home

www.centersignfun.com

Communigal Communication Ltd

Domain Information

The domain www.centersignfun.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Saturday, January 23, 2016

Expires date:
Monday, January 23, 2017

Updated date:
Saturday, January 23, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
centersignfun.com

Whois:
1 centersignfun.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
100.00%

The domain www.centersignfun.com has been seen to resolve to the following 10 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 12, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 12, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 12, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 12, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 12, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 12, 2016

File downloads found at URLs served by www.centersignfun.com.

1 / 68      (PUP)
http://www.centersignfun.com/c?x=nY9WzKTVtKJGedeBvJJQroRSHHfTz9ZYLc4gzT s06I=&c=E/v0EZB9ZtiyzsuNIfMo5aXsVxsOJIoa926Znf56736dbwkc4jBibF6XKHt8n39B4MclwJ6FAE6 9onyRFtX34UjwFXcLZrAO3OFHmm4rLq79ilTp3BiKaFseeqknK/K&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=klVLBwaCQ5Lno/9WfGxRjA5Ek1X3akbWue6iQxecjas=&c=kYQNxMjlyp7J8QddkL KhpfF3IbEqwSI8VSb2UBUew9qQRfJNUeW08FMvGknNbq6X3X8wml84D7ygbWhBOYsREO3NVD54sHvNkAszfG6i2LFoc qsi95fpt Yt1jaE9l&fallback_url=http://res.dooxer.net/.../Photoshop.exe  (1591ab77008988be77367c73de53b42d)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=vrzS57CSNYChBMH8eCIWwWrreWcGcWcZdLLWG80jGqk=&c=R/wQqbi47XIWHY7Js0e0rQIUUx4iUaTOH9jpLrRud0uajBEctJK7UssU B9pqlV6BrPsNkKtjEPmLzvrgZKAl5aA9jF1OVGCnXFldKUeuswllTcPmRIfAIW4XFuyceug&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (7ae50688bd415e0e06b62fcaaceaddb6)

