home

www.nowappclear.com

Communigal Communication Ltd

Domain Information

The domain www.nowappclear.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, January 12, 2016

Expires date:
Thursday, January 12, 2017

Updated date:
Tuesday, January 12, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
nowappclear.com

Whois:
1 nowappclear.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Program.Installer.Meta (M), PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.RES (M), PUP.InstallCore.FC (M)
100.00%

The domain www.nowappclear.com has been seen to resolve to the following 22 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 17, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 17, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 28, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 17, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 13, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 13, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 13, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 13, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 31, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 31, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 12, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 12, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 12, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 12, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 12, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 12, 2016

File downloads found at URLs served by www.nowappclear.com.

1 / 68      (Adware)
http://www.nowappclear.com/c?x=QiqXfj3CdMP5PUtUnE3V SRHs8NbNnbo8AIhl2UAaNg=&c=uqcs6XOkym8ZkjRXg3SByoJzNA 1KaAnJfyUIETaBxVx/KtJwukp7/LDbunZnQpvwQ9NPtN/lHuV0ay4VgJCbjJT792xYKZ8K3q0mlDcS3027iGFHYEXTyx60ejGy1DN&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree5.com/landers/.../download.php  (4c87debfa7d85bd3625c50d03d33d0b7)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=BeA8FJjxLVR8RCuB yB3X3pYMeMom8XNFXsAsXq2CVs=&c=ma gILWWyJHwyEvHasPKLwaR/1sBBScm7QzYLMSWVwIZJsSzJ8QYzbUgv0qlyFHHI/.../UtBRP UVmc&downloadAs=Google Chrome.exe  (5b1a9b34e5843f7c9a24de6614cd1851)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=qpviSEAVY9LUVHyW7RzYp0T2AoNS3atgWrAp81XZJTA=&c=w2jSAvjEAyhWJD12PjcWOBvZ9xcOI0I9/ ZPdAgctxyhamcvW7hG ivf0vQH AP9HSC LPJm57csbuRj umnLUUb9QnMu0tBcmnrdJYnI4mOmmjTz9QufJl1K5YYwL/8&downloadAs=Kingsoft Office Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php  (2c618fcfe0eff7c336e79f96c72c1aa9)

1 / 68      (PUP)
http://www.nowappclear.com/c?x=Bj4zsaLf1uUyifu4HWlZGSsOnJ6BwMXknHYp2jVwFQ0=&c=fHHcrubteXEqggVTy46MdF7amIfPJ9mSMEvt/kmOFdgEs/K6KKTB/iTdl87BnccPcDiJthpKvaMIIl/.../0m56O72MCNe&downloadAs=Google Chrome.exe  (cb6d862fc33c6ee7573e2a395d454793)

