home

www.sendbulkfactory.com

Communigal Communication Ltd

Domain Information

The domain www.sendbulkfactory.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Wednesday, February 3, 2016

Expires date:
Friday, February 3, 2017

Updated date:
Wednesday, February 3, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
sendbulkfactory.com

Whois:
1 sendbulkfactory.com record

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic.Installer.Meta, PUP.AnchorFree.Installer.Meta (L), PUP.installCore (M), PUP.installCore.PTMPGames.Installer (M)
77.78%

ESET NOD32
Win32/Bundled.Toolbar.Ask.G potentially unsafe application, Detection.Undefined, Win32/InstallCore.AFF.gen potentially unwanted application, Win32/Sality.NBA virus
44.44%

Dr.Web
Adware.Downware.10873, Win32.Sector.30
22.22%

avast!
Win32:Adware-gen [Adw], Win32:SaliCode
22.22%

McAfee
Artemis!C0841F98FF22, Virus.W32/Sality.gen.z
22.22%

Kaspersky
not-a-virus:AdWare.MSIL.RocketTab, Virus.Win32.Sality
22.22%

AVG
Downloader, Win32/Sality
22.22%

Bkav FE
W32.HfsAdware
11.11%

Malwarebytes
PUP.Optional.Spigot
11.11%

G Data
Win32.Adware.Spigot
11.11%

Quick Heal
AdWare.MSIL.g6 (Not a Virus)
11.11%

K7 AntiVirus
Trojan
11.11%

Trend Micro House Call
TROJ_GEN.R047H07HS14
11.11%

Comodo Security
ApplicUnwnt
11.11%

Zillya! Antivirus
Adware.RocketTab.Win32.32
11.11%

The domain www.sendbulkfactory.com has been seen to resolve to the following 16 IP addresses.

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 3, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 3, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 3, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 3, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 20, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 20, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 21, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 18, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 25, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 25, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 25, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 25, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 25, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 25, 2016

File downloads found at URLs served by www.sendbulkfactory.com.

2 / 68      (PUP)
http://www.sendbulkfactory.com/c?x=Yv0d9 CmSVjhZpCvm6RJQOLv9qCdhzx4XPDZQuMaxfQ=&c=8Yh8 Th56BuRGsFVdhjOk6SfBIeyF gFsXuQtk0TpTJVnDrcyVlQgq0WsvxgEYWBVeuTv1b8WCu4QvIGhXKT4MjDonNVBFqnCV8OZEEwONn8O2 YAm/rlfixahvjLB/5&downloadAs=Firefox Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/23/.../Firefox_Setup_45.0b2.exe  (icreinstall_firefox downloader - jalantikus.exe)

1 / 68      (PUP)
http://www.sendbulkfactory.com/c?x=IRKgvYGeqs74y0UeFcNHmw uuH NtO xAi8qIbQC8mo=&c=qJVUI7P75cpf4ltc9 HzjS6OYdKgbyuPVSSdgHQ3N2lPITs97OCWyM1KGA5OBsubPrd4 ZSJrtvJCRw/YU8pZJI89QxLJXrb4K7cfhhH6r cnZOrfafqfho1pqRdVm 7&downloadAs=Google Chrome Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/24/.../ChromeStandaloneSetup.50.0.2638.0.dev.JalanTikus.exe  (a86c35a0cd14fa75c798b1029925cc77)

11 / 68    (Infected)
http://www.sendbulkfactory.com/c?x=WMqWSXtVAOufLxyLuo7Pk6InzgF SDt5xTIDMxYp2CU=&c=5P9FFuVXSAsqkuE3hoecimE6o1hjroohO7 xCACebCJqxrJks xh3bJtgXkCK8enkezup5uSVnEAsXuSKcqWmY35o255aklHrcHXJ4BDv02FZc4GQssI6QaajJTXJb5BVsAdsGVGQcoQ9mUuJDP7pA==&downloadAs=Free PDF to Word Doc Converter Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3249/.../pdf2wordsetup.exe  (17ced616bcefc1e3419797129284b178)

1 / 68      (PUP)
http://www.sendbulkfactory.com/c?x=9hM6IkdYu8F/Xc0VfErKM0yGmjgwkIp1MAStd2TQG38=&c=XDvJ7DMH1350bSBoniOjQn6Gh/gXNjv5rSes/v9tE50ItE2D329u73n0JgbSdO3C1v eYmX3RVWoMD8hRmXfqs9AIxKaYtvqFrx0fY9Jk4mT3HLvtKzmYoP5TsVmzRHP SvWgAvcLquURXgr4Idk w==&downloadAs=Hotspot Shield Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/833/.../HSS-701.exe  (hss-5.1.3-install-plain-701-plain.exe)

0 / 68
http://www.sendbulkfactory.com/c?x=rq3RxV7Q0Eo1GigBDVBecKyr0C rkJWvZIYlsz2IGQs=&c=dOnMArxQXOTw/dqYq0PddKi3uyIGbwiTRWVPLt2ZCkvtvDRAkAvRgObImnLG/zgDPPcakWHsSKJrfNwTkO1sifHCSJXewjX7Ueke0GutvviGKstRu8OVHBEMuwKX0UxburxXY/HEH/DCtgecW/h SQ==&downloadAs=Modoo Marble Online Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/530/.../Modoo_Marble_Indonesia_V273.JalanTikus.exe  (modoo_marble_indonesia_v273.exe)