1 / 68      (PUP)
http://www.centersignfun.com/c?x= o4C6G3nuZoJgRdoUhXVLqL4zyV4RRW7kUpyLD6R/HI=&c=aUhTMXGUtX lBAmCvHgDi2IIEkoGVxELuGb1ZWWazJfwtSnOQCQkRQgn6IGNdMl8lKGKS4h3LQseF0s1abrLeGBog67/Lhej9QJ62sYYmFL/VXH5b6Wy9fmW9SVEhoae&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=3sRNYUlfDI46w3bUJwNewSQPh8vAVmbYduhbA4kfr84=&c=cBXdbQmV47GXyR2IhI zlCNju5nW08YDfC4FpgsixQFwEi/LojA81960A9rxJBvQZEBhq5kaExWvm9ODzvW6lyBYD2hLvLV5DpY/nEB9YwcZ7V2S9Y /iX3FdJrJz2m5&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (f0c96759bdbb5901dfbce6bccadf9da1)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=x//TwlWhxLXdmgsYzoE4HKpHCseF/TS5f1ROu/gz6d8=&c=gMN8Joor9m8LlNDY4K4MxMMQf72Wt7PNHxeVIDEuHkFaHjQz56uQHC6P3LBJeshcm/u1VxLY7zMvBAT6kXZ/FThm7ag2uaMl0 S59CmoxRqDtdamvTtOi0nZMn976cjL&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=RldZs7RzbHHf1k p06iMYk KjvXEojzdTBSv/tIumuI=&c=upWKNMm66m4yA7UMlmTgTd DcDO6JSxr5tjUrL70j2NEKSB5u5hpELvFxTzaFWJhqeogO WY97azQ20NM4NsU6GKNO2ppg7bXTDrbuxMQ baFcmqC62AOOGiYKeth1JX&fallback_url=http://res.nobistex.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (b58ffc802e2875a319e66ed93477c42f)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=fNkqGKMt9CHy2GAZx3W4dKYERJ3L0bDzfA56Bp8WCR4=&c=gFyv uc61hRkBsotUQv4bXDqRjXSY14emeu6R9Uj9U6bKM8ZBnUd8XYqYJcLomtuOBuNlN6J577VgYn uWxZHpHCmca/JRjxQp5ZvvMP2fA2kJxhDYvu/wxKHGKeO6EL&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe  (ce29b87ecb66c062c19b2463dca0725e)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=1ohOKbaqiOEitUV Oc7mvfhsLBY iiqo J2FIcuheFA=&c=gSxGXNX8qk6 EyWjhptPNTuYJAweyxcucu6CeazoOGfLyXETOkZvADucVyA571V/aNSNja4Ti2YjKO7cT/zaQHJwdO2ugBgfPw/xQLPHzfBhG3tn9cvusUQsuBKoMKyM&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=dbILLAc0mB/L0VVVvwibS/i5Io4B3C QEEZYBz2i2dM=&c=9YHewFZxpXQYAE5XRFg EAMhLZhnaBhXdXlPzzUXBXXugS2Ewa1ri5In56ocHoHRoXbk2zdtwQW955wjeOUD0/5jkF7hWsshpDlr7AKwD2ILERQ2NwvnemPo4a0Nc7I4&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=tKFUuGDUU/ZQH/sqmAbUnbFatU/ BPEPtm3xAvKGd28=&c=8ADHAeH1byB3IqYjR2HjFQhZvcqIlknMUCU32C45IlT4H3E1WsnYMCCE/KwlSZY5y6 OdXl9uo8OUBZrK Dxv9TPO2XY0Mxd dQEl/FAvqFTEDAFttbZLPPD9A5SrKx/&fallback_url=http://res.setauls.com/.../Firefox_Setup_21.0_fr.exe  (32cd0b6def608839f9c4f8ff1b0db4c5)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=ylK7aCr4wV1jUkqLo9EmGdJB2C9Rf6EYeJnC6Kwdpm8=&c=3ybpT3F/1aQdrruWoJRxo6Nn0qdqRQeHfgqe5dET68duNQNatyfLoqyS2m5kESXlG5VTgxKGjy27RcGcSTzFX5/rfG4EIstkvkB9b8EHWOsDrjS/X2Bz58JkYfC8giPT&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (91ce1df84e32c0495daacfa724d8be4a)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=AfAQmOwu3HVgVdB2YaSBCgvn yAFxlp7XmffLsEICg8=&c=uI4fhzrGs7EsDVWdL ITrDeld7quGBUw0cP/P6wgWr6UOL1XGlHC7LqjgE8f1xRGycjKvGmLxCogMhYb82AcWiAI7AMf6aS4sKvb8EcoS4zln8asjR2Ai9F3BZhLxl6F&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=4jdjCH5 8PxEpCAEK5MIgt1BISN5Ra3O5OmsjrkeLFQ=&c=zKTJQNeWAMnfgYAZNhXyDJlNfburr3oXmiSjUlbVCr2/ xZM4QsBvRGVwUbTVhHBBaLGVc4oTtaHQ73TrdjiWQ3rZ7dUj9liHAQYk0Tl30Oip25DeLcyJPYwZZJlXdPH&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=o9g/LBy29Pw6XurF5a6wU cndh3yetHBeEcntWiLnPY=&c=kW0pJWHKHWvzlkdNSlpbHEmgyCgaUsxreWGq5WcykOiGMCQtLZYjdIdPf9fpBWMlMj8 LniEZ7zfoMEc60nYuX8AYlYlhPhX1SIp nN7x1 0ESgMTJPEwFg4hquau37&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=7oGzlnZsGGW3tyGr8G69ZKAHZaRtcvwgdMu1oT32x5U=&c=Ud7tux6jinPgfEbM5rGXLVN3V9faikfNN3QIqwaCX4q/b6HKP4rwLaRALlU7wlnukE66/aOkJneRmo2wAm ZT/HwaM ZEh5xmI6pHMbLm2Cc y270IBGquFiVh4a5/ W&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=/NNAr/UpBFstY2WVTL6I1PvvJX5sLCi/EZw9MuJN5dI=&c=4MZC7Isav5/Pls roErpoLIRnZbJbldFKH5txkfMQBEfPKy409X6eH38iaC6pWeLB7JrRAlfVAAzOJ9q4rUlHAeumUYWjv41aOtzrLxtbGN6WfMRpDqd9FwwT4BgfIVo&downloadAs=3ec1deaac69f75242d7fac3b33e6c84f.exe&fallback_url=http://files.gooofull.com/resources/binaries/2014/.../3ec1deaac69f75242d7fac3b33e6c84f.exe  (b1973753280099598517c4681bfa9673)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=PBfNLwW8yE/eu6zlRx4C5rrUIJA87CbcVU10SDR5BL0=&c=iAtvL3paj2hNhcv6v hf2cKYEnujt2EYxT0yGg9smY71NhOtaIEQlSrmjKyzrTqBkGdxS8zkDLYfZyhP2c6hkID88vwVfPX5WwheFxA4brkatp/27A70LhralDl7d8f &fallback_url=http://res.mshist.com/.../MarvelContestSuperheroes.exe  (efe125616726eedcce601d14fe4cc236)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=LUkFIennEIN8r5RM1WgAKM0Y9cT2pXMkO9cxBl2He9s=&c=5pssm6opt7wjAdiykWZ2ed70zB57bm 1w05GxCU/XHFouRmOrcfMF2wdlzbZPCZ/ Ti9F2MAhm7kKGrgljq4kK u0nBRpShgWdOZX5LilPbkT3u2pqhA0JPryZjstPp &fallback_url=http://res.nobistex.com/.../Minecraft_1-5-2.exe  (5ad49fce5782f0b6c38a1f429844a4ee)

1 / 68      (PUP)
http://www.centersignfun.com/c?x=5O5FsJYHCoK73J/82nJPgghe5oxE98Bcky19xrwYWCQ=&c=REMaOra8h/pk2PhfCmlxMf0c9GOcbEmW7m8sm0Fh7oN5e/shsmpdZJdZAyYTkUpVZLu8u5dIJwmDHSpq/aeLrWfNk1zUjCnGhgCVy2hhxCNwothcbVId5p9stglQTDgA&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (fc34bb6d1b906c40c6b12473071bf54a)

The following 6 files have been seen to comunicate with www.centersignfun.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.