home

www.bundlecapitaldelivery.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
bundlecapitaldelivery.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.Swizzor.19586
100.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.59817
100.00%

Norman
Gen:Variant.Adware.Symmi.59817
100.00%

The domain www.bundlecapitaldelivery.com has been seen to resolve to the following 8 IP addresses.

52.85.131.244
server-52-85-131-244.iad53.r.cloudfront.net
March 30, 2016

52.85.131.230
server-52-85-131-230.iad53.r.cloudfront.net
March 30, 2016

52.85.131.213
server-52-85-131-213.iad53.r.cloudfront.net
March 30, 2016

52.85.131.189
server-52-85-131-189.iad53.r.cloudfront.net
March 30, 2016

52.85.131.177
server-52-85-131-177.iad53.r.cloudfront.net
March 30, 2016

52.85.131.166
server-52-85-131-166.iad53.r.cloudfront.net
March 30, 2016

52.85.131.87
server-52-85-131-87.iad53.r.cloudfront.net
March 30, 2016

52.85.131.7
server-52-85-131-7.iad53.r.cloudfront.net
March 30, 2016

File downloads found at URLs served by www.bundlecapitaldelivery.com.

3 / 68      (PUP)
http://www.bundlecapitaldelivery.com/.../installer.exe  (e983cbcbef441481496cceee36fc7ca9)

The following 2 files have been seen to comunicate with www.bundlecapitaldelivery.com in live environments.

TCP » 52.85.131.230:443
browser.exe (Browser)

TCP » 52.85.131.244:443
u.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.