home

cdn.goodpackagescities.com

Communigal Communication Ltd

Domain Information

The domain cdn.goodpackagescities.com registered by Communigal Communication Ltd was initially registered in April of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Hollywood, Florida within the United States which resides on the Prolexic Technologies, Inc. network.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Florida, United States (US)

Create date:
Wednesday, April 22, 2015

Expires date:
Friday, April 22, 2016

Updated date:
Wednesday, April 22, 2015

ASN:
AS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Prolexic Technologies, Inc.,US

Root domain:
goodpackagescities.com

Whois:
1 goodpackagescities.com record

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.AnchorFree.Installer.Meta (L), PUP.Installer.InstallCore.Installer, PUP.InstallCore.Installer.Installer (M), PUP.installCore.DestinyD.Installer (M)
100.00%

VIPRE Antivirus
Threat.4786018, InstallCore
16.67%

Dr.Web
Trojan.InstallCore.306
16.67%

Bkav FE
W32.HfsAdware
16.67%

Malwarebytes
PUP.Optional.InstallCore.SID.C, PUP.Optional.InstallCore.SID.A
16.67%

Comodo Security
Application.Win32.InstallCore.AKZ
16.67%

G Data
Win32.Application.InstallCore.DI
16.67%

Baidu Antivirus
Adware.Win32.InstallCore
16.67%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted (variant)
16.67%

AVG
Generic
16.67%

Avira AntiVirus
PUA/InstallCore.YH.103
8.33%

Trend Micro House Call
Suspicious_GEN.F47V0427
8.33%

McAfee
Artemis!83E2D2E591A8
8.33%

Fortinet FortiGate
Riskware/InstallCore
8.33%

herdProtect (fuzzy)
a variant of 4400ff6c0774cb7d1080dcf1d5f03aa770d1520a
8.33%

The domain cdn.goodpackagescities.com has been seen to resolve to the following 2 IP addresses.

72.52.4.120
unknown.prolexic.com
May 18, 2016

54.213.22.74
ec2-54-213-22-74.us-west-2.compute.amazonaws.com
May 21, 2015

File downloads found at URLs served by cdn.goodpackagescities.com.

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=6 51G2jrSLuk0hhzHXr JmBaF9yfyE8D085ZU21Ag6Y=&c=YWX21NKHwb7ddYR1CKmrDEG/R0Du//rFYSr1xaI8yjsJjAuB/GBgB7mT2JRp2XawYJXxRuQ5eEaccM2h7xvv1w==&downloadAs=microsoft-office-visio-professional-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (9ad055113aee9dd01efe8ea2ee79747c)

0 / 68
http://cdn.goodpackagescities.com/c?x=pZgPNzIPzUcuYrySrAGDH6Xuapdgf/XJeZ34AXx1dJ4=&c=eZqCSTmrkfZpd0nsWxXE/eQRIKLMwY/G7yGXHruq2NXIPk XD0ilOaehNMfMvC7gtX8nzsv8w 0O8GPmRl1OkA==&downloadAs=omnipage-ultimate-18.exe&fallback_url=http://pf.phpnuke.org/s/1429756432/en/3/.../37544-1793757-omnipage-ultimate.exe  (d32bc5673216ad5a5917b0f64f0693a7)

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=EbJKXOnuQH6hRUsVC4MpbiRQTX9c0VPbEv2jqS4n4MY=&c=GDlPz/9GU jP0KZgUgxOaMHHG3iuPdxsLr8N/ClhPHVBQ2 XiMeldZ08EG5ycLmtKhn0zwb93OcMIqhpQl dNg==&downloadAs=ytd-video-downloader-4.8.8.exe&fallback_url=http://pf.phpnuke.org/s/1429755952/en/9/.../961374-1804147-ytd-video-downloader.exe  (daf11b9fa65867e3228b151706759b81)

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=cvTuCK2a U19Pg3GRaV24s6m4qMYYdh7WbHaxITwm08=&c=29kfl9dMkyt9K4YjeWI8zFZAZIVF9UBkN529szs9IcapM7UE1pUV3IEDcKhYVcJ C0geMMkm/ vP/OTZ1JAAnQ==&downloadAs=facebook-chat-instant-messenger-1.1.exe&fallback_url=http://pf.phpnuke.org/s/1429753317/en/2/.../230961-1796934-facebook-chat-instant-messenger.exe  (dbc161dabd4b76490ab75f4a691c07b9)

