home

www.presentheartdelivery.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
presentheartdelivery.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/InstallCore.AFV potentially unwanted application
100.00%

avast!
Win32:Malware-gen
100.00%

AhnLab V3 Security
PUP/Win32.Downloader
100.00%

McAfee
Artemis!D7C996A994CD
100.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
100.00%

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
100.00%

Qihoo 360 Security
QVM20.1.Malware.Gen
100.00%

Reason Heuristics
Adware.Bundler (M)
100.00%

The domain www.presentheartdelivery.com has been seen to resolve to the following 8 IP addresses.

52.85.142.216
server-52-85-142-216.iad12.r.cloudfront.net
April 12, 2016

52.85.142.204
server-52-85-142-204.iad12.r.cloudfront.net
April 12, 2016

52.85.142.201
server-52-85-142-201.iad12.r.cloudfront.net
April 12, 2016

52.85.142.101
server-52-85-142-101.iad12.r.cloudfront.net
April 12, 2016

52.85.142.51
server-52-85-142-51.iad12.r.cloudfront.net
April 12, 2016

52.85.142.30
server-52-85-142-30.iad12.r.cloudfront.net
April 12, 2016

52.85.142.8
server-52-85-142-8.iad12.r.cloudfront.net
April 12, 2016

52.85.142.221
server-52-85-142-221.iad12.r.cloudfront.net
April 12, 2016

File downloads found at URLs served by www.presentheartdelivery.com.

8 / 68      (PUP)
http://www.presentheartdelivery.com/.../installer.exe  (installer.exe.downloading)

The following 18 files have been seen to comunicate with www.presentheartdelivery.com in live environments.

TCP » 52.85.142.51:443
UCBrowser.exe (by UCWeb)

TCP » 52.85.142.216:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.216:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.216:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.201:443
browser.exe (Browser)

TCP » 52.85.142.221:80
browser.exe (Browser)

TCP » 52.85.142.201:443
apptrailers.exe

TCP » 52.85.142.221:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.221:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.8:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.8:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.221:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.201:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.221:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.51:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.201:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.85.142.216:443
browser.exe (Browser)

TCP » 52.85.142.216:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.216:443
ssn.exe (ssn)

TCP » 52.85.142.216:443
online-guardian-v2.0.9.exe

 
Latest 20 of 45 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.