home

www.cityheartsafe.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
cityheartsafe.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
100.00%

The domain www.cityheartsafe.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 20, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 20, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 29, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 29, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 29, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 29, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 29, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 29, 2016

File downloads found at URLs served by www.cityheartsafe.com.

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=PfVmLNAWVAdqXjOtYjLgKI2bec2b 95 vMZKzm5LN Y=&c=V7i4jGrWOfzre5NdPZLZgghaj0LJmSeDbL2JP/kSikgB6vCjSbItmTKJ6bN39t09HBrl5yUGekvZKq1Qk66LmtQL 0K6QUtyCrQdOpVO7ibRUGcDkfsCw3nH1OCvpMRI&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (7ae50688bd415e0e06b62fcaaceaddb6)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=hiBn27 VpT7Ax1KCH1t8N3Vp7XnpUyxdbiuijjxIceA=&c=6JeIHgxPc0GjaP2LlYL6amaggkLIpCEk5zyHd7N/5 offuG87obyetJ1Z6aIQf7HV2Tz2xTMwn1B/owoFW7t4OZwjEkekuTrTJeJy9dI0lYornsC6dEw2mbqEP8SFATC&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe  (ce29b87ecb66c062c19b2463dca0725e)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=iOkFELfzTTUlO5EfGuGMzqzhhCnrZNHzg1wWK4PEa9Q=&c=n1FmVyJeT/X IjbwT4Wwez PLZqRH1fusTalEHXP1r8M9Y1w1m18ANkO//0yGlAmafz59I4q4g7mzOlCAAeNOKZ/oz58xUQ9LVC1a9YJeDeFvkWdFGXQCb47Xk979B8s&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=JHFdxWZttMx7aAkwq0aibXjx66TFrT fHiy9IZ7iHA=&c=PyMNbuud4yAbrMgnmjooxSapuaWpZhCmnnvoE36ILiFrxiKY2Wwreq2KUKb jtXdZ0y5U0EJ9TWdzlwBkvtKJwT3cVTk VB78wiDHmjEe8M1vRL6fHMbcpnWFl/o iAS&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (4d4e76ddb0291ea5d855982499dbc35d)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=Wzm08ndABTU/6mj1eZJfBnVoOYQ8CQ Svm002AD2G0k=&c=KCpxoos5aKhgkSXbdBtRSrdkmFQhP7hKVLY4tSNkt4W21iQJcIBDMrAqDVRyuSS 5rz b1oZfOehfkfQLa5BbJXJkl1ZQo0xIZcmFkXIlWTRSGrHkG QXhEXOYpCsluI&fallback_url=http://res.hufftos.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (1f3250b482d1243ae456e9dc700a381d)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=AGQws8ni4PcyhgKy/6Id84VllN8UzhBHTwqEqsqoZ/w=&c=St7VNRMahbH1jhDwZaLfVRQ0dcyw4bIMWBySOTqVfbsUDEKL74UMlW /YFF5qkhzwqRVuJQVW5xDHPO/4Tz2ufaOye6RnRTaBpJ0wXNiP4xHGxY Yd fSfGJ0Z8KHbUl&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (2f2bc2548d18b12cde65f9f6ab05ca87)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=/nRChbpxWX3 u7PG8Ev2dOhWTYH3eF/av 7OvbAgxU4=&c=G6 e/a0jcw9B0v 7kXMTs7Yfq1jCMIMRWy9n jiyaKiLmHiPcRf4gbJenlulUvniAO0RiEuanebwoNprKLFcTZWkP9Eya/1IbriHOKD1BUT/61TBvFz uq8pd7UIv2v7&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=dgPGLkog vwrzEJT9rKJa6UnipMJ z7Gebndz1a7als=&c=LNg8VcVJ9hpO2f5WkV9y3LDimrWomFHFh8n5p5oaMi qluyQLn1YnMggDMV jk/zVVVJJ6WmLJSKTLprhhvuxnr wN VWY0yzddDgQsx