home

cdn.baixakitourhost.com

Communigal Communication Ltd

Domain Information

The domain cdn.baixakitourhost.com registered by Communigal Communication Ltd was initially registered in September of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Friday, September 4, 2015

Expires date:
Sunday, September 4, 2016

Updated date:
Friday, September 4, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
baixakitourhost.com

Whois:
1 baixakitourhost.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.FC (M)
100.00%

The domain cdn.baixakitourhost.com has been seen to resolve to the following 19 IP addresses.

185.53.177.12
September 14, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 20, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
August 20, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 20, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 20, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 6, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 6, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 6, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 19, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 19, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 15, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 15, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 15, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 15, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 15, 2016

File downloads found at URLs served by cdn.baixakitourhost.com.

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=myZw7L5rbRRf562Hrwme8NP4PDMwBQOxIEdnp9xUqIQ=&c=IHiJSfYSPPHGlAVsE GsJDbcZ7HFaxxzsw4HjKmba5YgMkEVL6iM5opg1K1MkGiMWTjni4mto9J8LoRZPj54cFAnN5Xwos7zMrf0cf4q/o pgPpHPntklJNSt1CF8Dko47NtxWLIk2rYfQbfExhcQUI6tvl/ tayEODzc7a0dKI=&downloadAs=vlc-media-player-32-bits.exe&fallback_url=http://get.videolan.org/vlc/2.2.1/.../vlc-2.2.1-win32.exe  (98d51fb6284b74173aff6df2f7020f76)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=0opFb UPDAbGKJGBoDCacnIiVdSKM4v dXJCjTIAXWc=&c=9mwHBv/jbciDW1eefgFQxtm kBSdGlwIeXrJNJhsA4DcKgzLwc7u7F Jyh3jD8uIC7hqPo9Ys 6eU26lfPSE4Nt8yyxlJnsxdzIyAhI50g4D L1llA1LTp9NYR9lrMjUNU8osOT5kJzJw3oG0wSJWim1i bsEkBq20v5oiztT34=&downloadAs=baixar-musicas-gratis-32-bits.exe&fallback_url=http://.../baixar-musicas-gratis.exe  (dbc4e0ac2c648e7123b784938e033db6)

