home

www.towerbundlesafe.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
towerbundlesafe.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)
100.00%

The domain www.towerbundlesafe.com has been seen to resolve to the following 17 IP addresses.

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 23, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 23, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 23, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 23, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 23, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 23, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 18, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 7, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 7, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 7, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 7, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 7, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 7, 2016

File downloads found at URLs served by www.towerbundlesafe.com.

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=A2NiOJpTGvsbwTTiLLSiZrJLnKyrPK5CF2zIqOUrrtE=&c=cG7SR/AI2EwCzzmB2dX68bLoohndHljoNbigfvnho2Oxyk7HmqXbbYtMffvDWXz15uAxrTxvAeWanUSH2mz5MJxmPQuLU3klW28OnLDDNi37pgdlvB/AjS3bZzKT0 QD&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Office_2010_sciagnij.exe  (4f8164becb588ad03187fe74cfede8bc)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=CvneUdHqw21VMqVNXikWRIuOPXCl7efDdQBweuAjm/c=&c=MUSdXjxRLjm5GrurTj ei3O3LDyykrDkR v8H2TL UQSkh7HsV1V8vVtrHoJ01JRULhKBh2FrWuXMS3rs6gfqBwec I1huWanfTHv5N6u7sSprjAPHeMFmxU3GrQvp6z&fallback_url=http://bi.sciagnij.pl/0/.../FirefoxPortable_44.0_English.paf.exe&downloadAs=installer_Mozilla_Firefox_Portable_sciagnij.exe  (b21093c0b63e2a34072e30c70618962c)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=6Z24inAu78a HmQhMsWsd/mzsERZMFrPPYpYiay4Xoo=&c=HD3KsNc3C3SmsITz03FQl2T2hX3Q4LbplbF/sKJX1WCw0hLjJKyV7yY3ToElbo izlqKGa7TsCar30royWI85WvhvfoQ1RsVqu325Vyv/NZKc0woVDt9xLozckubPQPu&fallback_url=http://www.soft112.com/.../http://www.reganam.com/3GP-Player.exe  (installer_3gp_player_sciagnij.exe)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=UA1RiE8CBPVD/6Ie CRoqZx1FPhAwbrQHaIsp8Yr324=&c=vQQSQN4zNRuVM8KdyB7w7/OrYjRRKNVU1BcENDJX dWXlO53hUDsbV5/IUkIs0iiYysd8 azBo7/nTSwWXehU5KQF9LXTmYnn0hk9ExlWNwyj7LtGOkBD/MH5jz0t7xl&fallback_url=http://www.fileplanet.com/10360/.../Half-Life:-UpLink-Demo&downloadAs=installer_Half-Life_sciagnij.exe  (038ff2a5b649dfa94b273a61d046da00)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=KXuSwECu8t kmylolcLGiEc99EC8a1VLqgf6pTC9/qE=&c=5xmWICn u0N7qj6JcTVohNOyYGuGtN1ee1a1CmJyYJ3iui iO1SI pleX VXfyXn2b62UpsbT5gGZ5p lODr9np/vW9BVl8PWSXyN3oSdgR56Xlo0Bb b2O4l5vyCUK0&fallback_url=http://.../poprawki.html&downloadAs=installer_Symulator_Farmy_2013_Patch_sciagnij.exe  (6936e50cf6f672999712402dd58dc7cf)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=Z0CmP2vqgLygVpMiBJvYx/MP9h3qX41ciYHCIfy6zlI=&c=4XdeY9WIpHVooofTRAouWfgmiL8lN/068on0g3l GJcgtpGv NlEPwHvGMWswckxGeFP3KsDxMMboF31NENvIe2e7HDuZbWd1WbpyxUTNbqtmNPZ00V91UzIneh0R/uY&fallback_url=http://bi.sciagnij.pl/0/.../ChromeSetup64bit.exe&downloadAs=installer_Google_Chrome_sciagnij.exe  (icreinstall_installer_google_chrome_sciagnij.exe)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=Ajfl SaPDXBGM91lqHn93lixUfSnA xumgNpwl4Qvhs=&c=qEJA3GGN3rvTG4tOveGcXlUMVaOgNmGOGQ9/WTuom4MBvlEv eNkezNVkIgRGYW98OlNAa0t5tDWmByoaK3xvGCTFlg3TdA osWRWUbRXB1Ad6XmAK1WW8iCLn9V/DkP&fallback_url=https://drcdn.blob.core.windows.net/msoffice/pub/.../X14-02658.exe&downloadAs=installer_Microsoft_Works_sciagnij.exe  (736591130afac9c7d3f7f46319f6cd05)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=mxHK ZLCIT1iXTEf3sST8wCZETQlGkFFlhZquL5cWt0=&c=qe4hhBGMTlGETMZzBYgb6GnRrFf7VFlqVvUaAbWmhW4ca88GNZjzYFdvzZCeodsJYOtJZse5ekK0slL/5jm86uRIMt NK2A3mq5yQrDYVzcu38Qw8mFT2Mgd9ZSKOXgk&fallback_url=http://bi.sciagnij.pl/0/.../7632-ie8_setup_full_sciagnij.exe&downloadAs=installer_Internet_Explorer_sciagnij.exe  (7480960069aa394cb0dfed6bcdb2d43d)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=aPfaG1DsJ8P3zzG/3SyPRtjQKGfagwPev4CO2z7qB/4=&c=FmhrLoIeuN0ghnOh3WyVPIzZ0 EkWVIUcHg1W1cX6LxEsdDswuWGmR8yJuKl2vnhLY8Ozj48OU KCrZKYn/F3FPSCnBFcyb9Eoic/GLKieQ5AfjLUq0RiUwcB JnFL u&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe  (75cdb520f375f4ea1108df44a33b2d07)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=Ck8oYSuh8 EMoFEG9okndEK7sKi/WRarJDvUvovK0T4=&c=2P DxMcvE/GRwFII8/WZR8PNp0B/TV0sicS4exojWjmF jgihLz8V/qCMKVRoluZ3uearxkV5iG3UdIS32ypX5jjbnK44uRlUwS/8mxfucrKeG8RL6tCrXiR1MJkqKW8&fallback_url=http://www.audio4fun.com/.../vcs_diamond.exe&downloadAs=installer_Voice_Changer_Software_Diamond_sciagnij.exe  (b2390b98277f73a72a03ba6233df2c9b)

1 / 68      (Adware)
http://www.towerbundlesafe.com/c?x=Dmk2X5W8yqFyOf HT5/IOsL9G9Tf02sDO3MPwMlTKhM=&c=LmyChznQevWuhkXt7HjP7XkBP2K8ZP8bh71NZebcj4NWSgAwOpDwpHM1dYZK7pDrle8WGmiEtJx6s51PPY7y5JB3meyHRM zhKWEgg82z1X3rJ5xsaGowZcTSYmab20l&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe  (3da465177c8909b12eff85ef6b5e5600)

The following 36 files have been seen to comunicate with www.towerbundlesafe.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.