» www.towerscurrenttower.com
Overview
Analysis
IPs Addresses (14)
Downloads (24)
Network (18)

www.towerscurrenttower.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

towerscurrenttower.com

Scanner detections:

Detections (88% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Bibado.BibadoInvestments.Bundler (M), PUP.Bibado.BibadoIn.Bundler (M)

100.00%

The domain www.towerscurrenttower.com has been seen to resolve to the following 14 IP addresses.

ec2-52-32-12-104.us-west-2.compute.amazonaws.com

June 6, 2016

ec2-52-38-209-219.us-west-2.compute.amazonaws.com

June 6, 2016

ec2-52-33-165-25.us-west-2.compute.amazonaws.com

June 6, 2016

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 16, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 16, 2016

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

April 8, 2016

File downloads found at URLs served by www.towerscurrenttower.com.

0 / 68

http://www.towerscurrenttower.com/c?x=KDyPhrvZyPeCUv9PJDIrKol4luRGJxsb1NdJgx572uA=&c=3/W/iaiGWKr8jqP/zBCvp76qGV6y9YXzVv2/ePzEyqyHhvCW4RvnakYaKw39ai8RbivoMSlLdMyeUCks6 D2V6R/jDRAcaUn7FK1WeJqlHH3W7vHNOjyt9WwLbjATlUV&downloadAs=yahoo-messenger-11.5.0.228.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455945371/en/6/.../65168-1791976-yahoo-messenger.exe (e154fa881b97dd7f3eba8d59b40e4289)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=YKhlz1C6sH0nRJWBXWe7Rhg5zk21Qls553kWml6GtMI=&c=wC/grxQxfmCPAyTauoUWfTR0oUrvTkX PIxQ4lSwvTrnRcaXOKuNyX2ZAIqgWvUiEwSoFlhZILhTo09SsQ2zKisbKeH5yi1vEppjyXnAneLAxqOfwOiOjIEyfFA/sRQc&downloadAs=hotspot-shield-5.1.8.exe&fallback_url=http://mydati.com//download/.../HSS-773.exe (beeb8244ef29bcd006bc5fc7dc840d08)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=zVoo41/RUIkpNpMx880OAhbPgO5sp80ayI/HEV5ttzc=&c=20yunf6ew6VDARClaTyHhPDzVkxNVnsGJHbg/9DCEjXLBnWjk28vNdJQ5YTsa8reF03YngWuExiCacU632RFfe6shU7vWC xAN/3aCHvO/QdSCqLtd q0GUTs1BCReeU&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455953435/en/8/.../83929-92631-microsoft-office-2010.exe (020b80176278b292983040b7409a244b)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=tMBevAB0svkvMUuFoNZBqJrBbpYSiMdrQ0wKDSa5Quw=&c=ZEW99ez7D9IKnaR4Wg2SmH/a16l8yttggTkJLlYVpClL1O/4UuUEMtuwhRjCVugWNcKjjNaMnszMai2y1yNvolwvKx Pkd9 vuZ4mF5CTkaHw3dl3R5u1K6t4P RlGM7&downloadAs=iphone-unlock-toolkit-1.0.0.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455966319/fr/4/.../46207-1797314-iphone-unlock-toolkit.exe (b2906fe317a42ff4f5276e1974a7717a)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=tauxPMH4Q0vIChR58GrBOt/5feQpGhf/7ooF4pst1GU=&c=bUhdUwv5VXfv99LcqvEprVNYFI4bHTCtJ1UehHBgFCGZPqknxGUmsyWIrBaCY7676Sy0IPFUkzGusQvUXturAw1FJi4ZL7824AhOEZpGtzS4zIgQdj0gaV/0j7ZIlFI6&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455967353/en/8/.../83929-92631-microsoft-office-2010.exe (669d667ccf711a1439eccbd45b3694d3)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x= 1swBX/HOr w9urlSgqbPl0CYY4p1y07deiJi7Lpb2k=&c=MsFUcICo avciSLvQ DD4Iyr4nxlUE5YXcCoFf fox/r uhKwVxXJzaTa/SZ5qd/GZTH63pOjDNUWIzwgeTBWGno1SSXedo6 Cu5FipOGBMrj55mhkD3IZ6/H3O4k/ir&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455961341/en/8/.../83929-92631-microsoft-office-2010.exe (aac49619a6d12dcf4a0b51baca7f332a)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=nt59LHqsxgXFNA97PcvnXOeW8c79GXBhum28Qy57imA=&c=H70Pk/P5I8 CM9kpaciRagTURCubnanORC kRpzB68UsiXexeMCWmAgMfazWz36ky78dGzEKzdKHI4e3rpeeb4RUr/UOzdaoBE7GR6yWxVQR/O2s3OKFKgowwTaVaaVG&downloadAs=fat32format-fat32format-1.05.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455963756/es/4/.../43380-87760-fat32format.zip (c.exe)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=oH682QSUdvYbW/NGXtWWoDmMBHQh2URthBldoOth2M8=&c=/6Y2IBnAatOLeHwkO4WvhKhL5oHwH/ZHZNnN9uhXMaE2hAj9MPDXmyJdhnO0PmSFAS5eelj74bEYrWc4GR0rwzALEdl1VFT/HMWZpBCa5m54jkoV870gi5KJWWgo5NGv&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455957101/en/8/.../83929-92631-microsoft-office-2010.exe (c.exe)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=zDWuyG45Hy4mD1rnuZPLI0nLytqOFitgM7dMVA4VN8c=&c=5Z3Ogldet5/dntSeJblFPmoPvOdfped1QDxez2NGt0zxQtqnidM/RYPWdjDi9fmVCNHiFsWVl0qxF5aAMIPGCtd/GwtGcsaudpqEPu243uVNBlT9C1BctnXOUzNOUP3e&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455966372/en/4/.../46039-1800344-microsoft-office-professional-2007.exe (c.exe)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=lRa5CV4T2i8w0nz1BPWuPHv hvzKJ9XP9cdf3PEO4H4=&c= ACYnVtKKLiydzIZh2ZQwc0KhXc0rNe3 TJbLmnyu9vVuC3clxi7j5nDK yGjsoE7JV5BIMD qCBogs5/JvyC yRvoi5fL0Nj15PTLiZmyy1X8XeemJ201g6wE8NImlI&downloadAs=free-photo-viewer-1.2.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455968585/es/8/.../84508-92043-free-photo-viewer.exe (9110cc06a26f2ad75565fd81ad11d17c)

