home

www.dltodayapplications.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
dltodayapplications.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M), Threat.Win.Reputation.IMP
100.00%

The domain www.dltodayapplications.com has been seen to resolve to the following 24 IP addresses.

52.84.125.236
server-52-84-125-236.iad16.r.cloudfront.net
July 1, 2016

52.84.125.221
server-52-84-125-221.iad16.r.cloudfront.net
July 1, 2016

52.84.125.165
server-52-84-125-165.iad16.r.cloudfront.net
July 1, 2016

52.84.125.144
server-52-84-125-144.iad16.r.cloudfront.net
July 1, 2016

52.84.125.99
server-52-84-125-99.iad16.r.cloudfront.net
July 1, 2016

52.84.125.68
server-52-84-125-68.iad16.r.cloudfront.net
July 1, 2016

52.84.125.41
server-52-84-125-41.iad16.r.cloudfront.net
July 1, 2016

52.84.125.33
server-52-84-125-33.iad16.r.cloudfront.net
July 1, 2016

52.85.142.242
server-52-85-142-242.iad12.r.cloudfront.net
April 5, 2016

52.85.142.162
server-52-85-142-162.iad12.r.cloudfront.net
April 5, 2016

52.85.142.127
server-52-85-142-127.iad12.r.cloudfront.net
April 5, 2016

52.85.142.119
server-52-85-142-119.iad12.r.cloudfront.net
April 5, 2016

52.85.142.96
server-52-85-142-96.iad12.r.cloudfront.net
April 5, 2016

52.85.142.91
server-52-85-142-91.iad12.r.cloudfront.net
April 5, 2016

52.85.142.89
server-52-85-142-89.iad12.r.cloudfront.net
April 5, 2016

52.85.142.73
server-52-85-142-73.iad12.r.cloudfront.net
April 5, 2016

52.85.131.117
server-52-85-131-117.iad53.r.cloudfront.net
April 4, 2016

52.85.131.110
server-52-85-131-110.iad53.r.cloudfront.net
April 4, 2016

52.85.131.53
server-52-85-131-53.iad53.r.cloudfront.net
April 4, 2016

52.85.131.251
server-52-85-131-251.iad53.r.cloudfront.net
April 4, 2016

52.85.131.202
server-52-85-131-202.iad53.r.cloudfront.net
April 4, 2016

52.85.131.177
server-52-85-131-177.iad53.r.cloudfront.net
April 4, 2016

52.85.131.151
server-52-85-131-151.iad53.r.cloudfront.net
April 4, 2016

52.85.131.138
server-52-85-131-138.iad53.r.cloudfront.net
April 4, 2016

File downloads found at URLs served by www.dltodayapplications.com.

1 / 68      (Malware)
http://www.dltodayapplications.com/.../installer.exe  (94aa41679b5808665198b7c49044bb2a)

1 / 68      (PUP)
http://www.dltodayapplications.com/47C6F7AA-B561-4A1F-8379-0A4941FA1C55/FinalDownload/DownloadId-A4D1BCB85D2EAD3EF65600D2F1329A66/47C6F7AA-B561-4A1F-8379-0A4941FA1C55/.../installer.exe  (ade07c6ef3e6826c5b0a26a461827fcf)

1 / 68      (PUP)
http://www.dltodayapplications.com/.../installer.exe  (5628aa2c8b6c163ba59cc72a55999e36)

1 / 68      (PUP)
http://www.dltodayapplications.com/.../installer.exe  (923ab6078f72435521b88d68bd076bb0)

1 / 68      (PUP)
http://www.dltodayapplications.com/.../installer.exe  (installer_5.exe)

1 / 68      (PUP)
http://www.dltodayapplications.com/.../installer.exe  (ade07c6ef3e6826c5b0a26a461827fcf)

The following 21 files have been seen to comunicate with www.dltodayapplications.com in live environments.

TCP » 52.84.125.99:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.99:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.127:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.144:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.85.142.89:80
browser.exe (Browser)

TCP » 52.84.125.144:443
oozes.exe (Oozes)

TCP » 52.85.142.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.99:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.85.142.96:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.41:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.165:443
onlineguardian-v2.exe

TCP » 52.84.125.221:80
cdhtr.exe

TCP » 52.84.125.33:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.99:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.99:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.119:443
onlineguardian-v2.exe

TCP » 52.85.142.119:80
Client.exe

TCP » 52.85.142.96:443
whatsapptime.exe

TCP » 52.84.125.144:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.165:80
Client.exe

 
Latest 20 of 51 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.