home

www.worldranchbits.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
worldranchbits.com

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

F-Secure
Variant.Symmi.59817
100.00%

Emsisoft Anti-Malware
Gen:Variant.Symmi.59817
100.00%

Norman
Gen:Variant.Symmi.59817
100.00%

The domain www.worldranchbits.com has been seen to resolve to the following 8 IP addresses.

54.192.195.210
server-54-192-195-210.iad53.r.cloudfront.net
February 1, 2016

54.192.195.206
server-54-192-195-206.iad53.r.cloudfront.net
February 1, 2016

54.192.195.181
server-54-192-195-181.iad53.r.cloudfront.net
February 1, 2016

54.192.195.151
server-54-192-195-151.iad53.r.cloudfront.net
February 1, 2016

54.192.195.48
server-54-192-195-48.iad53.r.cloudfront.net
February 1, 2016

54.192.195.36
server-54-192-195-36.iad53.r.cloudfront.net
February 1, 2016

54.192.195.14
server-54-192-195-14.iad53.r.cloudfront.net
February 1, 2016

54.192.195.4
server-54-192-195-4.iad53.r.cloudfront.net
February 1, 2016

File downloads found at URLs served by www.worldranchbits.com.

3 / 68      (Malware)
http://www.worldranchbits.com/.../installer.exe  (7514dd06b809f16959064d77d0ce9901)

The following 2 files have been seen to comunicate with www.worldranchbits.com in live environments.

TCP » 54.192.195.181:443
onlineguardian-v2.exe

TCP » 54.192.195.181:443
online-guardian-v2.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.