home

www.newsignsuniverse.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.newsignsuniverse.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Sunday, February 7, 2016

Expires date:
Tuesday, February 7, 2017

Updated date:
Sunday, February 7, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
newsignsuniverse.com

Whois:
1 newsignsuniverse.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)
100.00%

The domain www.newsignsuniverse.com has been seen to resolve to the following 14 IP addresses.

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 29, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 29, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 29, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 29, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 29, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 29, 2016

File downloads found at URLs served by www.newsignsuniverse.com.

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=eX8ZmnEwdNDVH o/3uyi2U/.../kEbj2hWZvuvd65pzdIYjqIwverUetGLzwbQKe41iPY&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=vfDIzw0cOa5V6f8zz0i06L/.../gjZdhCxxfYdzP0tPUM9 zj50EpJegEIrXG yUUqcWxY5Z0Zc&downloadAs=Firefox Setup.exe  (c.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=bqCEPlt 7CF0Wd9YrA01cvYbPA4/LNlIzj5MH1Tl4vg=&c=9sIQi/2FSdFHAGiOT7a2ntN5q8rNfTAXmCB7p7b7ugQ/3rPkxum6wVEh/xJUDsAAp8QbsCCXcIRPfQPzkCE385FsKgkI/CijNvmCgVdiW9BTLR1jof7D860pdLoK6H6z&downloadAs=Java Runtime Environment Setup.exe&fallback_url=http://www.downloadfree5.com/landers/.../download.php  (63b246a16d9808bf99ec0b17622885f4)

