home

www.ranchbundlefarm.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ranchbundlefarm.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/FusionCore.E potentially unwanted application
100.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.DealPly
100.00%

The domain www.ranchbundlefarm.com has been seen to resolve to the following 8 IP addresses.

54.240.160.164
server-54-240-160-164.iad12.r.cloudfront.net
February 22, 2016

54.240.160.153
server-54-240-160-153.iad12.r.cloudfront.net
February 22, 2016

54.240.160.136
server-54-240-160-136.iad12.r.cloudfront.net
February 22, 2016

54.240.160.127
server-54-240-160-127.iad12.r.cloudfront.net
February 22, 2016

54.240.160.99
server-54-240-160-99.iad12.r.cloudfront.net
February 22, 2016

54.240.160.24
server-54-240-160-24.iad12.r.cloudfront.net
February 22, 2016

54.240.160.239
server-54-240-160-239.iad12.r.cloudfront.net
February 22, 2016

54.240.160.206
server-54-240-160-206.iad12.r.cloudfront.net
February 22, 2016

File downloads found at URLs served by www.ranchbundlefarm.com.

2 / 68      (PUP)
http://www.ranchbundlefarm.com/.../installer.exe  (hindi kumpirmado 659820.crdownload)

The following 2 files have been seen to comunicate with www.ranchbundlefarm.com in live environments.

TCP » 54.240.160.136:80
ctfmon.exe

TCP » 54.240.160.239:80
PastaLeadsService.exe (PastaLeadsService)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.