home

www.contentcurrentsign.com

Communigal Communication Ltd

Domain Information

The domain www.contentcurrentsign.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Wednesday, February 10, 2016

Expires date:
Friday, February 10, 2017

Updated date:
Wednesday, February 10, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
contentcurrentsign.com

Whois:
1 contentcurrentsign.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.Bundler (M), PUP.installCore (M), PUP.InstallCore.FC.Installer (M)
100.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
5.00%

The domain www.contentcurrentsign.com has been seen to resolve to the following 15 IP addresses.

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 2, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 2, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 2, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 2, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 2, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 19, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 19, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 19, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 19, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 1, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 1, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 1, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 1, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 1, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 1, 2016

File downloads found at URLs served by www.contentcurrentsign.com.

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=kJZ4waXlJbLLJ18o8DPusupiLpIe4s5fPqRcVQeWIew=&c=CvGqjFQJ8iw7lEn4/HMhJLdtAwGi4eZ8nO6egHf udz8jWxY/gqmrXQ8wc7QSedqnRqUUaxgjCSxr6FOoWGGhhZlcsYEOvkhnUfZhOudffubGzWdRemi6dpHl0wpMPvG&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe  (51f9584f8a7d9161d952767c2295348d)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=eQTDHtvLGkojEKyXjIc23GPPJyblnokKWXjAA8UAEDs=&c= r4sQyu 3bnp7dR6jB qeD/gGSpg3vCWf1QQ1OzRRN/n5uCE3WOWw QZ wSFY/ALlqnamJkIdyDntcjNJ/yoeCdm8cLqBKAHZ3n6tQwvp57tTnZSbDz925Wo8elubwsQ&fallback_url=http://.../testdisk-7.0.win.zip&downloadAs=TestDisk-PhotoRec-12758-dp.exe  (792497ef3d9a5a5709bede70cf2198a4)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=x90EzTyytoPN98TCIFV4wxpx7ePl3UTFdpfzs8MJ974=&c=GngTPvsKlrGrgoGEuSyyoA0eBzRPT8lCXmND0sAEHcDPYY3Nohh73UOIKmDkVuZ9D7g4paw3oLfb3f8Kpywlv28GjH5WPGBsfQAgQwcRmVyfwV8Y2 kao97w/iMiPFCs&fallback_url=http://.../fooplayer_installer.exe&downloadAs=FooPlayer-48290-dp.exe  (e5c2d910de9f66c88b29f67888b57c9c)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=g2lwTGNuIAXDUBL8/loGSUC6 rjVvafsVjWgCnsHcWM=&c=EQa7mEw3MT8vWgLi9N8 xuX7dqFS4CJv0UZY7itSLOOExDdxDXDyGdpsQlNb3O//uj8/IB2ajA4JZachrZTEbMaHwO3DQ7o0YJ7MWKqf04jJyIDwNtYpdB636HmZO80P&fallback_url=http://www.blazevideo.com/.../BlazeDVDSetup.exe&downloadAs=BlazeDVD-18844-dp.exe  (430ffc56695c0f5b1bac6168b046be8f)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=kjuwXcRXzgssr2UloZzydiO AwxvR0hRC9j 2Mc4Tpw=&c=acqEme5cPnAPfFxtxm2n9NDFL44gMYNA93C/fbIJ9c amtKZYDM5CiYCVBn7QJX/p5mDZXUUhrycz 0K16qDZl87XLwTVLt5H/7snEE45P8s4BsBMJeDYrvcJUdKn3Tc&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (65579d6848d6ad5c945ebe819f558de6)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=WBr9ahUbCpasIMgI8glqAPQJ xKHUxVL7XCsNutN4NA=&c=/K2U1Hfa/EadFe9y25Fi1ex66Sg8wwaMQJpIpTr7jtahP8AUcmxX2Kdqs21k1XLNyl0dsnyCx5yKlHcEesDH1/xAxGVOjU/DDPDNj1uJ8cd8U14xUH8HeEe2bGcI UMH&fallback_url=https://www.torproject.org/dist/torbrowser/.../torbrowser-install-5.5.1_pl.exe&downloadAs=Tor-Browser-Bundle-34312-dp.exe  (4f0ed6b8ddc34399b74d52564a4b34a7)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=YNeP7xcHLlLI1k/3Kba1STEW8Go4GZfZmAUUrAMBFck=&c=/HxfJZuSkRKDgGI7X8dMM1CmK5OfJVFrlvIKo4PG1btFFa8X 1gsW9T8aDP5IBNjyL4w6naQUxEUvfgN2YsiyA9PZ9jcdVzlZoqmQrrDpbhcDTOssyfgWrLIvSU37Bt9&fallback_url=http://static3.cdn.ubi.com/orbit/.../UplayInstaller.exe&downloadAs=Uplay-52567-dp.exe  (407b334d0bf022590e8d277b26024b67)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=1Tku/BLKodtYVWJ6R2FuGUMlXHE9nt86mFE x0a66kA=&c=vJivron0uWcznHGOwNuej 2zd4rJciAJbFA2w7e7iPvoYPqfTmkjoQbO0 bfqxiRW/CBqcfUpya EEpIon6kzcpJfz MpmgX3XWg7LpOpujyj9f/PtizsxX9YPPQSslr&fallback_url=http://www.7-zip.org/.../7z1514-x64.exe&downloadAs=7Zip-12559-dp.exe  (e7b54f1b17cc37d35502eb78bc4a4237)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=E 0I75XWqrOLCP4eO2KOyne9M1UZH2F9SD4wvX9o3Zk=&c=Eucs0nbFw/miR9lT7yb8IWEN6pZFmoGIOLRwHhy19FvUFj4RIZw1 Jau0wnV4hsH0JnygKEHEDhRpN5j8kiveCNvV1LIh5TUCbW0YbEPg9jgkj/x4L JtA1NHy20AT6c&fallback_url=https://github.com/jp9000/OBS/releases/download/.../OBS_0_657b_Installer.exe&downloadAs=Open-Broadcaster-Software-58008-dp.exe  (bf2ca66d6d3c1e5eb61f7b92b0de9b52)

