home

www.laboratorycontentsafe.com

Communigal Communication Ltd

Domain Information

The domain www.laboratorycontentsafe.com registered by Communigal Communication Ltd was initially registered in September of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, September 15, 2015

Expires date:
Thursday, September 15, 2016

Updated date:
Tuesday, September 15, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
laboratorycontentsafe.com

Whois:
1 laboratorycontentsafe.com record

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.dobreprogramyspzoo.Installer (M), PUP.installCore.dobrepro.Installer (M), PUP.InstallCore.EST (M)
100.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
5.26%

The domain www.laboratorycontentsafe.com has been seen to resolve to the following 17 IP addresses.

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 23, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 23, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 23, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 3, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 2, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 2, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by www.laboratorycontentsafe.com.

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=YAASb77hbdav4AqxBsYL3bwylIbsYuMAfYnKDncaFRM=&c=WBYbICmtUYQdLVyWfYCpslXXZUuiK9OFIAH/qzDHTiAX0jxzON4ck3QnThGVmCBzcUNGUrQDoRFcev6gV47ENNUZRELGkotvYaRFdWnbGOhcF//7qdIlJgGgVODZPlawh5BuBQHj/8OFXIGTbJJVhq9JA1TG5Msf20vl XCZ58U=&fallback_url=http://ftp.tu-chemnitz.de/pub/tdf/libreoffice/stable/5.0.1/win/.../LibreOffice_5.0.1_Win_x64.msi&downloadAs=LibreOffice-21562-dp.exe  (c748464c90b8cec92f1c45f926dfc511)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=X0Xtk2R7patGUjDwFhN6/CQiscIg9Dt359mQrYxG6Pg=&c=zr2wZb0Z2oLwxGENI zv6ke89xwPLtzJEq97ztrMv7wjiBemJ5aZVOs/YyjEhyD D40Ff RQr5ELX2hGtweca3pn6aEB /C7AhRQ 87eICyDDGy6W0bVVUbOiWowZgk0StfQhN0nbw9cKkOZLw3HDpx7gyuafAKdEhwXQYKiEHA=&fallback_url=http://.../Ace_Stream_Media_3.0.12.exe&downloadAs=Ace-Stream-54142-dp.exe  (dce8957aef8cb26e0a85961786751e96)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=ezU5k01VpQRUlZJiyZj7GXURZ19cz0X S5y0NGTxASA=&c=bMIHZLyKJM8JHL05Lekh/s9YyKPLwcOo85eLKw6TZZO3oIRRl6BjwKTgmKHThpIzfkoA6eVDs9FlEkRp9aKi5YMFg0CrNAA1JFqgDQOILmqVtwtjTEH0vFWcwYURrAGo5GDVrL 9uGyjc3Ub1udCstkZKkD syk7u33T6GenF6w=&fallback_url=http://www.multiracio.com/download/EuroOffice2014/.../EuroOffice_2014.0.1_Win_x86_install_pl.exe&downloadAs=EuroOffice-46479-dp.exe  (9a5b33e37371fe9a0f29e66cdcd752b3)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=sskCabMdhBnEunen3CQPxh8VypZkWZLRAP4LSuMy69A=&c=p8Qw8ziFgPJvc/sxT3qoDhFUyMfrZBVoAvA9zxcHZ9Ujc9XaFboRpaV/IUQviWJGRo7mGfSu1I9Q7KJwmwefb2oN239RlEZEzyT8pYP46p KQ8C0oRDk5hEvFvVaqaj9dyoJRRgaCka751mUO1g3naXdzPjony1w80ZIUu9cA3w=&fallback_url=http://storage.dobreprogramy.pl/.../gimp-2.8.14-setup-1.exe&downloadAs=GIMP-13219-dp.exe  (icreinstall_gimp-13219-dp.exe)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=10rDzTXaz1K IK0ordEhbVM8ooCtdsFseDoTf4E5xgw=&c=dk/HDxdCcqhlDhVOfLmayHbPgKRvZ6w4D5AFlov7NE1LkawKKEqD7IcSY2TNnK81oXXu5cX6AVqYx7IB1VwM5iW/5xYHmJzcJiXngAxBCvwfhviwaFu6Ek8df3iqPzbDpBUT42DjMxhaqi1qreEYLM/s0zxNAsmccpKQkehl1CY=&fallback_url=http://dpstorage.pl/.../rkfree_setup(dobreprogramy.pl).exe&downloadAs=Revealer-Keylogger-Free-45562-dp.exe  (1171e71a9667d2d9680695834f5f2167)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=ZfQJ2ZMFtQVrwwRQkwqoePZMRR9WT3MWNIVPbVz/3S0=&c= jd2OMEj4nh5vkAqIp1p0iIUpvoKpH6QxLXDPyzcQoQj1qB4SNSzCirIr2X0DJRrtrfjt0Xc/QSBlpRt7gjDgI36G57Gwe D3xeDvXdoC9/Hcfn6daDa pedCJLVzjaJ1R HglwWoMrGS4mNbrhSSJvWuNwdNUO7G6XjBCE95hE=&fallback_url=http://storage.dobreprogramy.pl/.../gimp-2.8.14-setup-1.exe&downloadAs=GIMP-13219-dp.exe  (56caf8b71e74973a5b42c747a37ba0c6)