0 / 68

http://www.towerscurrenttower.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 (x12-30196.exe)

0 / 68

http://www.towerscurrenttower.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 (professionalplus.exe)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=uxW3umFwzaqVyDSnUqLIyFPMwzcPTNcoC3Wf5jdYow4=&c=09zVfWhNVZVYX6RWhL0r38V5bC/LCCYU0yliovNsrPAJoD55twbqDgYrV4GdZo4lTLSUMnU8wmJhlykiUBEAmCtym y83pbePTxes6r7lLRCjabvsj f7rrUQ2hvK0Go&downloadAs=caster-1.3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455935091/es/.../2/226259-656805-caster.exe (9ac58e43985a286a724eda78ec8d9ad2)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=VHPjSGLINgIVrpKn6 MA7FwqpHdyjPgyY1jdrDSTF1k=&c=LRK2fhGEwXBhsFHmJeLlV/hW4QEQ tUMTsjJ42i1jypR8auH060yB jCQFX4oZTyiXaS5eMd82cnDGDaD4VGObyMDwr5nvkBCCrfYDrWBX3wJ0iga9/tgfmk5gDXfFTZ&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455947374/es/8/.../83929-92631-microsoft-office-2010.exe (bac9068f0fddf66a89d2f4d3312d58e5)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=0pheJcLtwGe/LRZsaYsfbIlZbFThkGoClj1lMH/DvMI=&c=PfAYS401HuuUXPKF3h1ogjYT05GThzfjtzWB08iGosfe2yJ73YKnyBbVq46Dl49Q/Tq0RoV7LIzcpxPEPx0m12ijCpEQcX6msxW62I4IbWXAhfeGnTpnpyB8gy qdEIe&downloadAs=plants-vs-zombies-3.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455946257/es/.../2/225052-1797354-plants-vs-zombies.exe (928d3c21dfa0012d25dfa7abede2fbed)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=dfcLOvk0X8gUBUk64S 3bH5G0CxNwcaECU JxkWW3FA=&c=4KbBj2idYCx5GZUsnikR9i/j9eTgvHnn6F/uyPXiUMa3TIh i1jTPEuFYTbjxHEg6zJ14fXWKIk3xlrhPDGFeFIyBe53CHIl5fo9dvJIdn3 EI HAMLw0YaFveCPdBPH&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455951906/en/4/.../46039-1800344-microsoft-office-professional-2007.exe (36b16dc74f66e52f55c96650e3c801c1)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=qb9TPcB9XqEyw42GezJc5ah2rI/rjjPpBEvBlEkh2Xs=&c=HMIWN/7wbwQUY fpbzz51h0nXSONIylopUXu AThHvVZu93OlfxGDFXmLC6Gq0YzmOF// 05Wzouecj/V0GUHZv1mesVSwaLQFDqPgErE5MzHC K5IuF7TIXCFaf7wy6&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455941597/en/8/.../83929-92631-microsoft-office-2010.exe (71484e3b07904b8e2b447ca8e4ae4abb)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=mB1Vp6H/Nty7N4rELxZggfn/1fBl52dVNLC2U3A9xAI=&c=oWiSCD1Z1CMiXxKeNcDXZtJ03teq0s5nL4Yr/ Qlx2NeMkWkddODcLeux6 bhxl/9a HWhcrGxpvAzuH5xVDrcEIBmD3y3CwR43Rg1rk6GD9aFC7WUeOnfLsTUMN4m6G&downloadAs=driver-canon-lbp-3000-r1.50v3.30.