home

www.contentsignbulk.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
contentsignbulk.com

Scanner detections:
Detections  (86% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.Installer.Installer (M), PUP.installCore (M)
85.71%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
14.29%

F-Secure
Application:W32/Generic.70053c248f!Online
14.29%

The domain www.contentsignbulk.com has been seen to resolve to the following 8 IP addresses.

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 29, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 29, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 29, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 29, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 29, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 29, 2016

File downloads found at URLs served by www.contentsignbulk.com.

1 / 68      (Adware)
http://www.contentsignbulk.com/c?x=WllBgoY2MVcHjrdAn1d1BrljTHzk/PL3uuG83QmHL5M=&c=zMuKb5hQk BWIpqtfJEukqcjIFrCK7F/EiaPUUTfF7ntqiBFT/D3b4dXpXb67hyvUZpN/Z27kJb SudHChZoyli30hlH7NWZDteUbJune5aEhaznB 6fw z1VBIUcLht&downloadAs=jre-8u45-windows-i586.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=107098  (e7f1a9046b8e170486b5267e31f4e562)

2 / 68      (false positives)
http://www.contentsignbulk.com/c?x=pf4MThA57twbj97wxu2BxR7ZQfdqqRdpZvblD2lAkGY=&c=jykC3WmDJkjwQlSQAZzVMxJ2Mepg9prjT1I/dvsInYa8ELT5eO7RqNK/vQzUW101hg21H5S3LXQkXGkSlVi/9nDnbfy 7ryxmY62sHXLFl8laJy4zGv4OOXDwUZcsFj5&downloadAs=uTorrent.exe&fallback_url=http://download-new.utorrent.com/os/windows/track/stable/endpoint/.../uTorrent.exe  (wrar420.exe)

1 / 68      (Adware)
http://www.contentsignbulk.com/c?x=nR3I1HM3vMmDqSLDLcdM4ZkGD2txaJFbNomOQipAQfM=&c=pDUNELl1LQI3CReT6jADL9xLs5lTZTcMzgc8qYCsS5Xw4FAisiNPohO9tusadk9X5ZTG10A6WQV2cfAgxs4DQrKzHDL E7Q4/n3VoKa4WbK3MNXI9t ktGMa/5nrExij&downloadAs=uTorrent.exe&fallback_url=http://download-new.utorrent.com/os/windows/track/stable/endpoint/.../uTorrent.exe  (52520111da9c86bf0dbf05982f81fa7e)

1 / 68      (Adware)
http://www.contentsignbulk.com/c?x=YOu/VC7tFH 0 3hECHq8Sss6SNZ8b6spoDbZyHIC2W4=&c=eR36hsXCGqKQauboTL0eIw9BUIF5/tdyQ7OEiAxt/xSiWwPXvF9jx/L1vUMysf9wlQzwCWAF xYMez1H6ATiFpzzIjEGRj eFJuUlaAe8mFblv75i4cuqXNZpbI4YaVH&downloadAs=iTunes6464Setup.exe&fallback_url=https://secure-appldnld.apple.com/itunes12/.../iTunes6464Setup.exe  (dff24b39e369b64e12d855fd03e708d2)

1 / 68      (PUP)
http://www.contentsignbulk.com/c?x=kj70I0IsdttibVqOdNhO0BOyhqVkPizXoS303wf8zRA=&c=LXSau03wW8wfsbuNxP0q AS8TkeUh9psX Dgo8vyhtd85e8NLOi3MnM3pqHoZ2zZ DmwgrSZoOPM 5HtSPxYk V5s4o/mE/ZbDUlZnfTKYxdOkJcUCU3A0CODKvPh7WC&downloadAs=uTorrent.exe&fallback_url=http://download-new.utorrent.com/os/windows/track/stable/endpoint/.../uTorrent.exe  (836534da55d762593bb0f11d93707fee)

1 / 68      (Adware)
http://www.contentsignbulk.com/c?x=rUH6DUqC63RVzPHq6KJm1WHuPln7azbj1f8HmXd4D/Y=&c=4Au3v yVI6TCz9YIvcU3d AATCT4epcAqpq8sLCaYoLKb fzSj8/AwevAtn0UFStiffoKsjSDW0Fq 95 KcDbBXDhbi8R3LfniNVsxDYJQhcoN2efCYEBwHKZGunzwq1&downloadAs=wrar521.exe&fallback_url=http://www.rarlab.com/.../wrar521.exe  (82800723793fadf1ac980e4945edc098)

1 / 68      (Adware)
http://www.contentsignbulk.com/c?x=TOou8lN9L7YkAajetJB4Wk6Cv TAXY4lgGGWXbc10nQ=&c=iyau6KXXt88F21DwJXljVCiUROMhU5eX XYhfYC9iAu0FLyu2DM1rzCpvuBtno4UwHaGs31La0Gu0Aemr6 RT3AWBKfB3ioC/KX2MUj3 dZJnmtJ6H7L8 8a/KJ3ek5b&downloadAs=vlc-2.2.1-win32.exe&fallback_url=http://www.gtlib.gatech.edu/pub/videolan/vlc/2.2.1/.../vlc-2.2.1-win32.exe  (52216819f37400ee0ed6e7daf580ef4f)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.