home

safe.pre-cloud.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain safe.pre-cloud.com is registered by proxy through REGISTER.COM, INC. and was originally registered in January of 2012. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
REGISTER.COM, INC.

Server location:
Virginia, United States (US)

Create date:
Wednesday, January 18, 2012

Expires date:
Wednesday, January 18, 2017

Updated date:
Tuesday, January 19, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
pre-cloud.com

Whois:
4 pre-cloud.com records

The domain safe.pre-cloud.com has been seen to resolve to the following 3 IP addresses.

212.179.18.159
bzq-179-18-159.static.bezeqint.net
May 3, 2015

54.85.121.167
ec2-54-85-121-167.compute-1.amazonaws.com
April 20, 2014

54.72.125.100
ec2-54-72-125-100.eu-west-1.compute.amazonaws.com
April 20, 2014

File downloads found at URLs served by safe.pre-cloud.com.

2 / 68      (Malware)
http://safe.pre-cloud.com:8080/safed.php?q=http://download.instalki.info/programy/Windows/Internet/.../aresregular228_installer_www.INSTALKI.pl.exe  (aresregular228_installer.exe)

0 / 68
http://safe.pre-cloud.com:8080/safed.php?q=http://liveupdate.symantec.com/upgrade/NPE/.../NPE.exe  (76f6e6e62256572c742574806590e4c8)

1 / 68      (inconclusive)
http://safe.pre-cloud.com:8080/safed.php?q=http://kb.supportbd.com/.../Patch-SetID-Cleaner.exe  (ec16813b90967d2ac02146d325d0d52e)

0 / 68
http://safe.pre-cloud.com:8080/safed.php?q=http://cache.firmwareumbrella.com/.../tinyumbrella-7.11.00.exe  (5b25fdc7098305fa947269ac58baed38)

0 / 68
http://safe.pre-cloud.com:8080/safed.php?q=http://download.frogster-online.com/FOG/.../TERASetup.exe  (terasetup.ussafe.exe)

0 / 68
http://safe.pre-cloud.com:8080/safed.php?q=http://.../SpotifySetup.exe  (ebe958f2763d550894325a98a74055de)

1 / 68      (Adware)
http://safe.pre-cloud.com:8080/safed.php?q=http://dplus.softonic.com/ud-client/43000/.../SoftonicDownloader_para_trucotec.exe  (78a3b099abc4e8104f5c0f966294adca)

1 / 68      (PUP)
http://safe.pre-cloud.com:8080/safed.php?q=http://.../toolbarcleaner_setup.exe  (cf94c253e2ff2dcb99ce513855a0e687)

28 / 68    (Adware)
http://safe.pre-cloud.com:8080/safed.php?q=http://sd-cf.softonic.com/23000/23974/.../SoftonicDownloader_para_windows-movie-maker.exe  (1d116478783e9cdfb8eed1e268561e53)

1 / 68      (Adware)
http://safe.pre-cloud.com:8080/safed.php?q=http://dplus.softonic.com/ud-client/78000/.../SoftonicDownloader_para_gta-san-andreas-homeboys.exe  (9a324e7a14d71ac5dd3a6ff8b94463c5)

20 / 68    (Adware)
http://safe.pre-cloud.com:8080/safed.php?q=http://esd.nzs.com.br/programas/48923/.../atube-catcher-387955-32-bits.exe  (3816cd095bfc7f9660a1be1445722c93)

6 / 68      (PUP)
http://safe.pre-cloud.com:8080/safed.php?q=http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.9.setup.exe  (438efc760ae06264eeba30690e2105c0)

1 / 68      (Adware)
http://safe.pre-cloud.com:8080/safed.php?q=http://esd.nzs.com.br/programas/89114/.../torch-browser-33007027-32-bits.exe  (torch-browser-33007027-32-bits.ussafe.exe)

0 / 68
http://safe.pre-cloud.com:8080/safed.php?q=http://cf1.vuze.com/.../VuzeBittorrentClientInstaller.exe  (6d43aa185492628807399a8906d8cd91)

1 / 68      (PUP)
http://safe.pre-cloud.com:8080/safed.php?q=http://sd-cf.softonic.com/69000/69901/.../SoftonicDownloader_para_e-m-free-powerpoint-video-converter.exe  (00cc24bfb0b0977645cca060c3e22232)

17 / 68    (Adware)
http://safe.pre-cloud.com:8080/safed.php?q=http://sd-cf.softonic.com/38000/38594/.../SoftonicDownloader_para_logmein-hamachi.exe  (67b44a581fb8d03e6192115dd859a4e1)

6 / 68      (PUP)
http://safe.pre-cloud.com:8080/safed.php?q=http://ak.pipoffers.apnpartners.com/static/partners/dynamic/.../SFInstaller_ASG_aresgalaxy_11785577_.exe  (3177805_stp.exe)

20 / 68    (PUP)
http://safe.pre-cloud.com:8080/safed.php?q=http://www.crwdnl.com/.../PublicTransitSetup.exe  (a763abf76e3f9b8f7cfa51170d492178)

0 / 68
http://safe.pre-cloud.com:8080/safed.php?q=http://download2.coolwaremax.com/.../SurfAnonymousFree-2.2.5.8.Setup.exe  (surfanonymousfree-2.4.0.8.setup.exe)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://download2.coolwaremax.com/.../SurfAnonymousFree-2.2.5.8.Setup.exe  (surfanonymousfree-2.4.0.8.setup.exe)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://webplayer.unity3d.com/.../UnityWebPlayer.exe  (be632cff04efa9313cf355c8d5762e88)

37 / 68    (PUP)
http://safe.pre-cloud.com:8080/vt.php?q=http://dl.strife.com/.../StrifeWindows-0.4.0.2.exe  (0221260befc72225ec3c7158f73bf6a0)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://www.advanced-mouse-auto-clicker.com/.../FreeMouseAutoClickerSetup.exe  (024594a6fcf729d113ad49f06f235969)

2 / 68
http://safe.pre-cloud.com:8080/safed.php?q=http://.../megajogos-premium-instalador.exe  (70ab47de29f65ce009ea4dc79a6e98b0)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://sdlc-esd.sun.com/ESD6/JSCDL/jdk/.../chromeinstall-7u67.exe  (java-chromeinstall-v7u67.exe)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://web.esd.microsoft.com/W81S14DL/.../OSGS14-WindowsUpgradeAssistant-32bitand64bit-ClientSKU-4141411.exe  (491d1c5ce5ff9323be55d5c73f80099e)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://data-cdn.mbamupdates.com/v1/mbar/beta/.../mbar-1.08.2.1001.exe&src=pxob  (f92ce6e6b3a0ab75e48d9a6be9ddb550)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://download.microsoft.com/download/1/5/a/.../SaveAsPDFandXPS.exe  (095cd6cc1b3f110fef3b41ef8b26b44f)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://.../PDFCompressor_setup.exe  (02d51ce2325f395204dc6b4772cc75a2)

0 / 68
http://safe.pre-cloud.com:8080/vt.php?q=http://s1.upgrade.mkjogo.com/.../MK_LOL_1.0.0.39.exe  (4951b91dfbe9b9fc49fc50b2f9b36228)

 
Latest 30 of 180 download URLs

The following file have been seen to comunicate with safe.pre-cloud.com in live environments.

TCP » 212.179.18.159:8080
snapdo.exe (Smartbar)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.