home

get.cultbest.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
cultbest.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Solimba
100.00%

Dr.Web
Adware.Downware.8808
100.00%

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.Kazy.132995
100.00%

avast!
MSIL:Solimba-V [PUP]
100.00%

ESET NOD32
MSIL/Solimba.AH potentially unwanted application
100.00%

VIPRE Antivirus
Threat.4782980
100.00%

Kaspersky
not-a-virus:AdWare.Win32.Fiseria
100.00%

AVG
Adware BundleApp_r
100.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.Kazy.132995
100.00%

Quick Heal
Adware.Firseria.A5
100.00%

McAfee
Trojan.GenericATG-FARG!5E0AD815768B
100.00%

Malwarebytes
PUP.Optional.Solimba
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

F-Prot
W32/A-a1e0d357
100.00%

Bitdefender
Application.Generic.872462
100.00%

The domain get.cultbest.com has been seen to resolve to the following IP address.

184.51.126.106
a184-51-126-106.deploy.static.akamaitechnologies.com
April 14, 2015

File downloads found at URLs served by get.cultbest.com.

36 / 68    (Adware)
http://get.cultbest.com/n/3.1.54.0/.../Recuva.exe  (5e0ad815768b3ee193108a699521612d)

The following 37 files have been seen to comunicate with get.cultbest.com in live environments.

TCP » 184.51.126.106:80
nongkkjjhbjloiienhkhphhjjlnlnbfe.crx

TCP » 184.51.126.106:80
hgpjngajghfnndfnfhkbjollkppihgmb.crx

TCP » 184.51.126.106:80
wordsurfer-setup-1.10.0.19.exe (Word Surfer)

TCP » 184.51.126.106:80
rundll32.exe (Windows host process (Rundll32) by Microsoft)

TCP » 184.51.126.106:80
nbaaiiclpmcnaokeokfbbidadafjalkk.crx

TCP » 184.51.126.106:80
jmgljabnfdmcbmcakhgiidaceheohikb.crx

TCP » 184.51.126.106:80
bcmdnophccepbkcdgofohhjpbgkncgoa.crx

TCP » 184.51.126.106:80
DownloadManager.exe (DownloadManager)

TCP » 184.51.126.106:80
dpgmilndmpaboeeppoedhmpfnhccikmi.crx

TCP » 184.51.126.106:80
wordwizard-setup-1.10.0.24.exe (WordWizard)

TCP » 184.51.126.106:80
hgpjngajghfnndfnfhkbjollkppihgmb.crx

TCP » 184.51.126.106:80
nongkkjjhbjloiienhkhphhjjlnlnbfe.crx

TCP » 184.51.126.106:80
ed9256a4.exe (SS)

TCP » 184.51.126.106:80
abadlpnchipkpeikchblnfiicfdoabei.crx

TCP » 184.51.126.106:80
mchdimahohbndknpfpcdojibapcmfjcf.crx

TCP » 184.51.126.106:80
hhldkcaaefpielafmjgpchinmcjoakga.crx

TCP » 184.51.126.106:80
ognjkknidjhoijpkkgodcengonkffmmj.crx

TCP » 184.51.126.106:80
jlkhjkgmihngakoneoghpghbbgdkhkld.crx

TCP » 184.51.126.106:80
hbbjlbkoajfcdalnleebplfofpdiokdp.crx

TCP » 184.51.126.106:80
afladalempchejlhmbamkncpjagacedc.crx

 
Latest 20 of 37 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.