1 / 68
http://www.sendbulkfactory.com/c?x=EVWEJ1sRfYOSlqG5HZjCKfYQwY/ibzkPY8eWKDjwDWo=&c=nZS4P3CIiDBhQjdnfA8Oz2P8rm9qP2xxvN h5TEMjxPaOsby4Rsv/IGvK4vCidaPOhRBZjZLdBev lAikaPEA9Qotn11RJ3hdltmH/bEL9M=&downloadAs=WinRAR Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/94/.../wrar530.exe  (1946244f3951592df171158f2f18a04d)

23 / 68    (PUP)
http://www.sendbulkfactory.com/c?x=ocrCcWHNUFgFAL92mVlfSBKgkNLQxJD4YUDii8MjJsE=&c=te mz9Hj YzzbEeFRzRPOS3R/qONgGbCPFxsmUTytpltyBCh6EWLfZR/Kt9VrPOmKf1meXjRpus27zY3S5 hovlp95sPtOkH7cEZVX6a8aQ9WDUMgaCZkJ1YfurXeBXV&downloadAs=YouTube Downloader Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/272/.../YTDInstaller.exe  (ytdsetup.exe)

23 / 68    (PUP)
http://www.sendbulkfactory.com/c?x=2VOrXaekxEMtKnJ3UlgvAV7ivvghEX17gAcoaNCNH1g=&c=Qr/yLakQLSO2w NkFijyRCvaqWaw9m o6U40m9g7E1LmPPqJ3kdKs7om/bF0yl/lDJ4GCgxlUMOYwZpVw hx4eQnZMMm2SVuAH9utaaD0c2F6ovlwHfhyVw9OWRral8F&downloadAs=YouTube Downloader Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/272/.../YTDInstaller.exe  (ytdsetup.exe)

1 / 68      (PUP)
http://www.sendbulkfactory.com/c?x=6apgHO3Tr3F1mYtUMjF7aEjPejBhzDLItua3a/GOJoY=&c=QAJxvF4pCkGzFtLMyvyxI8cNmbRDBXCWes6nx41960hYEuFLZqLOL1qHFXb3 JFEaVP4QjDv0eNmvyV4DxoIWiSdmTPZ422A1BtUvl4SMHs=&downloadAs=Special Force 2 Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/1015/.../SF2_Install_2015_04_02.exe  (2d94c5c3396260b76c48d2792d1357eb)

0 / 68
http://www.sendbulkfactory.com/c?x=6xk9ZRSGpbhN3VOfLxHLgaL3ZyRVQgyVSRmIayRmpbI=&c=bGK/kb7J3kRlU4tVN6YIgvsJ/zsN5hi8ewUrf9R 8ZKGUbpHbGRGtCfZj6ps70mrG704lMn0WlJudR0GRVRNzgCty0i4GSiFufZrYm9HOMKNe/DI6FNy2THvVyfF/e1g&downloadAs=MiniLyric Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/562/.../MiniLyrics.exe  (becdecf10bc672f327d39d6eac72dbbe)

0 / 68
http://www.sendbulkfactory.com/c?x=UU9PeAftqfgIAoTdSLngwIOUhdQ16iGN8gnPoTGuf6o=&c=aZxyctPDV8xTetrgeNiykXTrWm3a/D9zez6CNsmEWsx8GsshWyGWGjM 4BITUw/r4jZ0tgJBu9Ugv9iOpbxkCguF826GgWBO1ayxc5qXSubJ4pH9bpk/9erErtymemd6&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build11.JalanTikus.exe  (idman625build11.exe)

1 / 68      (PUP)
http://www.sendbulkfactory.com/c?x=ZTMhvXSwA7t33lkYZsBHrPkx1WK/5Hh52AYQkGZlWfA=&c=ICU0IYIoBjzqK7daAcy6F3bFXV4ucSN8 uqoxh4MDah1l8RrY7D78t7vnAZvlGaMVY/2T7ExZn/7Mcvn1B0qND3ku0EJpmfH1SicuPHtdBCAimc9W /TZF4fBCiucmDA&downloadAs=Free Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/132/.../fdminst.exe  (e4944415a982dac22825750c7f8e0baa)

1 / 68      (PUP)
http://www.sendbulkfactory.com/c?x=MGGykqgShF7mdqDztHuxh1JvoRnVri7vpthBIU/wZPk=&c=16YbLPeEeIyuuDRPU 2nIl4lxA3F/GE4vOhTOxJYEWB5fKDYPYwwbMHrheMLuFQiycH05tIOr9ZG8cpAqgveGfKHgGeY3UXqbTvLe3ghLrVgAzTxKYE7TVW5k uNBxw3&downloadAs=Angry Birds Space Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/303/.../AngryBirdsSpaceInstaller_1.2.0.exe  (9d7286d71e844f34d6a8f80f808833e3)

The following 23 files have been seen to comunicate with www.sendbulkfactory.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.