home

www.bitsvaultsquick.com

Communigal Communication Ltd

Domain Information

The domain www.bitsvaultsquick.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Wednesday, January 6, 2016

Expires date:
Friday, January 6, 2017

Updated date:
Wednesday, January 6, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bitsvaultsquick.com

Whois:
1 bitsvaultsquick.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.DMNPartners.Installer (M), PUP.installCore (M), PUP.installCore.CONTACTP.Installer (M)
100.00%

The domain www.bitsvaultsquick.com has been seen to resolve to the following 14 IP addresses.

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
July 12, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 12, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 12, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
July 12, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
July 12, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 12, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 12, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 12, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 7, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 7, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 7, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 27, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 27, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 27, 2016

File downloads found at URLs served by www.bitsvaultsquick.com.

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=q4jPBMcb2e7W8X1Sj6mDHp7w6DamEbCwtVhPQOjn kI=&c=XZRGsN7u79J532o7SRDEz4LlmPB4NIeiKctT3nbDf3GuS7mETKIYLU/D/oONz6D2WyELMKnI5O8f7qHhqXBeIgyxNOx 8mL7MfAT oCzLR/nxS4P5ugjy7QofsbT1CC9PK9/SodwBEZeLVHY450DUA==&fallback_url=http://cdn.sienfiles.com  (pioneer pl-x77z user guide.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=lvYFUiBoaBtzQItEY8NB10eh7MLm/IdxUSZO1MVl/tM=&c=wcz75Zd8ErLIsOSM/JKoyR/nfcWHq9UP9Uh9gSyVfYj9UYwfQSVa9pUlE7JQxQ3gQ/4sTzjdXL2xVTkxm8nONv04YNn/unYXkbDu1sNDYpjQAScOoAMbNIPKBdl5ZygPPVjlkKToL3if8yHjXBx2kg==&fallback_url=http://cdn.sienfiles.com  (rowenta perfect steam dg8960f0 user guide.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=WF9JI3htR234DMDaDNl22mOKJSWCZiTQQ32ouqMRM5o=&c= vO3pVwKwy4mnQc1DTGyNxQ6yRrOesDhz7a2ny44HsaJ063KrtM/1oEecWUUSPlgRqUjC0ZNI7x3UMEM61VJ2/117p/oHxlmn39Xgo6RXyGOTiLPflX9nJVN0X7z848L6VF7iOs2DASMIZqukh3s4Q==&fallback_url=http://cdn.sienfiles.com  (panasonic lumix dmc-lz40 user guide.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=vbVLBHEtLRWRSDQ0Q9jMfEgY7decBziD58x0T9bR5ek=&c=gqYpFVHjNim/jdGCXWvv1JaktFnWGKRG7gzlDv3/KVLaKZJRoswiKnCnlZp1KqzakqBuALDlwOVQ9uhLTXC/3rdqTWHBSCO jXoZ9KR8ieKc33/qJx7n3iFZcKAU2Mz6rs208YZ5JyVjbqp/kWeAQ==&fallback_url=http://cdn.sienfiles.com  (app_setup.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=0fyN egPf7zWWH6y 4XancQroLpHzQLY6 0rTP8f6Ec=&c=SbLLnBek9lCbvRRQublg9wrkjuyIidOEZhktU6FwQKsCH1BrM2YA9DlkVIrLJeyC0jTJPadL4WF2Zd9KdCHsZHhRRqEwQZkPQM2ccNvQ2/vy3 o9bN47Xb2errOquTRXBMABwix8tm1 TvIJidh dA==&fallback_url=http://cdn.sienfiles.com  (mcculloch pm85 user guide.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=6/D0OT4RDjNTRiFLcrMEZXOze54W3iF9gBXFqR6/vFE=&c=J3vam/lfhYseFgneVnFuE0/MYWMPiQXxTly0hijG8m7loUEUok6O4/88cM963bV6tc5eIJkfBc1C1oHJL3h7Y6YQfjQS9L4T9xI8zO/8p3rBRRLkQZ6DNUOdHT20Upm9nzqxP987Z4h7fU XhSYXdg==&fallback_url=http://cdn.sienfiles.com  (aeg-electrolux o-santo.super.3274-6.ka user guide.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x= 43Qru52fto2hcOFN YVmu32cYMISS42hUymgoFExQk=&c=cJgKWGPRzCOqWnaI1 Z/iHr72rPtBpYfZStur3zq3tjNBSbuC2pNeMOBPMBbCwp3IIYfY2MrjvU0ZR2CxjhbHsTZZMPVyKIp MQJosNGaaPLnL7qWPcfZdJR16TZzxSv/Ww7cKx9z8phBwts/Cu19Q==&fallback_url=http://cdn.sienfiles.com  (canon maxify mb5050 user guide.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=oLTDXL4rgpfyM2p5DdpWOiMw0yv50Pb1xF3yUGA8aso=&c=D0kd7XF6VI2wmt9zRZVpdhsI2lYRVQmQa5x1 cmiEPSrvyfZtN8O kwPvh A0MYPnvceJcpy4Dniz iUBWnfLuF/sCj8/AnubnvMrFPNLfubxw8QPy3BoafJkmYrWoO3EcQ6eYx s80LzydWxGv/iQ==&fallback_url=http://cdn.sienfiles.com  (fujifilm finepix s2000hd user guide.exe)

1 / 68      (PUP)
http://www.bitsvaultsquick.com/c?x=acdDSCZ5Qhn6RzZDc5rKd8qLtYYqKU2do63Ecc0XvqY=&c=TAjDr7KUlwoaf3QmIz PpYob4RnupxuPpN3xZVIjoMaaxU7wcWJRR00X47l6RcNYFS6p3yZeipxcuA g9pd7YG3GsY3aECQeU77FX4d247GEbbWYlmouT7e6FA nkkuGxITMSBjJeRGkB8BYKRL1mQ==&fallback_url=http://cdn.sienfiles.com  (sony icd-px720 user guide.exe)

The following 23 files have been seen to comunicate with www.bitsvaultsquick.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.