1 / 68      (PUP)
http://www.contentcurrentsign.com/c?x=kZ89cx4MUrq8EgFCi9zdMlkTQkY03hVjT0aI63rLE74=&c=VaO6cX3d7JnzuqQ8036oWuUxr8BsU0ERdtH//jnDasS9z/ZwCYLSDT5chnmqhSDiweqr9PZ0gOmB3xN/aLGmBDZ4gOr4Yk3WzxbdCV9yXIdeMwL6qiVjJYVCIZmDAVHj&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (c.exe)

2 / 68      (PUP)
http://www.contentcurrentsign.com/c?x=pLtCbv6sU odffu39/nZDR YF9unQO/evlecmOJ81no=&c=/5O9aGkti5Ils4TLhw//w4h/6ifFpLA/aWnk1lFgSU5QEsqKK7kH3 XwFbz0Qml4v/chfOm1s7UNHHMhaB0ZY/bRY0njMJtgz7IZ54zpXP2ry5ZUUcXeiUEOIFUBc0uA&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (bbd34dbd5d8554d547e540adf5b11469)

1 / 68      (PUP)
http://www.contentcurrentsign.com/c?x=ZbDzW/ UOihxAl5n8ZWi70g1UxUsP//lzzMD3GgQ6jM=&c=0X4Ottwo3vQOKYlMTum6GWDvnZzpPrzLNYPdY7A8OFOzcBNTQv6CHmJxzpNxEAV52QPqq6SjV1Wxpp9jyrITq7J36e4YHvyX784CeKWznc eWPrLRR43YBVxDQXyRCcc&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe  (d0613b8693ae8df9547e5242adb94ff8)