1 / 68      (PUP)
http://cdn.baixakitourhost.com/c?x=6d/s4hJrXQJK9Ot1CN S2gPlDqbvYPzPpxMZYf9lntQ=&c=UlLqlMCAbBkYxnKgimSCwI/V747iiDxfTSpD27F/t9sVweQNGu jblJe6fBA/0F/CTr0colfnOYShtjB2c KZAGb7YSIktssHLdJ6NNO/4OHCkg/H8mRam2cSxCR3yhtLXoCM6Ag99gGV2shmOcFIT4C283EMLXwagsrPs3iByM=&downloadAs=coreldraw-graphics-suite-32-bits.exe&fallback_url=http://www.corel.com/corel/.../index.jsp?pid=prod5190074  (1c7e33f088121167e03d6a4faf752620)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=6jbl7VV0GPnqRAmgkNEnzFeQ1Vp0vIQw5DQn/ IH77U=&c=KBIEybsME9FcP71gYJyr2wF01r69DuJqh/uQxMWMi8DxtdT5DpgXssobYMwpVpL6PCpuhSMeziurx1OHcfO6H4Kmj5ciOH/MJXuLG5ubA0bBlGODTGIpM/nwPBTYSw3uXb5y2lGLt6ehzDl xU5WnHhgm2ZE jzpjRTHPNf2Aww=&downloadAs=vlc-media-player-32-bits.exe&fallback_url=http://get.videolan.org/vlc/2.2.1/.../vlc-2.2.1-win32.exe  (975f4af74d7c979d399a222bca28d06a)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=B30aRRLDxLOK5uTf81UhncoR90l998L/3uhgzXmJQAM=&c=t1OivxZx LtSa0 AvXNtPVPLFVoim/M nv zQhg2sgdkMjh7tDCTb4V3c1jJ3yFsXcjKYt56m7xTnVzsI7tOSKxB13iKInZ3K5Fe43rBakpOH/mDY/5 SdwIuhuMPqIDQJ3r5f034xLquJhDUECLzadXMO7 7QXjYcjZgvIxZmc=&downloadAs=mp3-rocket-32-bits.exe&fallback_url=http://www.mp3rocket.me/.../MP3Rocket_Setup.exe  (05d189236f4a81c4a4fe8ccb1eee8aa7)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=oxqKcCw1b66l5zBTjkZJe40f1qNX5fwvykt J1lTT74=&c=bRxHswro71humPd2vX J4njrZp2CoHeIX4md2WdL0ORVXiVLj2lt0uMqrH9xTu0Cj4cPN5ZTQlJg7Nd4dz58TLdwiy4hvt0TBoLWVyEhCx6DNOxMY5A6iveni1Klmp5loJdYKkQPzPKg5P2YJOMG CcUF8VVXZ prFxXws/BROM=&downloadAs=recuva-32-bits.exe&fallback_url=https://secure.piriform.com/.../cookie?affiliate=15457  (13f1a3daad2e56a263499700e844b68f)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=y9H5sE7bZRRAOqsQSx /WINITCsZOOXqwIyZlL0ZY2g=&c=Gwce7rXmvDjOy3ozkbuOrHW90Y2Px95V0NJ4LxKwiFBzUOE8t74usVQG2j4NpdRrGJ9CnDEQWcm928VLK2Fzo3ncgseUX89 jZtbR7EtEpXKry7293cqWYJk0pdTsV97ElJYSTY9zr2mIpGlygrXkvuEkJH DSrKc1YMi4C/g=&downloadAs=minecraft-32-bits.exe&fallback_url=https://s3.amazonaws.com/Minecraft.Download/.../Minecraft.exe  (21dcbde65080d6d8c71c1d82231a7b21)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=80fzXWddbqgppdY7QdVX8l1XixqLN13NAa60TNP7mQw=&c=SPF343nYFKv4XLx0qL8bFN4BnoTiHsKwBmHRK8rJM4CXmyayG5IL6d7w1HKsk0bAVv474MxNlLj1 0m3CUfW7 suSmdKF2AZp53A572jiIh8dAWzB/vAbsPeAF5qkHYgLOK6KdHqd5 fS0SxW X4ov6vorLt0Nt355WLLU6q0Vc=&downloadAs=minecraft-32-bits.exe&fallback_url=https://s3.amazonaws.com/Minecraft.Download/.../Minecraft.exe  (184859b8cdc04766660c0692165beed2)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=MmoKrMjdTh76HIpKxmlVfMGoozXHEQUm65ZKUouSes4=&c=Uk9HBCuaB8XasSdrFSRCFt J9TCa16rm9iPw8v1pv6N/poS9rGiYyisfDBLlQXdiU2T2iWNdyRpJim8acaHgsUfHQ1y1qYiHyWDpoRmtlJBhYas7pBT3BHuV vRIbGYLcikadlYllaJK48MlvqculRw LZBK2aGU919dicUXG9Q=&downloadAs=safari-32-bits.exe&fallback_url=http://appldnld.apple.com/Safari5/.../SafariSetup.exe  (17a44e5b29f6647b1a4379977e9418f5)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=eEclMJMyBGXgrkeKfUfIJ8/LKSHYAtzcpXHqG5bcJ7g=&c=geMk6iGSpEt6nyAzb4C0jQYSraIrM04E2RvgQ08pfzfSwrE3mV58ataCxYEEi3K2WBeUY/Ts/Topn0UmFV70w7ALlVQIv3bk4x134WoUhC8UARUwieSjCrkS/bimjqdwU7RfVCXEUDKG/jsg jJWO1eQvPEkH QxYyK6fav6Kug=&downloadAs=very-pdf-to-word-converter-32-bits.exe&fallback_url=http://www.girdac.com/Products/PDF-Converters/PDF-to-Word-Converter/Download/.../PDF-to-Word-Trial-Setup.zip  (4e5d19f071f353e972785d91f3070523)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=bmf2Z7H71Ih4bv5EiY9JgVH3G66vPvQdaMJK9hrW16g=&c=dmKbF4a8v27LhWnsyxcLnq88M4wFU6XcqLOG3reEB86fG7Uc/5 R/V5S8kMppqKkO/lDSE1boDc1k4W6bi8V4neHq0O fs6GSd2yavSRr6WEwrLYMWzYX915yWVlcvB aiMaBp/VxduAanezcu/wOZfIcO48j1KAqPv3kutywhU=&downloadAs=despertador-musical-32-bits.exe&fallback_url=http://205.196.120.148/mhjahj4lij9g/.../despertador_musical.zip  (b1b4d4bb0ccbd4fce58e0a2f676c4143)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=HeSPDgmxVuufxAGlE7OMArxf5SHfo0FTUmX4yzeFxk8=&c=U/fbkxTD hrohmb79vyKI9sHr/bOHGXkI/4MlFUo7JOaqgTMzELc1BQ8nRRHHVTAH0gWPZpetbK/PRH8POFCursHzv EWEZVlqyTca96tENGg8kBy5E4/D17P72IJwYJKTuxEBdQdoD8KMMkJtX1NYSD0E09XAJ7JXF4yQvvdXs=&downloadAs=photo-pos-pro-32-bits.exe&fallback_url=http://www.photopos.com/.../photopospro_setup.exe  (fa79ee59223a21a71cc58269b1c570ff)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=cPeHQbtQiiIPqhP5Y2YlKpHZfquNe5mFe4qZb0DhpM0=&c=Ymx5GoWKClnqPTfR3HNowdtJueThHMzLWM917i9yKi/Sn qhKLyR8 JE20 ZK0Q x56s6aKV3s/rLpCM zNvuznIAt9/6EUaLoxA 4cGeJOAxstZaSQgCao3kytSIyyVBkZDL7ZfYYE8CCtBSdWWC2C0ucXip8Y 7FvfpqcAfM=&downloadAs=spore-patch-32-bits.exe&fallback_url=http://.../download_32924.shtml  (b430ffe55cd94990938d4f8b63f280c5)

1 / 68      (Adware)
http://cdn.baixakitourhost.com/c?x=qjFAua5xUX5iUjlfzp3UBW2HLd7g890g6TO UBC810A=&c=CiX/zVwsZKsryFK6G7J3hwavtfl0fVYuqlfdK/0s3vdQhOEeWboCje/klXGV2NOqbbXBrF9S80T3OdxIzeyMHZqj8u3eK1JohkqVRIh2xTGV2vtKCoeCDhR/XXpGjwolAKm TbnwesEwwy/J37ZTzsFylTQsI QA9r7dmisYsIY=&downloadAs=samsung-kies-32-bits.exe&fallback_url=http://downloadcenter.samsung.com/content/SW/201504/.../Kies3Setup.exe  (67365d39e15116ed063951a467c2e563)

The following 36 files have been seen to comunicate with cdn.baixakitourhost.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.