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455950033/en/4/.../40664-1793685-driver-canon-lbp-3000.exe (39dfe4c62b2d9339a3c16e54757377d9)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=nScydPxL4hDZdRUN/SNnT6k8mRGNDOsMrK1NmoaB1gU=&c=E7jAOJft/s0W8om5nt7ziPr cL990edqjjApxjVmaw93IXzouLWip5MGy0d3YEcK/UFl2YyGeJxPL01GQbX6od8Ph0zS5mXcNWQBDCy4KOLfKrNRsSG65Kp ozdEuPMr&downloadAs=far-cry-3-full-version.exe&fallback_url=http://far-cry.ubi.com/fc-portal/en-us/.../ (52762b409a72620c2c894785033212a9)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=qA1ccZHSL0Yoe735XDtJSPDDLvhqtNibZFS78PG0LjU=&c=KaAI7KrOZ6XsmMhNnujDVILuK67r19G VOdkouJEvzUFbX64 XCqIaappcW2cpYlmRs3VpVEzu6kpHHIRIHclnMvQ7WZ/kHBTeov4ejV7Z1uzWtJ0e64 VV/5x63AQJf&downloadAs=prius-online.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455937376/en/.../2/227985-661206-prius-online.exe (952d64b8b089054c4de9182fe09c5768)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=rzVOw/byMuhH8yZDwb7Yhfh CoV1ruEvswqFdlu6lio=&c=bBLUVRNiJDfT s8gW7J7t97/NW7mYnNvrfksg9r4ptBLmFtsxwyevPwwNpLkSqb/MuKeUyNnNV0f3qLn/JUX 3DmrBgr/x TbtoDYOWm4OWNJvNhwt QQuVPOjZiT8bB&downloadAs=aol-for-windows-10.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455948227/en/5/.../53254-248446-aol-for-windows.exe (8e71d7f05c918f43e741716627f72768)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x= Txi9BIK4CmGrhBRqvBK0hF 7nefQ62chrOd 0/e8N8=&c=pc Frb73Z9yDFu MlzL6ri0z2PlWFmGNOGucVBhYz9 FmVAwbJlj1txdf5zKOA/p59eBrPnGwcsknD/Qla6DL2PDUCeps90psyRpUQbrJ89o 8bR/Ou Eb4yKsdBuyFH&downloadAs=d-link-dir-300-firmware-v2.4.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455940407/en/.../2/225027-650942-d-link-dir-300.bin (6b6a9befcfaac0ff47f81023a0c6e8bc)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=o b IguZkpAchVwybMUaW6yrtpiL/VXz1P2dFEGZOc=&c=D7QMQc6UwwsvLaUm5lwbERqcFdm9NoBbWV6/X /a0Tb8EtpAySbUoLsMDfYvoiPfc0LT6TnTho/9Ad7VXcM65mN8RrZIHuTDdUQ/mJ7cKwHUj0GfbWH3ZUHC2I413eUo&downloadAs=cyberlink-powerdvd-15.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455941294/fr/3/.../39913-1805842-cyberlink-powerdvd.exe (9742f24b6c02b75b985f72183f258afb)

1 / 68 (Adware)

http://www.towerscurrenttower.com/c?x=81g/FEsA1vt55ZdAaFU4VSbKP1ALzG8XO6Mq8gv2bkk=&c=40VynuD6yIzSaIrxIWr99GtWyt5JxWY7pPLt3gd Bu97Y2PI9QzN2nOjdDMGiwefMJ1pHSKtahIH69VAeOkSivLZbjD i MIDJsl64zveqcWBqRme9LHdf1r9MJ0y8Xz&downloadAs=internet-download-manager-6.25-build-12.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455938991/en/2/.../26881-1808945-internet-download-manager.exe (52daf5befcd7f19447fbeee0b4792b91)

The following 18 files have been seen to comunicate with www.towerscurrenttower.com in live environments.

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80

browser.exe (Browser)

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80

3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80

kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80

online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.