1 / 68      (Adware)
http://www.newsignsuniverse.com/.../h8m6Db3MQ=&c=RvvxLfpHYodp uj3rqDukXuEYJ WHhypruWEHMsRgrwVMzXreWURqeVZVc67KXDoGrJhnREyped9Bo0foUMSNLYa98i2ztclEETxjbjZUTpi9xlfIwazT ECRApVW3Rj&downloadAs=OpenOffice Setup.exe  (c938ded1eaf0f0c40b3d5c96b74d6759)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=z6rzT4up 50nrxc4pZsyrDQwgzHOe9VFNg ed8zAzBA=&c=fZkA6hrCqwuTU6AEWMkjN8JHH3S4eti2r0VKXuMtn13nzZzp KPKU73C1YO ENHKi9t10Fzv5Bg7jzHqj7Uy kYcuEp6/mfZTWNyTKTt5kENKflymCEuiDTyKs0Q9lOU&downloadAs=uTorrent Setup.exe&fallback_url=http://www.downloadfree5.com/landers/.../download.php  (f68dc971a502221fcb74e72aafc12837)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=Iahnv7WXzyd4DucVW8xzgfDqtpDmm2gwE XKczFX xw=&c=fEs 2X4WJF afx4s2ut9Fw/.../O9IT946lpIRdSIiEamklbpUcEJ3yNN89uuRgY55N uVEQNy&downloadAs=TeamViewer.exe  (0b47f7bd795009b327706fd2243b2a1a)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x= jXtd8pGjb4KkYc7TDAq2GS7MdBH4HtdyKWeZbbbRfs=&c=ypOGWPPsY0AEOsAUsl7jz9CCpGO52Qi7YHKgcVEMbbFYh0vHEk8K4wAw dfK XTwtOS79FTwqhpu5HhZCxaCxQQ68fRXB6AENKQvztXfRcU2SlJGOt1K GXLF56YCqeo&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree5.com/landers/.../download.php  (1585be87b7971e62517a323c70991911)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=lbzrt6UOn01YMvbjNNoyDjeC0It/FL5D10Mcd68X1uc=&c=KNpZSHUANMtGYirEcOpT8xyK/4Nsj7MybUwi7OXGCLTnxCdTZLQG7c bC/rjWRXBcxn7anTOdsvo4fkKbY8qPZm6qnz0rv1FIgKGj/.../3TEZgq9&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=WReAvVaE2vAHycOxE0gMBJPhsV/2pOpr hC9 VLolUc=&c=KrHYDXbElS0zrg5POQY1RkuuPMG7EBmOtIkpjM3lvxRq/.../Km8kFDwKcekYn2EFIAg5OaEpzca05Ii1tZZMMuRoltQ5uZrUxGDiKwWyShb9oYd64V8qNeHy9O3fzFXX&downloadAs=Firefox Setup.exe  (firefox_setup.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=0oefmdb8h2SFOMimOPwvfNt1RI8cv/YhdOtjgFk3VHI=&c=6KGu22zjcMcYBQa 7xdy/.../39 4jyNW7Q2b&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=VpbOIlHEOuw1LwKEUS0xm0hjZuNultqnJG9 mUsW 1Q=&c=bji08SlYfA665XLm 6zsuYbEcpJVZ9VUBuURpH 69AdhB7ujn80pORQMKGlVg bgWamP8R0yNoIfc8Y jvnA9lH/an 5uvkgy/SN/dKs1KF597UsaqAV57sXSQhDAL0N&downloadAs=WinRAR Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (e03f22268bb22ee783dfab70849c2a77)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=jeoWfSMBEu2EHMC4i4ByCpNJ0e4arehgad/.../NLE12VsyynoEjhS9EVcSatk4VPL8rVc6ApAVsRT4YtOad1ob6SYdrx&downloadAs=Firefox.exe  (5386bcc0ab852ec9fe18ba6a9245313f)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=zKMZcFV6/ggIqI23yjcaKka2OkeeotEDtNleMg/ixLI=&c=9a8v6Mk2JXDISdFxbXb8POE33PElh2n9x0cs9W1TpyKb7rza1CMZZNZcBCwzQlG7JK09BF0g7Vy5ut1snYgFVGLbS75a IpRQNwOOc /.../21i3fpuoKJM3&downloadAs=uTorrent.exe  (icreinstall_c.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=AvlwhgzE1Su4FjML3Oemm5d9tIT8FchjG6altQSAE5Q=&c=S/wp4oL7Q3nU1OCnqxrJrLogPeRo pvkQ 5nVqG6PuQmG17x1 Vg/.../Mxxh6pr9bi&downloadAs=Google Chrome.exe  (54c6e0c07a5e3e2869960889280b1b21)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=Xjlta0jukGD7PYfDIwd5LUFmx4POfDyGPLeFWAc7yAI=&c=vihaoyFZlsR64pC6bn6JOcl1dZPIs5tDHOqN4XGYmzTxRMe k9p/jqbfbFYUzTbtbcWkZ PXM6Nx2zIR/.../ppjoFsK1S1nCOi5w6sLkN&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/.../srNdh&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=9NlnXDqycNmM1E7QdoR7VRXbJYPyg9iiPzzuHqNMDns=&c=1YrATBPdz/afHBC Y9au0h0c /8/U/.../tSrnmxo6hcbr7HafpgEWT0ejDG9b1MoR4Lh8ukWk&downloadAs=Google Chrome.exe  (c.