home

files4.gamerbug.com

Tightrope Interactive

Domain Information

The domain files4.gamerbug.com registered by Tightrope Interactive was initially registered in August of 2004 through Network Solutions, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
Network Solutions, LLC

Server location:
Massachusetts, United States (US)

Create date:
Friday, August 6, 2004

Expires date:
Wednesday, August 6, 2014

Updated date:
Friday, June 7, 2013

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
gamerbug.com

Whois:
1 gamerbug.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DownloadAdmin.Z, PUP.TomorrowSoftware.SpiralMedia.Bundler (M), PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.Tightrope (M)
100.00%

Malwarebytes
PUP.Optional.DownloadAdmin
20.00%

NANO AntiVirus
Trojan.Win32.Downware.crgjbr
20.00%

Comodo Security
Application.Win32.DownloadAdmin.TTK
20.00%

Dr.Web
Adware.Downware.2220
20.00%

VIPRE Antivirus
DownloadAdmin
20.00%

Sophos
Download Admin
20.00%

ESET NOD32
Win32/DownloadAdmin
20.00%

The domain files4.gamerbug.com has been seen to resolve to the following 12 IP addresses.

23.219.88.159
a23-219-88-159.deploy.static.akamaitechnologies.com
September 4, 2016

23.219.88.158
a23-219-88-158.deploy.static.akamaitechnologies.com
September 4, 2016

23.15.7.105
a23-15-7-105.deploy.static.akamaitechnologies.com
April 11, 2016

23.15.7.97
a23-15-7-97.deploy.static.akamaitechnologies.com
April 11, 2016

184.51.126.90
a184-51-126-90.deploy.static.akamaitechnologies.com
January 5, 2016

184.51.126.83
a184-51-126-83.deploy.static.akamaitechnologies.com
January 5, 2016

23.220.148.8
a23-220-148-8.deploy.static.akamaitechnologies.com
January 3, 2016

23.220.148.33
a23-220-148-33.deploy.static.akamaitechnologies.com
January 3, 2016

69.31.16.163
January 3, 2016

69.31.16.138
January 3, 2016

23.67.243.19
April 11, 2014

23.67.243.24
a23-67-243-24.deploy.static.akamaitechnologies.com
April 11, 2014

File downloads found at URLs served by files4.gamerbug.com.

1 / 68      (Adware)
http://files4.gamerbug.com/download?s=Affiliates&c=gamerbug_multi&brand=gamerbug.com&pid=TR&aid=1028&bc=415&country=us&cb=503960193  (areyousmarterthana5thgradergamerbug-setup.exe)

1 / 68      (Adware)
http://files4.gamerbug.com/download?s=Affiliates&c=1136&brand=gamerbug.com&pid=TR&aid=1136&bc=422&country=us&cb=1262794677  (thepriceisrightgamerbug-setup.exe)

1 / 68      (Adware)
http://files4.gamerbug.com/download?s=Affiliates&c=agamerbugtest&brand=gamerbug.com&pid=TR&aid=1028&bc=422&country=us&cb=-544174840  (thepriceisrightgamerbug-setup.exe)

1 / 68      (Adware)
http://files4.gamerbug.com/download?s=Affiliates&c=agamerbugtest&brand=gamerbug.com&pid=TR&aid=1028&bc=422&country=us&cb=-1572809302  (thepriceisrightgamerbug-setup.exe)

1 / 68      (Adware)
http://files4.gamerbug.com/dl-pure/.../?bc=361&checksum=7030353&cb=544402843&executable=1198105  (lawordercidarkobsessiongamerbug-setup.exe)

8 / 68      (Adware)
http://files4.gamerbug.com/download?s=Affiliates&c=agamerbugtest&brand=gamerbug.com&pid=TR&aid=1025&bc=424&country=us&cb=1403034615  (streetfighteralpha2-setup.exe)

The following 222 files have been seen to comunicate with files4.gamerbug.com in live environments.

TCP » 184.51.126.90:443
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
messengertime.exe

TCP » 23.219.88.158:80
browser.exe (Browser)

TCP » 23.15.7.97:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
whatsapptime.exe

TCP » 184.51.126.83:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.7.105:80
whatsapptime.exe

TCP » 23.219.88.158:80
jingling.exe

TCP » 23.219.88.159:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.7.97:80
browser.exe (Browser)

TCP » 184.51.126.90:443
8dda4b771a8b9ff7908171c045da8d64.exe

TCP » 184.51.126.90:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 23.219.88.159:80
set_hnrmfrgr.exe (Credited Handy System Installer)

 
Latest 20 of 246 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.