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=CtTbPAyXfHzSkzANimMUZcMlvN We1S ldzuI7R8aU=&c=5r5QkaxcCYLfP/U6rZQy72h8yrcwnOXAfWS6NFqjGn7NWVH6qjqc3AXOIpM7JD8JiV6cVFMkMQ36wdqQMFYbaw==&downloadAs=hitman-2-silent-assassin.exe&fallback_url=http://pf.phpnuke.org/s/1429811272/es/.../2/225947-655780-hitman-2-silent-assassin.zip  (8f0b3a855f52622dfed2eaa531b1b103)

13 / 68    (Adware)
http://cdn.goodpackagescities.com/c?x=YLaNiOtwvamzFhkLPd7xai Gv8BHtkrsY0UNLfWe1aA=&c=UrooRxM4F5feSER/BzjmP9yMZqW200iFPSiR4KUHm7iprNZM7hQCBrwVZDbTmv9 4aO0QLZb2tIliI4L c9o7w==&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe  (83e2d2e591a89621bf904a3abc7a13a7)

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=gqmjci7lyj eCPKjAKd/uYuw66NIimkFfTHMwLUJDW8=&c=9yvxM/NmdGTVqJtPWO3Q2CTtP5s5WD 2t5Sry/NVwUgYz5MsxhkK9C9qwoYdL2fI1GBWINNKZICDcCIS1gH/Qg==&downloadAs=microsoft-office-publisher-2013.exe&fallback_url=http://office.microsoft.com/en-us/.../  (ab5ed840484822be222b13133901c894)

0 / 68
http://cdn.goodpackagescities.com/c?x=BKbA5H27HsF8Hi7NRrtCZZhgkbSHym7UxDQBhlyhbVw=&c=iNYnVu33bjZtkKjTH6RdiuAjSwbkowtsacQiEv9arnAQnFvPM1xMKJjB141LLfrQ4TeP0eehINuqpdLwRGpEdA==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.phpnuke.org/s/1429795817/en/8/.../83929-92631-microsoft-office-2010.exe  (professionalplus.exe)

1 / 68      (PUP)
http://cdn.goodpackagescities.com/c?x=aTSw81m Dp5XXK/tXdiW4L/ Z69jGzZIoQdqdfdHfc4=&c=SaJe0H4Mxz86S5QxIfBcjkqDYh6MsRPQe/NaInYo9uUCYqk1TPIqOXUclbhszHBelbyQ1mcF7GBlfWZjNfgYpg==&downloadAs=hotspot-shield-3.42.exe&fallback_url=http://pf.phpnuke.org/s/1429779575/en/8/.../84579-1801425-hotspot-shield.exe  (hss-3.42-install-e-550-plain.exe)

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=Yn4k9LTNFTZOhN6/E3KTDaWd d 9yEG9q/VqIAFirD8=&c=egfs8rT0HlCF0oYrvegpw7kJxbi99eN6mobEUoFsCrCNIsXEi8PISXjnSp746/w9b2A5TqbfwA78ukv3hKqU g==&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe  (8eafe2d4cf211458e816034e9c9f0f7f)

2 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=4RkMU2YobuFYiX2v9dKNvMltvZFWHxHconNogFwNBXA=&c=TGf3eJG3 Zy9w5lHx4H9pt7K7dbWvUG3yatx3ZwdgpUnfnGApPxK03bHut9y4pX2XuOKnnr6lsojO966Wo/Mjg==&downloadAs=Geometry-Dash.exe&fallback_url=http://softdownload3.com/s4m/.../geometry-dash.exe  (icreinstall_geometry-dash.exe)

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=FSgNoPUFbqdT RsA1IVQHU5uFF5phitaPxu5SWq S s=&c=HJmopXP2/HuN4qMoON21XKbtPiRiDNEicvaPrzr7au1Yf2jWew JWFUq9zWboHBO7qSjsl68iSF6MpfakFCOvA==&downloadAs=picture-motion-browser-4.2.exe&fallback_url=http://pf.phpnuke.org/s/1429802251/es/.../2/227400-1792029-picture-motion-browser.exe  (3f0918badc22303e97a7153e0deff7c0)

