home

www.hostcityheart.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
hostcityheart.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)
100.00%

The domain www.hostcityheart.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 19, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 8, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 8, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 8, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 8, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 8, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 8, 2016

File downloads found at URLs served by www.hostcityheart.com.

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=h39Jtb18aKoA385w8rYGGVfoK1dBR1xL7SD 7gRXDt8=&c=QXndawJlUNpETiqUttkW cBk LLrAF9uluxwYSlp4Hfs4WyAyHtUUdUtgnefYwccAgP6Qz0uQKOwYJFTDN4yjdSYpR0gwXX261rz5VRhv/hn bwvUxHR44TYiqx5I5bu&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe  (3da465177c8909b12eff85ef6b5e5600)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=TCm7il/P99Fn ZupH /9pP2sj2QdwlspQk8YQO45vxk=&c=O0WI1NxpITsyGRvxmVuwbd4y5qKJ4h1Ks1tAxvU8qi0PAq8JRhKI iZHPGCp2m5ZrKIcO1fWec/YgEizSvnX4xXNGbChISru8QLqDrRpaW9Qig68jltmAkxZ9L5JCjM5&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (62acefc2d4bb16747b166dd23f8244de)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=1SexzpoP7nKN2vOa66RzKrnTIjvX35rkYYK1Yfu0fuQ=&c=yL87f0Vj5JRjcORWRwn YYSUcn/Hkq3Nby3343/VUHcoLiX2i8GRuP5XID4iJeTOsBM591tFy7exJO86stint8gPtaxS2T2vRDJ50gVeukbuFopbV1lAtHwyVtbwPH u&fallback_url=http://bi.sciagnij.pl/0/.../Firefox_Setup_44.0.exe&downloadAs=installer_Mozilla_Firefox_sciagnij.exe  (5556d7a511269876ff31ffc2b69c348e)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=98S52txW4WUqOxNrDSr6J1pOpH33a1IIySpxk791v20=&c=xMuJddIu1shc3AXdVM3sbbzYqoHGj9sZ2797XLBl316FnClatfJ8OGpi6cy5EgrQVM24QR3wkC5LTfYwFebRT/gIgC4GZ7Gp3mfPIjYIqOrpNloXBH0M 3lbh2 8KLnp&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (62acefc2d4bb16747b166dd23f8244de)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=3hL32wR6HQy6e1f9crOjZJz6ikd1JkpDEi7rF255pCg=&c=ujJnyS2333vJeWhleN E0ZOJAYxsBWEIyzNzXVdOVmoyeW/779iBhehs1UXIWdsAPjwwbYJqRqs3PvIjVkDkuWTtJQjtTLm1q8a/3UYwkotC/XwAYwAXckie 08IvcUN&fallback_url=http://bi.sciagnij.pl/.../0/rtesetup.exe&downloadAs=installer_Anti-Trojan_Elite_sciagnij.exe  (f7c69b2c2b7787e55c11a8fc455cf691)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=E224mc4muk2h/l3uNgVTjVIzslheQLlaNY2RSR8I5XY=&c=P9wGTPuixRcZPtUGXqcHvJE/g6v1ej5/mDrAAGjqzbP4T1Dyo5ZDRDVJTR3ucscbJRgWz84dPdCji3VE0nPRethb4Ztf5wLVTHUEgetlK9UgBSp8BLFmNIZGCMR23uWU&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (62acefc2d4bb16747b166dd23f8244de)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=Kaw A1Kv7v4ChozcrBSwT10uPZ3d8 UJt7U oR96jhw=&c=cWHU8BG7Ou5t8WTCl76/gbXyxGsVrngm2MDQntPTPf1m7 5U4CGB66PWoSPrjqcew1NAlMCVfd6XxTcBX27fMwUuBnLp2nNQQsckD7bPi0M18LW3zgxn2eF yLraurcQ&fallback_url=http://bi.sciagnij.pl/0/.../ScanDefrag57Setup.exe&downloadAs=installer_ScanDefrag_sciagnij.exe  (icreinstall_installer_scandefrag_sciagnij.exe)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=gHiSE9hn2mrs301TYrH8yQ4ogmP04qOkrend8H9E21k=&c=bLHSTzDkIWENtpoSgNSL0/24uTt/2KskMd pew/QJzQMPZ9R7eYVKjCNfsYkKAoaKNQyUPJt7W5nIks/45Gc CaeQlYiJ4wIWKMOP6xs2sv26hsz3tss1QdSRF4tlIB1&fallback_url=http://.../download.php?id=836567351&downloadAs=installer_MKV_File_Player_sciagnij.exe  (c047e7a4c29ff26d0ddf84dcb72fffec)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=fe/6GcxV9qQwULeMYVL7e/wGj51n7TUKbSzZypWqGww=&c=fR9r3ScVkBUqgvFO8fGeQRiAPtfkLsDvIkOPKQOa5qFnWopXlJqNeOsxsVZskUl0pFlMgm6rcOPXtkFL6YqzfTksfRdaQM4fDa4liOYIwnVGmyji5a02xNVtRzD9dgkG&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe  (3da465177c8909b12eff85ef6b5e5600)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=dCoZMdxMe9iiG05mkFnPJ 6F9YGBXo25bsgn0LR1/5s=&c=jHQpzwRoctdai99obxxKl/e eZL4hRRHT5PPWx/fJ0AX3dVnUWGPZC/LqyCmJhZvx19ZEYM/Fxj4n7Iw7Wq2D9vHckUn9C3598bNlMlU/p7gkCsBWv8vX1jQyseu0adc&fallback_url=http://download.freewarehunter.com/.../WordArtGenerator.exe&downloadAs=installer_Word_Art_Generator_sciagnij.exe  (icreinstall_installer_word_art_generator_sciagnij.exe)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=kdoNvpvcg7MRgVbsPTtFMllywCl0mOjtvL OuQ6QagU=&c=iggMA3B9pcKc4 FvHkR6s/g2OQJdw/ /96manY2tqriaWARWBpbPJ1CcS4m/VOb aIgqGn1zaEblAtv 3XzYsrahySM8E7J5RHcHFzovFzAX90UW2tmKaywqFEKMBUNf&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (62acefc2d4bb16747b166dd23f8244de)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=306SEqIR7u8cbB2b/jFjxddhiC4Xz4uKbvECKEO3fqs=&c=7HG5pTguLMLvAMy5iVivmz10fwYjHhnjAMumBRyWhVEABCXbsU66yA49heNifX3ig8mQg0Kj295n0Iu4FYJNbdFo6skdp85dLicuLGwX26YiCYZywnSuOujFTiYDA15I&fallback_url=http://bi.sciagnij.pl/0/.../ChromeSetup.exe&downloadAs=installer_Google_Chrome_sciagnij.exe  (icreinstall_installer_google_chrome_sciagnij.exe)

1 / 68      (Adware)
http://www.hostcityheart.com/c?x=Jkz8JMglJi8pjoDEGPk2enisYDTq0j//fMhyz7TmUVU=&c=ShBBPTdHwIQzcD07issh7i2XS6DRyFh7hY/Bqd uzEaSx7MuQLS492qXHo94KIESAOMLlRaPxFVc1rs7JrpdoB4kIMfSrG5T2v11Wqs7lZI3PRTarQIa6knYGBZvOXBZ&fallback_url=http://bi.sciagnij.pl/0/.../ppierre60_slownictwo_demo.exe&downloadAs=installer_Profesor_Pierre_sciagnij.exe  (263dd9410788aa12fbfda3093bd0b417)

The following 6 files have been seen to comunicate with www.hostcityheart.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.