1 / 68      (Adware)
http://www.nowappclear.com/.../SU5QcAjOx6KCbpFP7WjR7pnBElT2USEhC6yHqiGBQdwTh8lVUscbgjEmJR4VufWG&downloadAs=uTorrent.exe  (1f8833b646d3cd8a0b43afe20297bcc9)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=NwFzQGDb12fSk8Qv9jG9Xw852mTF4T7O2ovvGDYF65U=&c=i OCMDPf6OzQEuz321lBivo9H1Qg9CN4Liu9i1LzQTppUvhq7sOJ xekABc9sBixy72dxcbXNlZnqdIops5fD2K6y4WC1uxR5cXMek8nqlP7k2dIfdV90ojm9OrClsb3&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (347d9c44c60f520009c7ff7d8cd7975d)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=LaZ90ObGiUbAhb/y7nkSdGPTaYiKQCVJyVK5ee66tAM=&c=vLSueVYZPqPm0BjnCuV68c3zxIRajhQuwRuvSZiVUqSas4kNo0LPddSwt6YOc4qr8JCREaowqLBFtwEhRpib/UpnqlcMUvi7psSXME/.../aNHQqiOrz8&downloadAs=Google Chrome.exe  (icreinstall_c.exe)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=/ULKHvvAKM8CZ8u ztO4QbK4r/ARoS23Lmh4OIlkg48=&c=vTuIpd6LLf ZSW48sb9LVDthhBtrBzZ/fhFpuetwH6/.../nopC7WreoBwiiTopxIM9R1JHvPfcE66GELRpx6exsF8RCB5kM6fbomBgyIfe&downloadAs=iTunes.exe  (a366dc0be6ad4dc9cbff05f2b0d44626)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=A4ypxEIK1keAGAUvVbAbpWPpB2/hyL63pFqVlZYE7bQ=&c=AQ3yQLY9NEhhKhIDSETxIbkOvrfgEwO6E7JFIieo7utQeUc26PdhpkjgZXKMhVYp9gedYypxDondsZEWZvl4bamsyBm5PeJn2VeOWG3cUa8s/P9IYjog1pCH5BiC4cUO&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (icreinstall_itunes installer.exe)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=zVNlAaDegHJ6N6mzRH7MSu4PW4a5zZp9jIYz2pzI2kI=&c=yv72z3fgOKRTeUe41P0wuc8UuXOjK0G/krylf50EDr/eqYJywEFFTIJl3V8xfegQQr07JjfrfzDQNwmv lT3rLpWGaIuo5nYZPJgUdPyJx2Az5N0Yq9HLlETyEqpka4T&downloadAs=uTorrent Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (e5a1d757819af237e29c27d8bcb8b80a)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=t2H4c4j1e PkI6mgkMX LekdJv 26vESZa9ySERUg9k=&c=YbMCFD0ieHkMY0CYbL1YbYQYj7emOZMq8aCaxhqoCV zHlPQjPmYWTwlJ7rEzoSb 1/b9Arkw5DwQC1fh6Le4eDsjgFUSBJg10Coij2h7mu4X4Hfv8MsIpiAl7ES/uw &downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (bittorrent_setup.exe)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=pVYm lSejd3Lwc0h6/q8X2K6BFW4N8meygB1 Wt qaA=&c=qwU303Q/4dmv7qcOqGGXG41jxF8cs1nEysWMDi/dtiLPwiLNTEbb5yhJ7iNdDWnzHM02x0FXFLvxWRUOrcErBOquaCp SpvREvlFxFFn1KG/FvPkkWEhmWowufYInMzS64inyHHzDIxlwjaf7wPbQw==&downloadAs=Wizard101 Setup.exe&fallback_url=http://cdn.downtoad.com/.../wizard101.exe  (de56c6a31437a621e5da62f81ab27e96)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=4MWCNxpg1PH53oc/1l0di2AZy ANpgDHR3Zof/wlibw=&c=l f98VbvXT3y35zTfJDH3R b3AuW/IxfeCLJ97rCJmZfNYU9IvxPD8Vta /2OTqqwFdURZUxZHV7wXw15HVYKNYfWq7EXQoWyclv5rUZ/F8Z3bLOSdlbZVYJ3kBty/h6&downloadAs=TeamViewer Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (ff138ba453bdbf323a9d51f2004ee64e)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=4xPCHLyC2ZLdZGrley/CNO4IIg0S7ND/Vnnb8TGLiZM=&c=m 0iaUxKFGBeHfmZ7DVd7dMFcqF149xL9bfhA2Vbz5UWAC4fuBGBuTXzNu5oVG7no0YgyPAXCQHpN0c4JH/EDneeJMeJY02EltU PjKDm7Lg jwVeDdrQEQcvHTDCH2g&downloadAs=Java Runtime Environment Setup.exe&fallback_url=http://www.downloadfree5.com/landers/.../download.php  (21509b427292adee2e83a12e73b2818c)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=KucYEWTiw0/a///wfVEPizNwg17CdnULLHXXYYlWiHQ=&c=sxEjnNDJ0aofAOvNuJcTcYbkrOqqGdglMlz/fr1ZkprqWdFrG7S0nPziizJ5SIl q5ZwVnpZ8f/.../Cj0 0RTevsQOeZx3BcvGiOP9RleHatWdiMdu&downloadAs=Firefox.exe  (icreinstall_firefox.exe)

1 / 68      (PUP)
http://www.nowappclear.com/c?x=5U9ucfNl0Hc5yq8wTvXp41buoy5pYiAb66RKAUCEXTc=&c=4XrsPPAko1YJC88xye9kG5lywfiyqkD2NrlebmINEh8/fV61UNGuH5eNqHdaXlVHNw8KkXrvLPTsF9DStb8/dWp6QXEsobvw1k1AZoVaJxqU0VRqe9TF3YViowhlTSyg 3fDRrreGOkmiOhfeoqZ A==&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (icreinstall_setup.exe)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=Di7dSI25Xw cwOOIisR8bzcKiz6nWg4EaR2NZi1Qwd8=&c=MJ4g4d5MA6wqAfM39q7HdfILUhH4Tudg0zbiF9uBNaA2J9cvnB3vBAn6wq9w/Dqk1VEn a6aJNkJJMQ8Oof6GA51VcbJg8GoTRxC5uBc8Pwr0MGq5l5m1GTq2x03iO1yuKIJ0GiLRNlLTnz5d0kSFA==&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (1a0f8b67bc8146ca15e7c7e56a5d22b2)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=DrE7WWjXErVXWieyDYDSvZx7gnQvBwRGLs1JUF8IdQ0=&c=iAqeIVeC6VaYxOKis7NqgEQLyPUFurfhNZ0o/kp3CBM5CwC51aoymc3u12LCeasXNsPGjNvv7xi4veBoPdRScBSBPXZ91WL6ZISdxx6tDeislWzIws7W7xrFbSD/6Jdz&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (2183ddbcc5cf63e78c28959c95e3fe72)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=jBgoNj2kdxn7psox6gwiV7nH4LL1WFRJOVVVC 5ohSc=&c=qzV9WpdHbHBS8E2XdiihncrAJA5gHVRYea9H5FbBhJLXEuUewLERPL5uNoKpsvepAMvq35o5FZmYe2yesmP0mPkHToV9vMZnTRsrXx/LYI02f0Sm4R/L0VfkGEQJRMTt&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (e53147ffac49984396ef65b3630e7862)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=mK/e /0kFFI9AcF4Qj/r mZN7ciZkoaCPxWdbWB/F/0=&c=NKvMkHZhqg/Y3 RVR2yMZ48V4EILFTNOqg1hcVD3pG3LpCvfjApDz6CCFn3YtSYIM8u0 Q1/aTaBBToUo tjhUIsIITNJ6MfI axxRmM/IfBWsa fGl4PrVnjol7e6Ev&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (8e81a9c3aaaaaa7862a399a98a223c17)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=ZgfkJL32GrPqdGbcrLwDOAEODfGSOEAWuB9PfraMfFM=&c=9hT9qJQ1qV5ISz8ul1PT9M9KPVPm 0vRca8jwUb 6WuPt05VJ7zH HejxKTrSxrd/19wRpzSduc9Q3G/.../fpTmNn4zVm0I6n3MkYnUXf8QwF9oaEu4FI9B4t0lQ==&downloadAs=Picasa Setup.exe  (c.exe)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=/.../1ntER1S9ViaeeRBzQG2rB0pgUF87I0wahbgbDW9WUGrhfHKW7&downloadAs=Google Chrome.exe  (c.exe)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=ZdXFBVv9jY9930qmbHVQFAOqr1E1d7S8EDBCOg30lAQ=&c=MOB2BWWB0OGDKB0RY74yET0TpPY/.../smTQBiorosKi1MT8XRkMHCRPnP1y5heqlf2qbuXLAorX&downloadAs=iTunes.exe  (b392b1cff90e4c378d3c3feb9570f517)