0 / 68
http://cdn.goodpackagescities.com/c?x=cITl/SCb Zhb3d18aUvoeUsdROU RGI5mQxR8zYQvTM=&c=8TxmbSyy8E qBL2D3qmtO76Q3N9IUOWf8AS4pWx kSP160nsli6waIFSnQF5bj7/HpT3SeAgQFxwJJ3IwcR/Dg==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.phpnuke.org/s/1429776644/en/8/.../83929-92631-microsoft-office-2010.exe  (professionalplus.exe)

1 / 68      (PUP)
http://cdn.goodpackagescities.com/c?x=LYe1yGMeMWvERzJniNWh86tiP6nt0yKiDS PFwyYmTU=&c=PCOGG/CXYWVuoCKBDZ6rysZRo/7Jmw2STvvVmtXM1JTraV85z8GYEbQf0/YkHazI0/OpHse/bjfBv/Z0T3epQg==&downloadAs=hotspot-shield-3.42.exe&fallback_url=http://pf.phpnuke.org/s/1429808411/en/8/.../84579-1801425-hotspot-shield.exe  (hss-3.42-install-e-550-plain.exe)

1 / 68      (Adware)
http://cdn.goodpackagescities.com/c?x=ABImG3WhESEy7exmFJrNsj1B0X6sVP76LUQoIvTU/Hs=&c=TynfXxYJyOxrtaJUUMmSVQTPi63mTQlsmJUP/sb u 7nTkbBfBt4nNixFyIFYOe4FRtfWG2IjP1B/jICNVEieA==&downloadAs=Game-of-War-Fire-Age.exe&fallback_url=http://softdownload3.com/s4m/.../Game-of-War-Fire-Age.exe  (2e493dba3b36b158a8125aadf1be6272)

0 / 68
http://cdn.goodpackagescities.com/c?x=WrgTRMN1f8z3VowlHrMCiBcOpiUX/gMpNnPZ1skvsI4=&c=SIFWFoiGynm0RdKL9ok5zSR/65SmNTjIp0/UHB3UOJlnPpyhsk9//icIeguL3/apE2m6avl/EgKYN8PaNFZFeg==&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe  (bluestacks-splitinstaller_native.exe)

11 / 68    (Adware)
http://cdn.goodpackagescities.com/c?x=y/hnDBq4/Lmo/rb7vd1ZdCrBm2HIGi4u9z7PGq/k0R8=&c=ZpmNx950yv2oSGyQUHwJo0KUVuD1JqPS8tp9PjPOEgrODozNgvO5qERo0Wf70qvSGgvNm36B5 StTJwgpJaWXg==&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe  (aa0ba4edbd82599dd828ae299c5db0e3)

The following 74 files have been seen to comunicate with cdn.goodpackagescities.com in live environments.

TCP » 72.52.4.120:80
kb799693963.exe

TCP » 72.52.4.120:80
whAgent.exe (webHancer Customer Companion by webHancer)

TCP » 72.52.4.120:80
monhost.exe (monhost.exe by Vested Development, Inc)

TCP » 72.52.4.120:80
online-guardian-v2.0.9.exe

TCP » 72.52.4.120:80
winalert.exe

TCP » 72.52.4.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.120:80
guacuilanmog.exe

TCP » 72.52.4.120:80
cssrs.exe

TCP » 72.52.4.120:80
Alternative Flash Player Auto-Updater.exe (Flash Player Auto-Updater by Wecode.biz)

TCP » 72.52.4.120:80
adobe online.com

TCP » 72.52.4.120:80
hbpzabffmyx.exe

TCP » 72.52.4.120:80
onlineguardian-v2.exe

TCP » 72.52.4.120:80
apptrailers.exe

TCP » 72.52.4.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.120:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 72.52.4.120:80
updates.exe

TCP » 72.52.4.120:80
mirc.exe (mIRC by mIRC Co)

TCP » 72.52.4.120:80
csrss.exe

TCP » 72.52.4.120:80
photo.exe

TCP » 72.52.4.120:80
adobe online.com

 
Latest 20 of 81 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.