YvIOCVGJ67k6fiD/0pxOSE4&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=MkElyBDoPrwd5ifuN7Ro3noeO7i8TeIO7YSgUmtT7Aw=&c=P3tYw1kK2o92RzRRpKpE4eMBdOO777tNXzD4ScliwkjMVN043iREL2rATrISgl1GLKaUG0GHUDKly3 P 6ZOeJLmQvIdligHaRI9 MiZO6S EhEtIkpZIPL 37hh56f&fallback_url=http://res.hufftos.com/.../gimp-2.8.2-setup-1.exe  (50037748d590bbe1656f85cca987fc18)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=66dMU9GppgeJdoDnMW7HO2R1RtmS8TLhGc/DG4v8jzo=&c=VQWFdZ0mZoDIwXcZl9gL5A12uVRDTYtOozgnJBkh4xNqsKBVnfdPUfXxQptbO2VWmddZ4R696eKu35yx/vJsxaeIgyoeOgyRNJFvHGBAWnncUjViYcg2V JRjd/DD2Uc&fallback_url=http://res.hufftos.com/.../install_virtualdj_home_v7.0.5.exe  (4563769ee432be61f4f65019035d3db6)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=8JYkqKbEqcXtwJATGfRimRZPvaU0K6PY5k3xVO7pNzo=&c=KoJYRBqgvyDUR9lnEi9YT1W6w9qho 5CGmOlPWqmWIKHEFJArXeFE8EPQtyMzWtrteU4irZcsMRKYnW 2XsRAX8d5DBa3ploU0hI Wkf458xdFRi0V4ktP7h0BDi6Yc4&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (78d93695c9dc259907eaa78f58250cbe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=qYizreOTA/JQtwrfl6PZQxbs m Gf7Un6JS475OnWAs=&c=AJDJUJQa8JgPPmInG0EHG4cjsQ39G7RG9OPwO90B5TcqDdFqBii2jJBZkFrZFyhW89QlybANYdmvquTZ/gwCnMxlnQllt6vdAeJjnsuuSphRkwibx1zqYp11JKFPp99t&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=mCaPIWphSEr7HBxV day3Du8TTX4LUwDIyRMskwobyw=&c=LUBe/jwUgcq5/XXS3zopAv8i4GKLsS7 1WE/pwbVy5KqjSvqFlnnxpnBIlm4ER HNtQx0RSUNz0Qse2iBpOZzMjMBFVTytIa1/eE45eFRKkR2aJiw4Q9fR25VxgczCA0&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=8OfY7Aae0ErLF3V/fj1wjA88iSe5aiNt2iTjb2o6T8g=&c=KTGgJFcCADwwiv7PdPiCfA cii4QPBk6qMXE 3y8PP3XMdoISqfvCCbn7tgHVWnvNpWJO5SFv U6OczkhEZSWWHfqxPjK8mXRgI03OXUyEZVM/5cxA/C5aa1VHFXx2xi&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=Pzaf/DqCsr/tKdRzivacJ6YtgcI4eDUcjR7oQUlb1HM=&c=qjmEYFcs346PFQ7yac0o4Wwh2owXcYGXNNcZKnxIyxU6sqsZnGQuknO1RKS4LmBTJNKK/f22rQFVgoGYX3bjURa2H PQD7PTZEWAySkc/vQs9m304DtnJKAXvA6yH5Lj&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=DFJQBvQmFNaKxPcp70eJ7qm1KS 9KkP2vIL0jWZ1AYA=&c=UKGuyFAu9MMH0ZeJBeF042JasXZACKVAVzHvXrdGbWxCCS5NwPXlxR 3j7vVYdCwu6FZQKu0OaYNR8dJpO3Fg839k2wAhCSMzO4K2qLmdf6J0sFARjyz0CWPwvNYVTMU&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=6H6lpPhu00jSs6s5NeVEH8XJLi70BHrKF78WyupHzxs=&c=0zLFKWaMQwusW6/FczUPNbCILa/7J2EFLpsVGoHqkuYWClN5xcPheS73to0igCJO/np2 G0yEBG/H/hxs/dJPZKvLfWUaG6ITo5sUJjgjMzx6PEKWdhdaEZihVEHZc9m&fallback_url=http://res.mshist.com/.../LeagueofLegends_EUW_Installer_9_15_2014.exe  (7bd76d4498454f0005b964bf324fc688)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=jQIz/MSHYZ9X5P6HUBcuA5Wfj5UHu ni 1wvV1z3sA=&c=jsszQ qxrKHULUHRqwUW Q1fAw3fRupJ/TU4wVquDLuJGYl6LunZ/sWTBtciLwNMdOfoHPGHDBeh/2WTdAuE/ pMhSuZMbOLbEepuXOU24ObsufxvOD4V/NpffoxtF6&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (8ef1f66128c856fdfe4eb4ba0d005f39)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=sfpil1HNhpbxP9lv6RymW8y68Epb2ESpSwaQHZVO eY=&c=fid7EhwGlWoOl5d4VMNtbZ4b/9SZZky6eJgrpui7X74fXg32caFxiOGOX8auBb9O4NaSWgQUrb8iXnnqThZN0kUeIxy MotGBd0Y cPc6WGcIhZVpk31OLJPgDZsMkL&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (78d93695c9dc259907eaa78f58250cbe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=FJPZ4s6kwWAYQ1SDBXPBSvAKWhu2qRxXyUxOjmLtgcE=&c=p