home

www.funsignssend.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
funsignssend.com

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC.Installer (M), PUP.InstallCore.AC.Installer (M), PUP.InstallCore.AC (M), PUP.InstallCore.FC (M)
100.00%

The domain www.funsignssend.com has been seen to resolve to the following 13 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 3, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 15, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 24, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 15, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 12, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 12, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
July 12, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 12, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 12, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
July 12, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
July 12, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 12, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 12, 2016

File downloads found at URLs served by www.funsignssend.com.

1 / 68      (Adware)
http://www.funsignssend.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  (vivaldi-60614-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.com/WVl6OTRQVFJqTVRKcWNuZFRVM1ZVUjBjbE1rWjNaeVV5UW0xVVRHUnBTVThsTWtaYVJrODBPWGw0ZUc1U09EWTJhRE5HV0VFbE0wUW1ZejFQVEZoMFZFMDNOaVV5Um5CaWVra3lXamd3ZDBOclozaDZaMGhSZW0xeFIyOTRUSHBQV0hSTVIyUlhOV1JMU205TFkwaDZaRmhCYWxsMWNVRk9kMDFoVVRKRWFWZzBiRmhXYWpKRVpsTTJVMkpPZFhJek4wRjRZa2swVFdWSWRHOXRNRlFsTWtaNFQyRkliVmxKTWpoSE1VMUZKVEpDY0RWTVVucEZhMlEyYTA1aWVscHlkMnMwYkdGVGNtZGtiamszY0VsSlpYTkJaMjVQY1ZFbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbWQzZDNMbU5tYjNNdVpHVWxNbVpqWm05emMzQmxaV1F0ZGpFd01USXVaWGhsSm1SdmQyNXNiMkZrUVhNOVkwWnZjMU53WldWa0xURXlPREkyTFdSd0xtVjRaUT09  (cfosspeed-12826-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (spotify-48247-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (avg-pc-tuneup-21136-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (nvidia-inspector-39354-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (adventure-game-studio-12619-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (smillaenlarger-33701-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.com/c?x=KzoM3x4tUD8kArYu JC2I3C3SteHo5aj8iFg/dSmWgU=&c=uSa gvip2ugfPyZ0pUIlVQGK JuPqjMOhwJ6Cs67PYfwI3pWlk2WxAKHDBwVGUVNCP6ysKGBHncCLLj8L83SnfAsSCAX37bpcARoCOK/6rURvVUIX98 l5Ks6WfV7jyp s 3OsHKaEgpkkdzhYxkJg==&e=0&fallback_url=http://storage.dobreprogramy.pl/.../SMathStudioDesktop.0_97_5890.Setup.msi&downloadAs=SMath-Studio-35273-dp.exe  (3afe522bcf6f877a20e561b198746243)

0 / 68
http://www.funsignssend.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  (subtitle-edit-14987-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.com/c?x=r2sTo6m1NTbeUyzmF1hbkXuOxrrhj0wKfgosFe WTAQ=&c=T1AQSF05HUJcbZ2lzyLLQJ3nfSHxMSN37kCODu6BK1Ef8Hud8JK9boqcwIC3mgRZf 6ONur6owZru99bDBTuEbwfhkWmD4DIbNyhm0H9iu8IvIzPFH4XQsaJhEm4GC/YBVw1///y2Ocn7kAMj4RbZerYrF7SdHoYzkpR1mw692g=&e=0&fallback_url=http://storage.dobreprogramy.pl/.../6305_vista_win7_pg537(dobreprogramy.pl).zip&downloadAs=Realtek-AC97-Audio-Codecs-21169-dp.exe  (d9e918e1f60dc8206ca58759faf5c8fe)

1 / 68      (Adware)
http://www.funsignssend.com/c?x=6ZHIEXBIRa6BK6bdaOwHD8dGWhZn2BIkSYSeUrTTjWE=&c=PI2xvvQ43dIUWWWV9ta 8Y53zjwqk8tm 9IRokKFD5QVLMGaJXiWZDe38tM3ZT9 vkEMHmO ILu3udyHlIL/7k5HNHjqeDZodv/VFHCOu9EWIJZzyNXwUZx3uZpmOYcdB0gPi507Q8E 1RD7s3tY5cIDM5BSGlArs9B1bv/6ewk=&e=0&fallback_url=http://www.hoverdesk.net/.../RegSeeker.3.01.setup.zip&downloadAs=RegSeeker-12055-dp.exe  (34ecd9c9e7f1dea6ad064da2c9a5da1a)

1 / 68      (Adware)
http://www.funsignssend.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  (graphtablet-11718-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (vlc-media-player-13060-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (ccleaner-13061-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (ccleaner-13061-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (gimp-13219-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (firefox-13108-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (skype-13018-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (bearshare-12831-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (minecraft-41028-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (skype-13018-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (irfanview-12867-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (jpeg-to-pdf-22953-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.com/WVl6OTRQWFkxYldoV1JYQkxNRll5TjFobFptTTFSVTVpYUVGQ1ZuTTJPV1ZYT1RKb1UyczRiVWhuZVRReE0wVWxNMFFtWXoxb1dscDZSR2hETm5ob0pUSkNOMjV0ZVc1a1dXZENiVEV3U21KbldHWnFUVXBIWW10V2NWTlVjM2swY0daaGNIWlpaV1JpVjFkdVIwMUJKVEpDVm1NbE1rSnlkek5oTkZGVWNHYzNieVV5Um5ZeVRGcE1Sa3RSVEUxWE9GSXhZM2MzUlhCQlVIbzROVGhOUjNGQ1JrcFRKVEpDVWxsV1RVWlBhemREYkhackpUSkNNM05pUWtOa2RGcGphM1ZSTUVkUU1Ha3dOak50WWpsSmVFcGpPU1V5UWxBemR5VXpSQ1V6UkNabFBUQW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQnpKVE5oSlRKbUpUSm1iV2x5YVd4c2FYTXVZMjl0SlRKbVptbHNaWE1sTW1aaFkzUnBiMjVmTVY4ek1WOHpYM05sZEhWd0xtVjRaU1prYjNkdWJHOWhaRUZ6UFVGamRHbHZiaTB6TXpZNE1DMWtjQzVsZUdVPQ==  (icreinstall_action-33680-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (7capture-40232-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (poweriso-13054-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (euro-truck-simulator-2-65999-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.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  (adobe-flash-player-13091-dp.exe)

1 / 68      (Adware)
http://www.funsignssend.com/c?x=HgUHz7aaGeRomxhzpN3UhoTkhNVL11fHYZSUml8 ThE=&c=tJQJ6hQJ7YJjeAU4Qiy2LpmDzvkoVIIa25NVN0ywUaPan5ISLexaxxpBdKmZt4R27sX3Nl tH5qPMltrvGu1teTi7QqNrIxe6ZgpI018iuf/9 wusSTzdhJg5spK1RDjhOsWYejg7hjbtgP2o81nJizZrH9rRSGmvzWO3ffRr0A=&e=0&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer-13217-dp.exe  (46935d74bd553aa674b91d522f2aedd9)

1 / 68      (Adware)
http://www.funsignssend.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  (minecraft-41028-dp.exe)

 
Latest 30 of 1,310 download URLs

The following 50 files have been seen to comunicate with www.funsignssend.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.