1 / 68      (PUP)
http://www.nowappclear.com/c?x=K8B0FPwB7vL 44Gj9DDV4TowAI qeW2lBF5 tYlS3T0=&c=c7L eF9csuZjz apXRtWSHXUYcA64Hs6H3ZiUoGjsZW3YUea3FYkzSEAeZv1 JtnYws/MrFordU50g9eEYX/X1Cif/u7cwuwzX3gfEwArQk0qRrnB dt8E0I6pzZcjOoa6cO3OhfgAC6OWjT2nkRww==&downloadAs=Inkscape Setup.exe&fallback_url=http://www.downloadfree5.com/landers/.../download.php  (b623efe9d804542c2d2c639d63d52b79)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=W83oNSdkpfhPhyWrpwlmJyjP5tAAZKeYVT aq9nbpsc=&c=3xI79GCD2hgKSPARlXJnbqci9jqEE8z3StWzQssD1TZMJ2HvcbNfY3By iLcYePD5HyUOtOBADWRt0vBevrGAc8qE79rJKxxfFRlXYn/c WztvOB c/cIcYYHL1DjXnV&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (5e17e220bdb28e0edec4f9681379c357)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=qMR8PPhsqGV3wgSsJaCLoMyjRPNAgpDsDhUwKI2nw4M=&c=jgySVUrqMoSPSX uDHjJHmXazFRsGrnjlWMrg0hiZpG3elar9OS1mn1E11kSmiY50rXtslO95nMP7vdi8eKNGJEKFsQpHLwyfuqnA0jxSWZuDWLgSfu2ZLdnZVkvE8pz&downloadAs=Safari.exe  (fba7911d62c6ddd6687a76301164b772)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=gLInpBDTUKFWFi0MhH pGhMBN8V//5Zx8GcqEIkztN8=&c=f/Cj2QUp7mgrCGVN9ZTIvA3iXwxmY2VytFP37RJyUiQ/u7zfuo0qhkZYe5ZoVtxsapSIjaSSjKL1f4CQwlLhJzs5qW4qxR15nEOUP/VLH70apy/hYlCwQm5 /kgYhyq&downloadAs=TeamViewer Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (teamviewer_installer.exe)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=FE07tCrMaaZZyPiLSagBLhLRsGV5TdAC2OaPW4v00WE=&c=4plU4ngRT/.../QbYlNLVcby0miF7UPwSHdHAOEfFJlCd2Clo4lPwHBDxCHeMieJH2WQy&downloadAs=Picasa Setup.exe  (icreinstall_picasa setup.exe)

1 / 68      (Adware)
http://www.nowappclear.com/.../lU5atmrhZx6scOdWHcti7ykNcT PwoFOluQtbmsOkl4jGOUUSMjetlo1&downloadAs=iTunes.exe  (908e0536055d7c75da9110a550a02d24)

1 / 68      (Adware)
http://www.nowappclear.com/c?x=T945KP/w7oogRF/3Nl5e5wC76TWT2c0HfXDh7NMXuYc=&c=3CygorynSfBaX2my/vyzwEXnGIaApRb0PPS6k1LQu3HtdtKkPWtbH6/.../5p7YxbwmCJsY5qM8UpWjcjSAOBGVin8VZ0KZiu2xL6&downloadAs=Google Chrome.exe  (ccddbe2683e14e547c0fbaec37afac1e)

 
Latest 30 of 311 download URLs

The following 50 files have been seen to comunicate with www.nowappclear.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.