home

www.hostingpresenttour.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
hostingpresenttour.com

The domain www.hostingpresenttour.com has been seen to resolve to the following 11 IP addresses.

54.192.195.35
server-54-192-195-35.iad53.r.cloudfront.net
March 3, 2016

54.192.195.200
server-54-192-195-200.iad53.r.cloudfront.net
March 3, 2016

54.192.195.177
server-54-192-195-177.iad53.r.cloudfront.net
March 3, 2016

54.192.195.128
server-54-192-195-128.iad53.r.cloudfront.net
February 27, 2016

54.192.195.55
server-54-192-195-55.iad53.r.cloudfront.net
February 27, 2016

54.192.195.224
server-54-192-195-224.iad53.r.cloudfront.net
February 27, 2016

54.192.195.170
server-54-192-195-170.iad53.r.cloudfront.net
February 27, 2016

54.192.195.156
server-54-192-195-156.iad53.r.cloudfront.net
February 27, 2016

54.192.195.149
server-54-192-195-149.iad53.r.cloudfront.net
February 27, 2016

54.192.195.145
server-54-192-195-145.iad53.r.cloudfront.net
February 27, 2016

54.192.195.142
server-54-192-195-142.iad53.r.cloudfront.net
February 27, 2016

File downloads found at URLs served by www.hostingpresenttour.com.

1 / 68      (PUP)
http://www.hostingpresenttour.com/.../installer.exe  (343adcf077d1fc25e38476acf2031657)

2 / 68      (inconclusive)
http://www.hostingpresenttour.com/.../installer.exe  (326e54cbc7adb4e1af59a3b1b4bcd9fb)

The following 3 files have been seen to comunicate with www.hostingpresenttour.com in live environments.

TCP » 54.192.195.177:443
online-guardian.exe

TCP » 54.192.195.177:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.177:443
onlineguardian-v2.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.