home

cdn.broadbundlescity.com

Communigal Communication Ltd

Domain Information

The domain cdn.broadbundlescity.com registered by Communigal Communication Ltd was initially registered in July of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Saturday, July 25, 2015

Expires date:
Monday, July 25, 2016

Updated date:
Saturday, July 25, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
broadbundlescity.com

Whois:
1 broadbundlescity.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.TotalPC.Installer (M), PUP.InstallCore.Bundler (M), PUP.installCore (M), PUP.InstallCore.RE11 (M)
100.00%

ESET NOD32
Win32/InstallCore.AFF.gen potentially unwanted application
23.08%

The domain cdn.broadbundlescity.com has been seen to resolve to the following 8 IP addresses.

185.53.177.7
August 16, 2016

52.89.60.249
ec2-52-89-60-249.us-west-2.compute.amazonaws.com
July 4, 2016

54.69.7.17
ec2-54-69-7-17.us-west-2.compute.amazonaws.com
April 14, 2016

52.33.60.20
ec2-52-33-60-20.us-west-2.compute.amazonaws.com
April 13, 2016

52.10.77.11
ec2-52-10-77-11.us-west-2.compute.amazonaws.com
February 15, 2016

54.148.57.177
ec2-54-148-57-177.us-west-2.compute.amazonaws.com
February 9, 2016

54.187.86.203
ec2-54-187-86-203.us-west-2.compute.amazonaws.com
February 1, 2016

52.88.217.252
ec2-52-88-217-252.us-west-2.compute.amazonaws.com
January 28, 2016

File downloads found at URLs served by cdn.broadbundlescity.com.

1 / 68      (PUP)
http://cdn.broadbundlescity.com/c?x=ty8tl C7g Mm7jlfizDTf5TkLLDkeAsK1dgTg9PTvuY=&c=rQV0lGw9/.../aeXL69NuVwCxfkIGPazq8Eaxk=&downloadAs=downloader_for_7z1512.exe  (5973cef774857e1c09bc0de3de04c89c)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=4qrnF/xP/PA8h02c91NvoHHYdVWfv3I9iBlfKtccRxI=&c=FO/9ntp10s1Gban4oaKiV62HMilLtM/mfrbG3wUSq56OFgin3uR0vMkAqHOJ1dMzs1HYIyK6/iZpjShZoyC6/.../ hSUGw==&downloadAs=downloader_for_36.0.1985.125_chrome_installer.exe  (downloader_for_36.exe)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=JKP1USk1 CsmlWq2jP5yrTHi04JkCyH8CEfIVAYIVbo=&c=vE0XfHUybq9RbvTuAgleTnAxZqo65D8WQhZpSCqaB2M2irz4ReH2n4e0En 60eLg/.../JN lVLy rQ3k3WFW 3FJroBfyctOwSeq2EoRtbQC6m3lG53r1QPQ==&downloadAs=downloader_for_AdbeRdr11010_en_US.exe  (5cdc3c0c94bacd061fa5c430c0a125e1)

2 / 68      (PUP)
http://cdn.broadbundlescity.com/c?x=6nDqdW7Viha3kt3yevRTgO37Qrgr7T3r61C/RxRN2cM=&c=e7tE4JQLGdBGNQAEBS5AwgAj5WJooEXTC0vJPgxZCPB9SsHynGB ftQ4vYiNGCK 6jNNygfbn7t 54ZfuOHkkvLnq2JyKhcUyhHNJ/.../s5Yw4Aq535g=&downloadAs=downloader_for_install_reader11_en_mssd_aih.exe  (fcf8e85f223088b910d355fdb8b46321)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=WM6dLu MmF0CfPWs2ACfqpErTLWQnV810jk1XP fhGU=&c=06pbyRHO35MM5H/.../s9SJouWEIfgcz6zRxy0paGzv4j9xxFl&downloadAs=downloader_for_DTLiteInstaller.exe  (8152c643c3e735958ecd878869dc8da1)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=Bh7P50STlO4a4tQKey22Jr9VSjLIF LxK921yMzoRSM=&c=NFBQowe2Q0yBIF5MHUQ7/.../dj kBbGUGsVPDDoWJ80bFMDn7xWEo2ZLOdi9u0di7lmXYWyqxu&downloadAs=downloader_for_uTorrent.exe  (35dd16a73cfeeab61e66455b16b4d63b)

