home

www.towerstowersranch.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
towerstowersranch.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bibado.BibadoInvestments.Bundler (M), PUP.Bibado.BibadoIn.Bundler (M)
100.00%

The domain www.towerstowersranch.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 21, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 21, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 4, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 4, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 4, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 4, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 4, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 4, 2016

File downloads found at URLs served by www.towerstowersranch.com.

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=B1qZAqJLNKfk3mlZZCSOXno JjyNJquoEdphQA6ncCQ=&c=cF1vIorXrOqvuBG bElrMN q3W4 gV 9cvxVqjBAonLDsepTLNTkq6QxYL zZngLufvyXIQQ28EB4 5Sm3MPdZGVVY5gl1EZ/nWa8rV6f2YGddTnNehnRDxi vNI9ock&downloadAs=photoshop-cs6-extended.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455641732/pt/2/.../230968-667194-photoshop-cs6-extended.rar  (84c977611ddedf27eea798a5ffa731da)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=OYHO7iEn XsatIsBfaOMr9rsKf9yKuPJo/6Q2wRqZNk=&c=xPnOxha//6RyfuRrDQAORfyklIrmbzq1khjg8epGFFWLPAkd4y6lMK0mq637ZgBTMSGqsuyuH CU/jnXjdPRrGSjiKNTtnNZIsAGfb6VKvlhFdDGzPP9Mz2ODTPz0oGK&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=HvRls3mOW1mq67c8H0e6zNuH764xxOT0IsS7BN47QaY=&c=h74WDci2rbAoC4uL8JGrY8cPGF2t rw3UKiARtdorcH41aL4Zg8Vc7rYkN6UoOpCRbZygI k8kKQZWvRp8wOTLK6BOcsTRGJyUiX66k5rPU8Ckzgh HSaGv3HGuw36Ch&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455653977/en/8/.../83929-92631-microsoft-office-2010.exe  (ab07afd725d3f7d28367ddbf0c3d2b57)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x= BWtfKbCWa sPBHN8cd2HtOabxTwJ 8uDdbWntRrA4=&c=rLxgmTvaZ6JLshXw8wlkqjmgW8/mf7 THogPa D8fygbUHNlCEfjZGiMb1nglBQs14vMY87m1ux6moxIR4JrhQ8y1qcw4/0NzGeuO6OlB7Rs0Y/B/xtspoFECdcS7P16&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=qnRs/JsUDt3TbKJZGo6JH 8712R52EBSsi1i2VoTfmQ=&c=/6uB2pLfD7lqUTf0UxYY3xLaw tAZxc2enOzikQk3fZTLQ5v1VY9WMNiRO1pREyLPHIrmCYUVZUMLyDclAt1EQ2edt6DwzkFMCXELwIcowj8qw5eTD Wrfl/Eor06N5U&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=Qbn21bitqJa7QLvaRczwAeGyOcTanlEBOEh4Tgldofo=&c=VSx26dfimS/v5U1YkQmPOv1ixk za0vLuQlEnWKN2qQBkyTaZ73MFceDeWegzIH16CeK5/MZwrFjUsrLf9TaAbHwrSZod8991t3vX9c1DtbhOxq8ZbL reJQuhAEt Zc&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=NM9VOUdvloRKYizTaXgee3SNsgoQ3p4UxL00tCmyr E=&c=2J2ktPrp3OI74PzZoj22xbcXe3OnmypcgsQU9qfTNW2Z4mALJpFF3kExzBypGmd6KsvltP2t6I4wE6osW/NLGuyZgqJ3ngVN9P8HWJHCZ3Nxe0HPtITeoQWzYw4nnfJl&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455650909/en/8/.../83929-92631-microsoft-office-2010.exe  (1e0d43cac338c1fac026f2cf41e657d1)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=Xb TjY0aQWA uKwJbjtZcTixpazAEcwvSJlv3S8HdOw=&c=BI zVLK7p eAvUMgwn kqcUVyPf7u f3sCoNeV gIn39WzoHgWkzMlck fUlF9YjOu5BgJbqRxHIf2QHW7gWqCekF/hzmaNnvNf6i8gEa6eFYjTXeM8izMHU6OwkV8He&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455651890/fr/4/.../46039-1800344-microsoft-office-professional-2007.exe  (876dd754bd9445ed18a00fd2dd584e1b)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=JMGpWS Xe14iV2pS8VmwpQZvJ0XNlD9U2pj6TppYyaE=&c=zxZHx9uvn38Uxo0Cq7UCQgYdwYTW3oEAPpAFrNZO4mJmr3KnjTJklrZHFu tsIzbAZtRwIL7no0NEUrtCux /ifc/LGLPUjRmjoeXaVxgMi96ZJaZbpklYHmFyTtbJGn&downloadAs=minecraft-1.8.8.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455646095/en/.../2/227519-1807427-minecraft.exe  (0b33b20ef09db4e77f38a5d458136386)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=3HwdJLzit9Sa0ti0xbJm155V2GI6cHJpgzZVRxww 0g=&c=kvoljyBW2obPSKiZ31CQA1tcVxdRz5uFWDcYYZuRwMF3srbXBEwea/Dm/qLKbHTcMqfEDGGhUgfpcv1wnymI2d5sEVr5WJQRtquLGOJXT0h7B6wTdxSU eaG9cVHmm81&downloadAs=minecraft-1.8.8.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455646596/en/.../2/227519-1807427-minecraft.exe  (de755e11ee219a08bd7d63a4321bbbd4)

1 / 68      (Adware)
http://www.towerstowersranch.com/c?x=xU5UCg4kJCYOlNZVuxT6crWhudneDJWJFt9lwH7pn7E=&c=QGox9cW7D5awS0xly7/ir5rBVPLnWZ6blDM/vjqzLJIOSQBS8pdF7p jpXTGhXHDIKnqYqqZ0bsb2h4ZVRK/GSG jHoGFeKcA3rBJ2uSBUJsKLohZs1hky7ua5m w1/z&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455647364/en/8/.../83929-92631-microsoft-office-2010.exe  (e4d43da391d019a0fad3eb29ba3ec4cf)

The following 6 files have been seen to comunicate with www.towerstowersranch.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.