2 / 68      (PUP)
http://www.laboratorycontentsafe.com/c?x=rVuGG0STx3RSH RTsgakczICVccvW/y8VYmWVU1qGJc=&c=Kjwdl085e4rVj6duiNDrkBo0avlvLLhaHDDNmBIQnE1y/jOXGkPE4BhhE3m2wGBOwJSec6G3X7L9MBVg9iVZVX6OuQk/xa9K 2em4J3Wxd9r4hLuMlDk18HZOJtdfihWi5rLs0x SjOYo6Us3YOLAA6fnWfGx0nfCROWsOBUyp0=&fallback_url=http://get.geo.opera.com/pub/opera/desktop/32.0.1948.25/.../Opera_32.0.1948.25_Setup.exe&downloadAs=Opera-12614-dp.exe  (b8d5e0429ba736972eefcfe1773babce)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x= Aa /IK9ZF2YIlvRVm/ G3qX1QHUeKQKsezWaCWUF3o=&c=4sUc5/SaQMxSY4SWKSkxevSJOnpZvj0NFqx2Se2auBQUsqOa8htQORnNnnQzfh8kcJfYgBgC2ObcDAHopT4binlaIb1ExoiMG8PDqOuAkxEmQy3z7azcLFaUaeack0Nl6ukJxRc95G5hgNrDfV1JsQ==&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (90f1f8bf83fc65b650696c990ff5887c)

0 / 68
http://www.laboratorycontentsafe.com/WVl6OTRQV2RVUjJSSlJrMVhXRzFWVTB4V2NVWTBabEJMTjBSU1lrNWxjMFpYWlV0M1ZrNW5jMW93ZG1aWGNFVWxNMFFtWXoxeVIzRmpWV3BCTTFwTlZGWjBhMlZaTmtnMmNYRlJKVEpDZVZaNWNsTndSV2htY0Zoek0xTnBSMFYxUTFNeFJsUjNPVTE1T0VGU1EwbFBaRkpsZFRWbmRqSWxNa0pDTnprM2JFMTZTbkUyWm5wUlpEQkRZa0l5UVZKbFJtWmFiVE16TmpocWVsaFZTMDQ1Tmtsa01HSm5Ra0pZUkd4cFdHMXJhVlI1Ymtrd2VsWXpURXcxU3lVeVFrcG5WVmRsWVNVeVFtSlRWVzlwVTNNbE1rSXpkbEpCVFdRME5ubEhVV3hDTTBWWFl6SkVSVmRMU2xNMEpUTkVKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5oSlRKbUpUSm1jM1J2Y21GblpTNWtiMkp5WlhCeWIyZHlZVzE1TG5Cc0pUSm1aM0poWm1scllTVXlabWRwYlhBdE1pNDRMakUwTFhObGRIVndMVEV1WlhobEptUnZkMjVzYjJGa1FYTTlSMGxOVUMweE16SXhPUzFrY0M1bGVHVT0=  (gimp-2.8.14-setup-1.exe)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=fTvtlgGddY3xYsxZXwYhGwpPa/N8VJdnLbRFacL0Nss=&c=uvagyfPSriR2YWrT2I92xpYPKDTZHSoqKYTmJssz5oZDLh2quigoIJ89Bd p6UpgiIrUPt6wAgUqc4uG2 7kUsNvG/IawtbGUHhSzDYmqhYa2qoIdj5LQ2INPLCPy9d rvebUEr74lWqelOK eOSVGT3ozxOb4yDSmJZaaFNlEs=&fallback_url=http://get.geo.opera.com/pub/opera/desktop/32.0.1948.25/.../Opera_32.0.1948.25_Setup.exe&downloadAs=Opera-12614-dp.exe  (2f5675536df2c73f9f4c2be23edb2b26)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=RPdQqTnpUPIxruNgPrFIo0PAIoroZuNJ4rBmU0g9X I=&c=y/u0ffRA3NMlM8G77HLOEyE0rl2eVcq/mGJxPy fxnCuQZcGDv2zNg6pt/S0ec5WDFq8SIkU8jW9haLab6DbE6bqtRFjBiBJAH6WqrePG7AEmIq8aRrL7iSGUCkNwYHTAPG86b 8ztt0xcQUCrwGtd9g nZNiVuUxJwKi 1l g=&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (e94a6d62acb6961841e5ebca2815b7e6)

