home

www.heartsignhosting.com

Communigal Communication Ltd

Domain Information

The domain www.heartsignhosting.com registered by Communigal Communication Ltd was initially registered in November of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Friday, November 13, 2015

Expires date:
Sunday, November 13, 2016

Updated date:
Friday, November 13, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
heartsignhosting.com

Whois:
1 heartsignhosting.com record

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.DestinyDreamSA.Installer (M), PUP.installCore.DestinyD.Installer (M)
95.45%

IKARUS anti.virus
Trojan-Downloader
4.55%

The domain www.heartsignhosting.com has been seen to resolve to the following 13 IP addresses.

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 18, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 30, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 30, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 30, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
December 26, 2015

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
December 26, 2015

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
December 26, 2015

File downloads found at URLs served by www.heartsignhosting.com.

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=pUVIp4DY81knoVNRdMgLIlVu0 NqAxuiqrcoj//BqQw=&c=ZDXuY5ZxXcN89wm7XPDV fj94PzsNJ wAAB1XvSDsuXed4VybvGvxLgdVT56Nwwkl5fdtQ rTtoS92LVHL9UFqsK6qoadR2PvS0JLIQXR3UFxwS1nTW82WBZ2TttJF0ij1jVSWTW68NOzWPZh4leNQ==&downloadAs=minecraft-1.8.8.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451066832/es/.../2/227519-1807427-minecraft.exe  (minecraft-1.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=28jIC/0uJ n2ASz8MOf5EGjmoGfZ6QyY8GjJ ZWg/Vs=&c=QltdJzxkvvLNHnJmA hcc58rKWJsqbv9vcxb7k3XUk0rTTU2MldaO7RUrLsLvzX/t0fdX4zcvwCX vY0h14O7VMvpjNmgvaw6UkVMtRUcVBsXqKJfkHEyo66FdTH2J81 bDFGJbLp0jCvV1f0fWbVA==&downloadAs=windows-media-player-12.exe&fallback_url=http://windows.microsoft.com/en-us/.../download-windows-media-player  (9138d894004d5c1a037c3225909ec48c)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=R4CbPDpHqB2ef5azyUYoV1TD7LMNgZMKJl9hJbthWFY=&c=HFcTW7WGzzng7NF9AueCA5wNFDwkzwxCS5BFku6DRPs3kQ8ZDoPbDdNNtbpWJ4kqitRy2XzouVd7gbBE3CeJIuIz1j6Ly c9r7MKpgEGufhGTys7EEbzAODhOshq9qJQK/uOGaPf8jp6wrnxPmYtAA==&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy  (plants-vs.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=7TzbfMJQO0K3CJVLfNaNs92d7V4 9TqhAzU6Dw/ABp4=&c=ePE3P/DQhAMKoAzZUCzR20OqKDMoB7EW3t8FRS0NB7beWzDMclWoVCMUOloc9V2C8nwCG3B8h7tuWqaQ8TcB2p0RPyPETKoOKIFb3ppaVyh6QnP6JluvzYdZv673CkJR5xiXgvPpYVXEyYZrJov2YQ==&downloadAs=microsoft-project-2013-professional-2013.exe&fallback_url=http://technet.microsoft.com/en-US/.../hh973401.aspx  (732f43cc6dcf62018c6c9e35f3033a05)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=4o44Z3eMMIF Voi cHWd1zjMIeyFPSuNb4sK9pBhOEU=&c=g26unSAHMq96PsINdbwzlsuDp6bbBPhsGbWhMGrJIwfFwSI9oS2EIjyr2Wj7vvY56voOUt5lu9xOZwh07F xAaMpVvs4T5AzUckzCYRi1YDKS5Y1M4pKhKggTu3RcGsKg0jodOhodskRLg0zmYnoyg==&downloadAs=garry-s-mod-full-version.exe&fallback_url=http://store.steampowered.com/.../4000  (de2a619b1686ef1a4377281fd4253ab5)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=cLxf 8lsdWOq3tYkhnwuJ1MnWzXTipqxzsrulAkJ7sk=&c=z7syHaL5ChFjIOsDfsaQ/c5bPbaCBYi0mrUhqs6Oqd1xc7GdqMCFfuEdwtqMgWBSKfpCaCsFlBtzj6Q9bz/oPTUWzJ8s8s0PwLNo6/CWWUPexEJ3Ay7VD3uoVpkUVr5n8EBBpw3ZV9gc6PIRkdxBug==&downloadAs=hotspot-shield-5.0.4.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451072601/en/8/.../84579-1808443-hotspot-shield.exe  (hotspot-shield-5.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=uM bEkzNojDP2MAQzBn4yO3CaZ4 xrT827uGEUwcKYU=&c=LKuej/gKLrbWvkqok2miuWIWRSjBe7Q4eLCzto6qTB8AbAQTicqnv3dsaCspPlE1RYtzhFQEraA2K7aCN8H7Vkrcr1KBWicOmURXEJKQvy4cLpMKelm8LNHPrLYJ8YEgVLEOB0JtJw5nUAMPrxF8PQ==&downloadAs=minecraft-1.8.8.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451070532/es/.../2/227519-1807427-minecraft.exe  (minecraft-1.exe)

