Crapware served from bulkcapitaltour[.]com

Follow the chain to this crapware currently 5/54 on VT:
https://www.virustotal.com/en/file/97d17ad5feb46723ab71e2fd1e706ca6914870cfc45c9262882d842894fe299e/analysis/

Origin: imgforu[.]com
Payload: bulkcapitaltour[.]com

http://imgforu[.]com/
http://go.ad2up[.]com/afu.php?id=535765
http://go.padsdel[.]com/afu.php?id=535765
http://go.padsdel[.]com/?r=%2Fmb%2Fhan&zoneid=535765&pbk2=f805b1704f00197f752468ad872185a06259411010092493644&adparams=bm9qcz0w&timeout=0
http://www.babblequel[.]info/f43ece3d-c5e8-4c1c-9085-e9d2c8cd62a5?siteid=535765&visitor_id=160586114701
http://www.mefree2software[.]com/v9_b/index.html?dp=wBQBF9RH5ELNCC7RGN5M7OE0&brw=ie
http://www.qualitysoftware130[.]com/v9_b/index.html?dp=wBQBF9RH5ELNCC7RGN5M7OE0&brw=ie
http://www.qualitysoftware130[.]com/js/jquery-1.11.3.min.js
http://www.qualitysoftware130[.]com/js/external_b_v2.js
http://www.qualitysoftware130[.]com/v9_b/xternal/popdl.js
http://www.qualitysoftware130[.]com/v9_b/xternal/footer.txt
http://www.qualitysoftware130[.]com/v9_b/favicon.ico
http://www.qualitysoftware130[.]com/v9_b/img/x.jpg
http://www.qualitysoftware130[.]com/v9_b/img/bt.jpg
http://www.qualitysoftware130[.]com/v9_b/img/f.jpg
http://dl.qualitysoftware130[.]com/videoplayer_ie_poc_v2/?dp=wBQBF9RH5ELNCC7RGN5M7OE0&brw=ie&c=idHypAeNSuXB9rCotcIDfOA9stab6639&chnl=v9_b_ie
http://www.bulkcapitaltour[.]com/c?x=1AwnYAFQDihe%2FSjT%2F8%2BR4i%2FIuJKVmmaxxaB%2BIwXrSWw%3D&c=FIaoImAbdu0qZM8EUu9bDCkIkyU%2F%2FfoH6k5nobQdj0iafTPnA0M8WdCKNFk18hBxs3taYfd4V7ZWGq4bD1wSojEvPJcHxYdXTt7bODRoXPP3di%2FUtoCZgrv0kXO8zlLP
http://brightidian[.]info/
http://brightidian[.]info/favicon.ico