0 / 68
http://www.laboratorycontentsafe.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  (winrar-x64-521pl.exe)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=U6Xc6F6ywnOGkrBeU0ATqpp W7Chd3oukoMzQ 5aMQ=&c=g3Z8JwpiIIu23umCAyBYrISOZ4k50Hqg0i6lxBp6ATfC8q6BGD77GheUrPxJ7X/V6GPkWTUt2zpVclF8po11TEA5VSPxOg7Hzon6/Pd4X2qDm7WubUWJsRJiJYAtLb4cRKzGwphh3wuyDOn1wdOLWQ7xpUkhrWAxdD6yPiqTP/M=&fallback_url=http://get.geo.opera.com/pub/opera/desktop/32.0.1948.25/.../Opera_32.0.1948.25_Setup.exe&downloadAs=Opera-12614-dp.exe  (129c2cb0ae6a0f7ccc045d2ebcd5e945)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=oRWf1GPuwYVIRTxL3jGN84lYFoYWlb7pvRGKd9UR3sg=&c=c2gmqAKLx9rWe9n bA75ztF91nZAiFH6EGAQHlE6IHdrAN5WvCfKKcGqX1YsYDs9BG6Hfd6zv2JHsD/1HukjEna866pS87KY02urLnTZHz37AH4oKgndAxqhourmIcEfh2gaIJxWp/NNNGjY73QMqm5cd42EPySg76MoSnWrnKs=&fallback_url=http://storage.dobreprogramy.pl/.../duocad(dobreprogramy.pl).zip&downloadAs=duoCad-12425-dp.exe  (29127883b95e2532d52cf0c7c0c269ce)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=otimgltsdQkmEXnrWgmKJzuok5Xa7pcHBwyrr0OCHRE=&c=HJJazmC10cOsAlex5ZonLSN2HVH9KAW XE42Nlg 8gwV3W5Eaq6RxOyfB71hdBjjgP7hcahlrvU0MF3BA6iOasNlZO02xvVYBBWHaW7W045W22VMkhZwR4XmtKtRBd8KtJqowTp/c Egnz06kmHhOIERXQLa/IqUTqbj7OaeDUI=&fallback_url=http://download.teamviewer.com/.../TeamViewer_Setup_pl.exe&downloadAs=TeamViewer-13319-dp.exe  (c552489a49ee54016dad67ee32f8128f)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=dFpxceegYFc wPSQKB13txjfMeaGIqGChC8uPwnulk0=&c=xniM5j/VjFR0FLRvFRleEv60zhMugVptszawwFHe55ioiSFO0C6ZQ71h/Z/fhXgpv5R2F57/aEnfZ y3VFxFYdVNzgOeoMpDLGVsa/qGZdb2p6O3exm/ueJRNKcfsOjhEVBvgRbD0TOnmk15dFeVhEonSAFukBKFir3bcZuvYEc=&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (62aa2a12a0f112e3dda6d51465bc53e2)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=r7VHgHaGRCA7wvha8eTruz8Szgv/dUNzsereaeT9MF0=&c=2DmevZnKfyFPcgRvwuj2c1V8BLV5lb7uoOY3aipqddJy9pGU0OeUbZWO8XV5MUp9rce/nlTI5xX5OgrGbJCgM5XYXAJfE0zq fUM0aKs07j/Ucn1leNSgyUsL2Tt7chLgvzKa/33wzZIci84vgaoHJ2noSdxu2EtZCRc0I5RXS4=&fallback_url=http://files.progdvb.com/.../ProgDVB7.11.0x64.exe&downloadAs=ProgDVB-13340-dp.exe  (ce90fe8eef64755806c34be6a5429df0)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=RiBxtGH7A1ZGODVjrzPsSJKrvIwKwHFvGJP0hHqC7 