1 / 68
http://www.heartsignhosting.com/c?x=MQAQxasum3FZ9kGoYsI0kjiBcjPtcNe4V1mQdS 3j0o=&c=IS9Xm95d9w222pUk4Wud8FKZXFuBy5U787GcCfj0uFOsSv6aJPMKhl2AGEyoEaohToCzw0NDQMQuiqs2cs9WsVs0HZgwqHCO4qNAgwloI0A3J0MH8sBeZ7Q x/t29aSyfOZLP8mgyNjijBkbETcN6A==&downloadAs=iphone-unlock-toolkit-1.0.0.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451054342/en/4/.../46207-1797314-iphone-unlock-toolkit.exe#  (iphoneunlocktoolkit.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=hp33ctJt8Bq2RzJroY3HhuWXN2nUkWCaEB0 vkQV8Ao=&c=jRbS2 LXdSb67Qt QKtANDo/1fRWqCXLXVu 1nGLutPa2hAr0eiC9ULKwfiuxKBXhR4sejlTc7mgx2K9F5Cb5Z6kDCnKcqGyWMl51sDqUj4/BF474o6t yC492aDtloOiAF2ONIIVqLL456GvvXBug==&downloadAs=deadpool-full-version.exe&fallback_url=http://www.deadpoolgame.com/.../buy  (91dd909b98567ac8d602a347a8cc82b1)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=yM2jRzhYfWNt1de//ym/BnH3XlEhRTkhc0yt3MByeJM=&c=nhpYWjDEfuZgkYN5/I3frdoYmYgS oR4WvfgaVtKRwQ01tDVhmTiRAliMPWz8/6C6vixIwrIL6E7EpH7BT2k3SckwpzD5CxMmH33yS/cvfvSsKjhMxP5SkOeWYSBpMkzxBYERmB4Hsw7M26FvuP6VA==&downloadAs=picture-motion-browser-5.8.02.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451024627/en/.../2/227400-1802466-picture-motion-browser.exe  (picture-motion-browser-5.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=VqA7/ePhrSW7ZXNGQkKis8lloeuOqGgZ/fTkCfVnOiY=&c=l245ss9iZb4vhd8ahpsuEdryFSh teV/2Ut4Xz7gxLWUH4UPATpuhR4uzNfRpNKqoV7mHNkNpU/yR47JcnE/98c9JBSm7um/rJRBT J5pe2ALKJ56DWyeHyC7kArC3fg6pOr3i72p47hC Qb7HhZxw==&downloadAs=limewire-music-4.1.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451082871/en/5/.../52307-1797151-limewire-music.exe  (limewire-music-4.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=DPHM7c2gxG/yS9d5909AIrj0d6CGKqOSQmwdQam/DTk=&c=JqZhk5PwRBCu4pJLlyCDn84eggrZkEeuYCTvY3tkxIthHl41ei9wZ0TSJXLWW MX7hdqg2 mfCnmylkVxKlfFIrUZi7iLgL7WhTv6tjav1zjsfjF ye5qQ/CHCTeTmof1rnv9cN0mpXI6XtW9jTrwA==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4df6751e022271ea39a67ea9df242bca)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=HaRbqsKjHKCooqAVoqnB eujJdyMuz1FtxRIfe4Xkl8=&c=b2rPcOSnBexrHylR1mGH776w wNCzzC0uODsJdD7XDKvL9NCqbz5lbn4Cnp6W8sXyikdZDNHTI/tjpISjXqlKDypg/5QSwXYHlIQuN8twm5JbP7wJ6wQSYy/iZkLgJnHJCdUgpZxnLgCjRzlP73xUw==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451066821/en/8/.../83929-92631-microsoft-office-2010.exe  (e6b4b25fb4f462925986260607666f4f)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=sKfs9d fhSYjEWNyRl41N43K9S3rgc35EBbeV6qkx70=&c=tGls3QY8A/jqwMT49T4rj/K0FdY1l9sVvxLPNtHZ6ZDvMoZjaPpbavBVuEQ4MQlo2GGDeBTk/QpsKnBG79gFQZZtUXsy6K5iNOsl7R HDQtD5BhopBgI0kRFoip3Z1cachkHLVEyoxZa BAd7gKdA==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451061326/en/8/.../83929-92631-microsoft-office-2010.exe  (f9274ed122fe2247cbb3ebae9f2bc964)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=KkjhCOWQSzA3dNulauSQgUTJNEqgiV0u/iWiZnJaEFY=&c=vfFY0SBnisCUop562JF4FpdcLt8/snVvs1NWA7CQ0JERlA0oO/zEALVXD0Ky4bAFCn7gGSu82A 72tqFppxErnI69//7SI30mDkkCFlFGxLVeqBfZUBrmEKAaeFR3uYquKQCr1fRMiVjrl3wk6eKsQ==&downloadAs=realplayer-18.1.2.175.