2 / 68      (PUP)
http://cdn.broadbundlescity.com/.../6cGUa507ATPM8yVEhx22Qmp27NcIQ1f sbP MwZeJj7gFXoK6wuNxQgw==&downloadAs=downloader_for_MiniLyrics.exe  (ec12c241652d187286ca0bec2eb81a25)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=39b8ucO/PDFMfuiLURj/45olsgXOfnoaeMs7/hxaiv4=&c=6e9J5cV27vr3Wxwd xo7y7u7TyYTx254gC8ZhyGV8YD2 wrgOXML2Zj0Hzq7PBzeix0/.../PzhE&downloadAs=downloader_for_DTLite501-0406.exe  (ce342e7fabd7bd6cc7cb2838cab3e605)

2 / 68      (PUP)
http://cdn.broadbundlescity.com/.../PmSMq4UTt2QxQFpFgLmDM=&c=Eu8GTHYBfyS85xLA6RWyqwVDMt Dq7Rpqf1G2m4PZ8XcSInB1jQ3Vp4O 1XBi90Z2RFyfZuDuOHNLo2lsPECROFKe4hXVvq4oxKdWTgDuqoxwtBloereBtf1K0eKeXJUuNzzc6EZY4gyht84Y18bvA==&downloadAs=downloader_for_install_reader11_en_mssd_aih.exe  (fcf8e85f223088b910d355fdb8b46321)

2 / 68      (PUP)
http://cdn.broadbundlescity.com/c?x=gW K7MCld22QnlZyytbz9R9odSl4dh9DOFvqm7gHbk=&c=pbvCKBXFNCqXvjbcL0uYmVakoDz Hyk6en6W0qnSDB9WYl1vjCk3a5qyxWm6CvzReXvOzTJsJLuJixlAhGBpufw83KgtwajoFYGPhdU3pHjMPP9AtCbEmh5V40Bp3132rdVG3oierZZtBg4URXW3Ow==&downloadAs=downloader_for_AdbeRdr11006_en_US.exe  (c2746c96c1267b3ccefd4b89e448963c)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=AK pRs6cjfYCyGlzKOy6Gi4owPE2CAd2LlhwRhxriCA=&c=vDqxYO93J/Qb0HcJaOEeFaYY gdxyc4vaHnFexXYmDdsQtSuD1AYHR1Yo/OfQH2J AJxz0N2ImGZLOVtsNFi60G7pueSs8tC/.../kBzVt2Xo&downloadAs=downloader_for_uTorrent.exe  (35dd16a73cfeeab61e66455b16b4d63b)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x= xl7TnnVZN/g 0dVNx5nRkVg73d6EI0L4zUBYp2KEu0=&c=D9ruwUITzrP4nU81vjk8z6Gsy6Sxlo/.../VU6LsI2IijBOhS5TyH9xioTm PQDSPqzvjYQ1Ts40917R4OMBsQ5spVWfE ALVBljnVOzgUhdUeINZ&downloadAs=downloader_for_zip-it-free.exe  (b0ca82f903c37ea73fba61461c372d37)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=aCMuaAdUi gaxl8645/rjTKBsLXcO 9dQZMfJSvzM7o=&c=c5/BhRrkmyF5IX/miz/.../5Kc3FBk5vifgnmPB4N trHA4SVkVJYZFqDp7T0xwXhcMDdqBIfxR2rHmAw==&downloadAs=downloader_for_36.0.1985.125_chrome_installer.exe  (icreinstall_c.exe)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=YiaWv07WriZqj7tHrBN18mubU1taZe92V5E/.../0LR9mcn8URVnzDeKEVKixmjKd 5humjSAhIBxm&downloadAs=downloader_for_Evernote_5.9.6.9494.exe  (b01d78517231717b089083891c185d45)

1 / 68      (Adware)
http://cdn.broadbundlescity.com/c?x=1EWB4MAuYWXMmAXO2ThlSxB7au3Zt119GXSoNI5ZFXw=&c=CnFUx0pfIQqp 6blAqBTFxKsV9MuBYJol8dFWM1BfU gtYKkkHg0eTuJ7XhB2EM1AgXL8f/DnAZoWoNW1yKA0cryXA/.../3DqZ6KXHu0aQUTCc3SXHZwoQwC&downloadAs=downloader_for_webcamcompanion4_retail_tbyb_all.exe  (f56a6eea00713244da538afd18621dae)

The following 3 files have been seen to comunicate with cdn.broadbundlescity.com in live environments.

TCP » 185.53.177.7:80
fb-leadjacker.crx

TCP » 185.53.177.7:80
eco_launch.crx

TCP » 185.53.177.7:80
fb-leadjacker.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.