TFArAUr4xyqHYSb7STQCc/8hTR9KN5 NKaumcnNP8dojkq8o/Ouv4r/u3l5IyDr1m6br/p6vr/q5FoYJqytEu5kxOmkKq5jj7fFl1Jd93ViqttMwRvsb6apkCNRJlk&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=UACAFy5GoZ9Za2qUiqWvd4TL2BJ01qzE 6xWIP0yZBg=&c=gcmSXLE1SIZvf3pjW3mGqdOerkuWD2jCFL5l5TUW6KkT3BnQ73glDHyQUXBYrBzpwyYgNyzAyrluTeOoOM5DmsdVLEl8AEbTwcAcSTsrWO073iaG8Y865CRzmQ/w5XpG&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (78d93695c9dc259907eaa78f58250cbe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=BKvgxKP97FQeVGWX1v3GhzdnyOsP tXwcQ FdpBD4j0=&c=gqLqRNEHsmjA7EfBQrZ4vdj5zH52G9oZZbfFgpWYV5/ arQVBeLRAYkanPG1m6Ko3diIvTC/6nPUpVxpAR2FTJsMrX5ad7fnpm5LvtUvh3ArPAqWPpFBXhopgRGDUjv7&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=DV5/KThif6Xm1y2agka0htloVTGqOb1ZkjQM9WoBc1g=&c=QsKBjIeEWXyKoPSJCf5Vy95V59DyfEk3pp UL2m1OzAgtewdUTBTX4SOkpMijxI0hBshhx8NUcxK2/CKAIFGfD0CioIYTHqVcjInfaTt3PCF58Vm0P6IQjPW1PEwAyyr&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=TjFGHH0hq5fwir25KWWA1C76OqRYpMelnjSYBWY9NaA=&c=UXI12cdUoi0p yFZ/oUKvraPSz9pc2VRZ16NjhpNWS5jeeswjtW9Q4riu5crpwhP4Kwel4YpB7zpFVQIYEJSsf KBesG9CeZ6r1vW9lRqPkER65pKLDas L8j7bmZMtC&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=WFbwi8FuO5e7nFJmzvP7OKqH0ceZZQuixXtupQeDh2k=&c=7Dd2pulWSwE/qv9P4r3WlLVoffInJVYH VmY ItVBPuHgAiM1OB/eYUpH6BmbmZRxciLHtmc0yy VTWrsUBsVkPxLZi6Su76zgOgO9gV8oYnbCSfq9lL 5HGclJx1B9S&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x= tex0fS6wDTUKdv /ZRa5O4 jPTYMlx/6ILwdUv5SeM=&c=sbkpnH1p7gBgP2/EGpDdVXPLLbWucpD9PV2tFAq77q2CBBPo/n/1HyDxhXqyFC8rBUDMpZV4f/wL/GYjAVgXWbVjNgCtaekkPPvDBU8WIQA/Q2MxaL7xfowkxEDx/cg8&fallback_url=http://res.hufftos.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (1f3250b482d1243ae456e9dc700a381d)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=qtr1tHKOjxb2OYjsPtPybC0ONV/dFJCcUfi72KgCzEU=&c=SwyYyeRo5JwCkqphnC Ca6Qyqd7nK rqBT21OnJzWW6uIrMPwSyLi05CEpXq L110iLsXF4sHdvF9o4ME69HTEXp0oXwUrR4fVg3Zh1XNN5kEQZsrg Opr F9CqUwyxM&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=ArOOz4TTG5TZNe3NiN7I7hUzZfc5iVoWPVEZXRe16Fc=&c=oAS/BheJBE00 tcZK9nrC4cHPZIvFueygwd61QviMbS4HfnxrJoj5qI0SRL65AznlFEKPIjuYOQkk3b/q ve6a8CyHCUwGJOfbhg2reZp1yZM6N6a0KctlL8VYwnLmet&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=geLe9l7Pi8CV46KSeJqC5we4nXc9z0BLsJSkF7nAmnA=&c=XzKThpzcIOX0MF9e82FL3DYccHOBM RPMDk6VsyX6IBgcdkEMkm3Gvs43u2EpQ8U5xZ2VToTMx7lf/nXkKDj0WMI7imxMaKl0Q prdUg7DqSDW6hZlHfbvcevVg3dXCX&fallback_url=http://res.hufftos.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (fb029e79ecb2fb5ec300b22eac70095a)

1 / 68      (PUP)
http://www.cityheartsafe.com/c?x=Dp8C/JW3Z9n2ww5gHN2omITz29VpvIVqaSvthgDEMRw=&c=s5DFBmicHoksWTZLaYiIiRoCETxX4vGYMfqg28PEjqEC87eqkB4O1eoRxUpv9lZ7nDbaEFfFU9RITCUDvJsF2t8YxgbRA389vxE1c0ou94aSTOLzT53Ql686VUuWmvfg&fallback_url=http://res.setauls.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (e0ad0109e43efa3ab28b5346d9f665e8)

 
Latest 30 of 42 download URLs

The following 6 files have been seen to comunicate with www.cityheartsafe.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.