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=E3KUgv4CFWVoOb7HZiCulyIvvWaB0Z1pnfwF1uB5SLg=&c=yBAwVBrEuhLS7yQxYPzAf6L EoUnzwP2OBYfeGVzC70N8B8eAl9ugVJt4uKsRlnvRZJ7EVRBGaoeP04rtnORXtwZ9n0bNhhpvxfWBHQvy5L5kgGdRTWRRPyu5IDLwBb7&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=vLmyn6bS4Jzf70DElbKoN3QXva04DuOf4TH44Whl1ss=&c=o8Bq/0EfsQCCtOcyPZhit2TFK7aha07vBX4wEd4j/.../LHZn5ZCMoCr1Bk5oYHha7Ad2gx20BsT9Sn&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=fG0lLpz/opLfC4YntBbz o8 Mmm6V0AnMFZ9F6JAanc=&c=0T8YzkhL/7Mp8qWo1KCL8Gv4OQPGumNMASj24jxGtzLNkxvSN75OAXDzLrVepbdwN6e1oY3d5s/gItguOF/.../rM2 GkBJdKHBwlo4KTY8vb0nXpDARwjjeFti8e&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=cQfu7pI2EtZDl7bTHPZyo1txnhdjufqkUwprjS5vURg=&c=RToXQFtwvPmhu/lcYAcHPg0m5yihaeIRNn7L/.../B4 rmxzVDOHkI74MTSr0ZIkx&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=8ueOlCOIi0Znb9 Bf0bpexlNO2oBD 32DAl8x7ePU5Q=&c=6AZ7f3mQ7tJgjSl9pJu3F3zOwLTdEjqEO6P8MdFFLh3WUXs3g0eEsH96rM7tXw6hoGMOlp j3xx8NzJ3zebbzuLRL9Botk6j04CZHL2j3pT ZkBxqRP0ZIW22lDb5VXd&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x= VNgFmDrosXCGZfM9HBXrK67lGdg8eYWfPOrBau28xY=&c=AebUOm3xezFwZoBwTLm8LVLUw8n6Q4Tig7/0mUMDX3LoletTNVVYOjRAnJlvDSjeXEKlK8mM0VLDt54LIYw82/.../RTQxYISkGYH&downloadAs=Google Chrome.exe  (54c6e0c07a5e3e2869960889280b1b21)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=19 g1N40I0BYioXa0TRfypAVyO3eqw36fitx0ySAeAs=&c=zd20HatRZrG0YedpberlxoB9lUzm5Ll75cy4CnUewKHbRu8IcqHIFnMD2wrzJ/UfLVhnWUr9TK/.../W6wJiMXr88I8WJAqv1 IVfR7u4NOAv60ckhwT dQPUJnXqv&downloadAs=Google Chrome.exe  (google_chrome.exe)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=tRsNE2oHkxwoUQO83ZG4EUWDFqZpAujdM5jU8Pt/xng=&c=VdYAiNkzQf/WAvGrCYvgRB/RD6aihpck0oIAoMA6zU2cSzZAnNZ8FkGpuheU19AEtEDJjXMV5 gnHeIWbXYaByu6dMD0IotXL3FMg37l1FvDXHGEzkkF2aWIesLRrHsk&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (f3161844e2b22cf9ffb41c53fd49ceed)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=t1WEYTZh5HhSeky5 eadJphRJmME8CnMETSZrTjesEg=&c=i//aKmplMkCSS81yPTvUEAvLw/.../sYVC6NQapqKIwCIi4KvI6LBeYR1wSoV6hVLqCszIRJYDgVdpG6sOHZT2RjIVyvWAGwpkNuvl1sI&downloadAs=TeamViewer.exe  (a3f4f171e7615322d8630c67b26053ab)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=7ZhUW5XmT8Vo6n2wztrZZSjQveq7LHvwjPlrhEJwwgo=&c=K6Y5qCLk45c3MnLdJLr/g436NUESd60i8s3jCoEqimyMxIncnSEecU8whwczufKuzqIeEV2ItRtu5AC3j6NOEcneRysY8OSCI3HLNJCAu4wpg5m0Ir2x7/Z5zKBrvcBX&downloadAs=WinRAR Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (8dd47bee581526e4c51ce5812af33ec8)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=r1sAD1zHQpcMwsGU1hb3ZybE18WE1HR2LEq1/4hxewE=&c=SaG4m8h8QHfi31gMFaPby8iokN6unbIodpFb26a fXXFtJ1O8P8j0RaE 5Pg1KR606T5jPXI0QSsfzbe5/.../i8MaOfTbnBukhTn9TlYIgjZiQKGm2TSwAmALR&downloadAs=Google Chrome.exe  (54c6e0c07a5e3e2869960889280b1b21)

1 / 68      (Adware)
http://www.newsignsuniverse.com/c?x=yw4113SjO4MxC sCXiBn6EnP8uHJ3tJIgiATd/Lb 2M=&c=GLCtWU1x7 IcMDPQwGAqB4 786kUpV1Qqr/Ytx/5vwxSvlSLNi6dwvmJCKRX2Yhfo/.../rkW&downloadAs=Google Chrome.exe  (54c6e0c07a5e3e2869960889280b1b21)

1 / 68      (Adware)
http://www.newsignsuniverse.com/.../6nENpr2HKF2zIteiarHifMN8BYBsyKYHqOZrS4Q60o1JIfNG5&downloadAs=Firefox Setup.exe  (c.exe)

 
Latest 30 of 351 download URLs

The following 18 files have been seen to comunicate with www.newsignsuniverse.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.