Q7LZqBpajTGolLg mUAcVCrzotdzGji2X/90KmLHHSvPxrdXF03V/97FJ0mr63Q5Mlu6yYl17OSWtwyu5fdPQfKhran9GJktpOmaqyqBr49YtHDq/pQKDRPiOy/hsIOSr56bJoenqPflwrAkxkRnG1gj TW7OHgZRww12hCx&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (f4727c523809cb7960602ff83566c66f)

The following 6 files have been seen to comunicate with www.safeappgift.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.