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451080840/en/3/.../36924-1808431-realplayer.exe  (realplayer-18.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=eghYg7GzwNVLrMeGCarf7yz7nb7TOtzDhTfXgiWOEzE=&c=7cpp1li/GFkClq0jhzyq/lPStYb1Dp62FSVnZdT7XfJtpxN2NK5GdjukZlvH6uTjdoKB07I0kyNPzUazvT9n3Vdv44tEiktlVg05vqKJHr3XmEBOf/JDxHvvUmkJIKE8nz62M7ZlqKuTBZqTNS1m8g==&downloadAs=amv-studio-3.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451080755/en/5/.../54257-93391-amv-studio.exe  (amv-studio-3.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=B3UDZX446Ih/Hh8D9H7VTJRttLnfd SaKiuha64cQVY=&c=76wurZcGdKzzy0K/gKLC2oxRrS3dcPKnuHshoeCJ1N02eXSVTmzmq5sy8jeBOcjf8cl9xYRZ8EiqQ9ApvuzH7omTaXjU2CFEBXFW3XYew8dScEllPnjK1V6hLE2bSHKtdWx3uOpYM4g3q2geevaQCQ==&downloadAs=the-sims-4-full-version.exe&fallback_url=http://www.thesims.com/en-us/.../product  (29453e5222f655341225dd33942403de)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=TWPOz2EAZ46yMsJd1yUlcecSc/ab/O/mXPjuGFEj5lQ=&c=t/4D9TO1ZPArXxwTKAnzChn7EPUnRdnKrkZ1hryto 5HR9Z7kV4QTSUw9AomMENLylhBmS6TPZb80GCmsuj PeZHkKgdGb6Or6lf4Rwa4o8LxENH8b55ohTr4s1w2nAbmyfBCBogImhLji5pW6HQOg==&downloadAs=borderlands-2-full-version.exe&fallback_url=http://www.borderlands2.com/.../  (e546bc7ff2425e6620f53d0648325c34)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=MjtrbaMevw4Ri /I q81CHwgEM3IkTweVUh3JhuP7UQ=&c=riUD XXTnNhzF B4KroR8la8S5J0HqZZ9NbhiczhNFj8XEXIGOYcN9f9 o8dMELVWH/eJizNdsgqqd 5EbC0cFipPrke2O0QeSF6sZwTbKHA7HxJH3qfR17lKypCofXxUHYVJ/7Jek5EpWwY0VNHbQ==&downloadAs=plants-vs-zombies-2-4.3.1.exe&fallback_url=https://itunes.apple.com/app/.../id597986893?mt=8  (plants-vs-zombies-2-4.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=p4pvRyWU1v1k6OPDoVfpqjGapBYBI3R0vyTP/O/jU5M=&c=Y798 vVnrLnlol66Wc wvBUafFvGSWHEmXtd7XEfNs04DVnLydKiEhHaSQVgr3xbCbI4qI8WaO8Bl68HKcXVLcrRrnDmDi/1Y5s5r0E43wNy7KkcGsm4TPjoXvJz6uai0MPUX8PyWgEYyku/AtmQWg==&downloadAs=mirc-7.32.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451021639/fr/2/.../26887-1797468-mirc.exe  (mirc-7.exe)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=v0NOlCsXgyHwHyz4S98PLVNIMcMifWeJhItYqPkmFo0=&c=C3sIzsENM3tmPrK1zT6UYCRODbEXYM2BNRg7WLosVOkCnclOUBpU8IDOJXbSf1QfitnDZ4DfnjZ5m4SRIDCg / HF 30WicP20J2O7/gcgW8sbk4lz8lJj61lf5/YNhFp8c0 8gVDZYmSQLOpmTtpA==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451011515/en/8/.../83929-92631-microsoft-office-2010.exe  (6141a62dbd8aa047c7c8601d3faee5f2)

1 / 68      (Adware)
http://www.heartsignhosting.com/c?x=NLxxTWc3U3e5Qq6by9zZl0JyFhP3tepmWbmlNArrsFY=&c= beK2jJ2SY0mfa9KPzzSk9OAZsPGAgeK7cv5aDsT3CHrOjShsTIFuSG/WarVHID3crOBoU4d06Y05jOobOoHperhNljxnWFjl9dzN8vA1DK76l1bnm/e6 4f1/bYH8bzvkOAldFgnAZayclKktisPg==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451013562/en/8/.../83929-92631-microsoft-office-2010.exe  (02b590575fbb696dbe6d6be560783794)

The following 18 files have been seen to comunicate with www.heartsignhosting.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.