1 / 68      (PUP)
http://www.contentcurrentsign.com/c?x=tl56XkmmGtwUOP0692N8VyjNYl7mQ2G55u MVCIZOJE=&c=cRmovc87lHEJZQ0/5ii4m4DVdmCK 3x4ESYz4Tg2kcxc4mvy0FVFBvGsLpVDXSojEcLr jZeMGaq9eIHucJUM1mNq9ZKyMt/FBQKWKa6zvXllQST8kwP74YoTADkiJ9G&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (84a1008ab523954950925bfb96c3f0e2)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=GHmqo MqChLCtBrQyQ6Kz 58vkdOn8NhxEB33bt/bJ4=&c=PVNIPjAXZ/Gb8U1T09T/4Yp cL6pG3 b13tzyG/s4kSWqGDWfY K1 /FKOJOgH5jI/IrHYq2reMB8Nlk0szLQHJWdsrXuQs4tHliXzBdb/fvT8Z7O3GHbq4Ud7KWKoa&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=dn ykcvc5nMXclOJ/j0djH3JsWT8twbKey8WlqHrgvY=&c=paMmz gjE7fPdn l8B1B5mrA3zNeNVxoutPQPeZrR0FOi8zqfPDBAya6aPPycvdrKZ9OeEcVwhhqTkGZdw OQ1SiInqoitjB3BAiA xpnk7bB8YXYvTgd2f7qWEEd3aA&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=A4EArcDPqCjAr4c2Kkh0R sfQpsABaEtc7yhw76XTCE=&c=aVDjJNzKCfwLxEGP1Fos/xTCdIBt4RtuClE4kCek7qnVw3nvXg6OrLk gQCf82MjeTFK6ZIJPvXb3WCtZqxzbpcpZoTY98JwKfVo3WhkoilJMsV9Hcks5pngSbH8KA0s&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=gnyRGpdS6zvXStjERoYBY 3wXwO7GgWX1ixUKrJ5PuU=&c=b7jSLfZXnzPqyQMbOOo 3bsswewV3pm6IpSRkjj942q50DM7taW00DXFYv/w5L7P0zdaro NW/uKRvmPOP9IQzR9HfVGYHm2V0PDMvNFkxaNQHwfR1NqQmArsbq1UoB8&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (c3c1402babdbd680a5d0bb94e4dc80d6)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=ZHbDleI o/YuN4/yN9SSXeSbrjB2BE8r9VYl6qHGgCk=&c=ZSzMBY51Vwylgcirq7J1F5MBTNKBG7tULQuMbrCBgHUZoolszYykb68c Y6NxUX/D5BlvrGkBtK91u62AbCTXstcou2sExiE0p48AlN59zq8aCXPAoUjDIvGw1JlndGD&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (7b28e741a6f2a602ee4883d05a0ee1e6)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=gTZ64vVFhiZzAY744sbPmmo45N4MltXy9cuUVfaRud8=&c=u2f0K5Z7glA9o8y1uA2E/T1FdsTtU YGy7tYQY/VIxw8ux2ymC2fhWEtnnXPJ zcOxaW/UysC60 cq36O9u4si6za2yhAiHGftTg76uyoIQqyldiizdDi8aBEJdaj/OF&fallback_url=http://download.microsoft.com/download/4/e/b/.../wmp11-windowsxp-x86-PL-PL.exe&downloadAs=Windows-Media-Player-11848-dp.exe  (7bd61e825115b13ed35ce493dd5d0337)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=3yqA0EQMeoE0NpCU3C7gk6HN6HoPH L2RCNNCn2sudc=&c=oHoXbCTX nG tMOZJBNYGyAeby3xn P9CIZCUIa/V2AC0MWG9AaCXP6CtRU6bNVrEbzzC64bcFemO1kXQHpy7NLUTpedl29YCJ0 Q9P2OflXN LtqyMDKgY9xlurlEE8&fallback_url=http://www.logosmartz.com/.../TrialLogoSmartz.exe&downloadAs=LogoSmartz-12328-dp.exe  (7630277417492231e22bcf77021adf84)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=PCvbbpUrreKn8LWOOLRPBPf9CP0/OfUCHK9GtnyvtoI=&c=6w/V0f34xyr6D7AIX2UxOfNf5EJtoAsSf4/IaBxkkbwByNKompdO9LaSPdZBNGCPCLhLf4kmvDH4vVLUGF2m8lGJOgV4KSO3SvSHJomqACobTm25EI6pZuxJjY5sCcZm&fallback_url=http://storage.dobreprogramy.pl/.../PlayerSetup(dobreprogramy.pl).exe&downloadAs=DVDRanger-Player-34250-dp.exe  (4f7bc1b6f520b26371eb1ee4d41080e3)

1 / 68      (Adware)
http://www.contentcurrentsign.com/c?x=5lCuNG0LfckuwmsrmHdEKOVQH/Ie/VpBr4e6MJ4S/L4=&c=l EXLH9m0XlDO4nwVlV6tD5obfpEJG1qEWFEksIAeDZRL4X3fIuuv5tiQjrnq9ALNCqdKrGIScDYuPCDneTceJkAbKKzJjK1gU8z5lTD1xvRlsOjcCqRe5wpPxMd1RRY&fallback_url=http://.../PureSyncInst.exe&downloadAs=PureSync-34125-dp.exe  (b4b70f486963ea849e17bbd949e78806)

The following 18 files have been seen to comunicate with www.contentcurrentsign.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.