c=&c=3l50w83B6Tnza/z5l8zsFivJaEExmw8S7vDNyRkR1E8CJe4 oEFNYFcJzmCZZaLdOWfOB3a/LU6jfrUcfHBk iwVGIleXFIdGpru VE99leV34inSKwtCCpMGduAMqWIvWwA8/DZsdGybECL5gISEw==&fallback_url=http://storage.dobreprogramy.pl/.../BitTorrent.exe&downloadAs=BitTorrent-13103-dp.exe  (db13a29c82369b2723e828c88c5befea)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=13493/bZm4RJMiX1M82AXs8QjGj3IMe5mKwQ3najRSw=&c=2J8yj7VKQ3rsMVsD2wkaCQL4Btjcx/Vs6bYSLjw4zFKRmUqgHVxhaQKdBSzVWT62 5kc29PFdjz1I58LTe5eOqY75fGWcm3UQSXSAc2/Fs7vFPZ3At7hD5oZ7qdDh GE4U2BTw1wUmXlA2d7K y/gEyMBgHWyBOfV0Sq/2ZJLT4=&fallback_url=http://storage.dobreprogramy.pl/.../BitTorrent.exe&downloadAs=BitTorrent-13103-dp.exe  (5839429f36d841242635da92b86f9b45)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=Ieo5NDCFIbXz9R2xQsCekLe1W258MtzlWyy/DgQiCw4=&c=OZ6QjzoBNdmYq8Ne7J2pW5iiq3oLN4ZxEaiaSZli3DDLZ8f4fAKM2yBGipP6FlavbFR/7S65DZaH8OQ5NeLHD7FpmxnpVA1ZE8SMj8DpyXmT7o6U9OgkeaO6Y0jhOvmwwGmtV6tirxRqhokV3YbgmpwvXcDQUno5iCliOuxx/EY=&fallback_url=http://download.celtx.com/.../CeltxSetup-2.9.7.exe&downloadAs=Celtx-13014-dp.exe  (30015fa8b3b441b53358fa67cd14331f)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x=VcDiNuop/s2odXHNL/YDyjrDJVpJJXfvk MKr57GR3c=&c=5KY/Fb3vTj5E/98JojZff5wV SE4LpXm44ex7KAASaHKP7v3mFIM8suIHmmBpaAsofFNp5OjeNs22RK6xWPk3Fczl97uNnOKnv/YKtJEM9hlrGM34A1QZYBnKLO92BXboCC2jum3F7O1oTkZCPYA7zhbMi3TDEODv7cDzA7T6as=&fallback_url=http://ftp.tu-chemnitz.de/pub/tdf/libreoffice/stable/5.0.1/win/.../LibreOffice_5.0.1_Win_x64.msi&downloadAs=LibreOffice-21562-dp.exe  (c748464c90b8cec92f1c45f926dfc511)

1 / 68      (Adware)
http://www.laboratorycontentsafe.com/c?x= YR0QJ3sAtphvtT8r4PYr3gOQcrFGREy0U7/1wzlgXU=&c=p2PDQCzk1Y748a71/SofGX 02l4bP92taA4HswgkosUNUcrwPwbqzRH7vy2rKL7lOTt1/yr8CyYwia fIwhSG2mAYjlV/I/C4pCFD6sXaFkncH/m7nVWy2BI7ceE/Hk70sYpay1zWx5RJTpic FmCWSGycue4sIb3aNMSHx6Hw4=&fallback_url=http://storage.dobreprogramy.pl/.../7z920(dobreprogramy.pl).exe&downloadAs=7Zip-12559-dp.exe  (b364e84cd78faa9d6174b862ea050028)

The following 23 files have been seen to comunicate with www.laboratorycontentsafe.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.