home

www.currenttourstoday.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
currenttourstoday.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.AVSoftwa.Installer (M), PUP.InstallCore.Lugemimo.Installer.Meta (M), PUP.InstallCore (M)
100.00%

The domain www.currenttourstoday.com has been seen to resolve to the following 15 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 14, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 28, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 25, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 19, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 19, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 8, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 1, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 1, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 1, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
July 1, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 1, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 1, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
July 1, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
July 1, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 1, 2016

File downloads found at URLs served by www.currenttourstoday.com.

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x= EdBFvH2JnZDNr2kYIHCkKw xr1IkFs0smfjMRXdnfI=&c=X2/D1btrQ9wb2dvxS7MGYwN2NA0puJsJJIFwww9KRnhWUCrQIcPD/G/blaCa71stm2Xnrz1RjjHv9s zUGajYcRAtc1VGwD62zcCzXhO/7cfe777rsJMF18heCQ0f9gH&downloadAs=JCreator5PRO.exe&fallback_url=http://.../get.php?file=0d640abf&m3  (0bf078f539cec9afe26672df53be4bb9)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=Ow9VfEN0SMFRYjl76RZywA5V2Ujm 7ivjluJqGMH3WU=&c=7pa5QNniDgSvydj3du7tt4EEhhpy 8RZweoxNkaBYWE6iLcAf8zACbIzmdPOICc/hDPOzWqwm9sxWGXCvhQOrIBrmDpsE9l6bfrAnjG1eh3AAB7aayEKrwCkt9qoUQ3/&downloadAs=ygopro-10333-alterna.exe&fallback_url=http://.../get.php?file=a68a50a9&m3  (222a51e337170ca51a2768f371bef6cb)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=bmZnb0DtwsAv5y/SSf9bNwp6oj/eNhQ2zLSDP0E4DU8=&c=LAPA6rGLMx1jqlMIeXLafA1iMFedxqz91kpm0gAG63LnbIb2Az2lggx4Xth0ozfJUN4qYVNMzwxg5wrSdCzLO5qTM94mipl 7G4bXBgFKWYCnRO3JS0SeI6F xDYPkGj&downloadAs=Segreto_di_famiglia_.exe&fallback_url=http://.../get.php?file=c95576c8&m3  (icreinstall_segreto_di_famiglia_.exe)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=c7Aq88gJ1HTEptpgWYGRgDah0 BUpjoIojsQFkjgmdM=&c=Vro7EAQGGPzcyXFvLNzG7zGEh4n6AkfkbVuRgtLWyC/7/FZcHp/W15NPSKv3SnLjXHpG76bskzSvyV35GiNKp/EsZ1sI f2iuuA7y3piBpJuwb7UDsOM 4pYIPnkSH52&downloadAs=Tutto_Quello_Che_Sia.exe&fallback_url=http://.../get.php?file=15816a87&m3  (icreinstall_tutto_quello_che_sia.exe)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=E9NTSZsdqnWoyxWSD8AnCAXaqSTGMCWdlZpdGxNNh7M=&c=CAeMD6/14x/VtF0fSlBONK1HmdSdaSVQaUNERwyFe69dcYaq0aLA15GhWJDQe/STrEtoj3QSUBjT jXlNf3xwBCp1OgCVAutDD03pGTO0noHOd/Jkokdi6UpjYq cSeM&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (84e9dc1681d74b756aba70b97819a6ed)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=r86nX/FDwHfNn6nTl4JHpBhwzNt29SqJpTPGKGA4zf4=&c=zJgYIPXimFNncSjzQg27DCwGm3PTZYr5yMI6pPI43ba5sEhYccGV8NcNrdHEhr0tWKdUUVL9lu29t SLYxkjzDAP2UBnU9SXgTMubhdkyCRhHlTfYjwd3lsK27K7XBt2&downloadAs=EDRWActivation.exe&fallback_url=http://.../get.php?file=564bd617&m3  (1bd022f39cc87e355deecc0ceccb7eaf)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=w6JnXM8E87cfL0Ydhpa/NoSuEC2g4Vo6mJuWGzG4HEw=&c=GQ1i75BTQYZSfPSss8OZHbNi0hqEUziBslXDDy8d159sLn9rJ3VzHM7jDChVFeCPHovyP5WIsnv/NLu4 Cyb lvD/GxhnvhUI p05PSDV1 T4He8GGgVDdFWM2Cg0d3c&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (84e9dc1681d74b756aba70b97819a6ed)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=YOEPkCR22FWrjk3M0ViWs0DZnzHDiNLMs 2EbE/FTgg=&c=wLwTkM/37m5QuIaEIkCqAaPpuh4zNKjXw InX/jj3OVz7yK4 4 0uFkIRd0bHpmxHTU572P1Uog1NOpR6gC5kxD42NdgjuqjxH/jrhwB iLqfowoQJm5FY4NkHPSjqCR&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=7oTTOyq20/8RWiT5nYdtznJVnYvkObkKhhRlzL6c1Ac=&c=Ae6vdicJa1 E9xU2yuNHSi2NA g2aMtoJ4KJkSLI7AFcxRefc/Ji3GBUIX CsoIgwClGVJ0gWsSAIgEB NDfOm2wtH8NXG1wIxQ8akDKkkibV6w6M80AHG7gZETi2lbO&downloadAs=ZLAN_-_Hack_Beta_-_Z.exe&fallback_url=http://.../get.php?file=e2b3ebeb&m3  (c.exe)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=/FNWALXeorBVOl/c0PkNOWRWrBpCIMVF241kQQSaSmk=&c=y5hedUVDW9vPWACG 0dHi7UkujmPJ6Clp5epryMxmr tz8UtgTOaTErqYTYTO6QhZjlEAsHqu3ny/qjbZBCFExTO0i7BgAkAuA8/8vQKHl09o/BP8xCCc4BQxG85ANZh&downloadAs=BAS.exe&fallback_url=https://s03.solidfilesusercontent.com/Y2ZlMDE0NTk5MWQwZjFlYzNiNjU5NjZkYTYzYTk2YjE0MmUwYWQ2MzoxYkVnd3E6N3hTOElrdTlqV3E2bGRVb3I3N2FKOVh5a1lv/.../BAS.rar  (422ce80d24f766c028d176eac68d12df)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=QdBlxtyJWeaMSQi9QyX/MjPHYUNw50kT1BRQPPifKVA=&c=1c49w1kI3nYQr5NGhfLMYQVzl/dfAQQVEi85CT/CQ5LfEkWvoTQX2vmHxIn2yZe41rHCs9R MHRivR42p6rIFpgO9yQgtk87pFRlMDDV5BkSFqrLFsmaMn7nK8tdsyWe&downloadAs=LDK_480p_FajarbukanB.exe&fallback_url=https://s03.solidfilesusercontent.com/NzlkMmExMjYwZmIxYjVjOWIxNTkyNzQwOTljZmJiNGFjZDE5YTA0ZDoxYkVqNUo6cXBnQkc2SDN5MnZZZTVKd1lfbFRhWGJXNGlZ/.../L.DK_480p_Fajarbukan.Blogspot.Com.mp4  (1d19998e7d68575499336cd7e6c20130)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=63g8ZMCZGv6gPOIVcUW5lCpCxv Fr M/YsxTWFJFwGc=&c=Cr2DFWjmJfZwC9ryZLPKcW2WaccXRQ1pOgoAsRBIG5bnYdeQNyn6Lr//QfNx0xIQgHFWPDdtTFhD6P4x4JNTbJnxi7I 4jAWT8YvyYr5gctM ubqc9U9rpsB8/NSxfmC&downloadAs=iZone_TV.exe&fallback_url=http://.../get.php?file=959bc51c&m3  (7e49fdf9a171c7997c892b9014ce643e)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=wGFdilx0TEYUMGBp430ixGaUjwWBiEseLUf9jHNm9kU=&c=c167Qir K5Y2orrkroWqn T0rxC1RBKe/mNfJ4Z0WbpcUWD/gu2aRLPgf78fx RhhRa0KmtCORMiLUffA5SAMob7LzdAgOD0QR4CYIjjXrsdF 7Rp3to12ra51uvvwIJ&downloadAs=Psiphon100HandlerUI.exe&fallback_url=http://.../get.php?file=f376ef1a&m3  (f7ef8f8799bad1cba3cca62b52c91951)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=YQiEGabX8zgibV9tgaCDmUt4lJrH7C3dsgWK6/GLnpk=&c=NklKCZSQNm0tOYGbm9WJhu9oXpo9TwxMjm/oxnn7sen 6U0qdjVLuBT9lRPHPL xSr2LH0CNb3otjrdOmFyu3r4XrHIfzX1lothG/snfOAjEzazCEnM/LgDjx48BezPi&downloadAs=FIFAComvapleioto_v14.exe&fallback_url=http://.../get.php?file=247fda9b&m3  (827d53178103e5eda4624b96ff9de45a)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=3JBgfSCCsEMi3jNRGbk8ztPX1EIWO 6f0mx12nbi9dU=&c=tNAPttMf5fle KWGCya4eciGT4Hw4JBJEqol2Uubx0TZACfGFOIOmo6l363fcS/ERmSJio7IzdX5sEWmYl1HOHp2yb/s/OqPNsyi2XcupX8gaH9KMZkex2/dktpUCxt7&downloadAs=FIFAComvapleioto_v14.exe&fallback_url=http://.../get.php?file=c5b55c29&m3  (1bacd9fb0d87915510c53343902ab7a8)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=Zr4f4l21n5WBbKKaOagKy1UeH/Dr5kW3OoQBhQmPuNQ=&c=BG48XILl//zsPZ033mQ15vbLQ0Lo0sLtHDifLH4PdYQpv1dDby3Ru jsTM bbzEoIkKHMpEFXuA4otHSjOkAQEICc6EIDEmC1EK1rM6rFM d2ttoNwU/7Jx8dLqQKlb6&downloadAs=FIFAComvapleioto_v14.exe&fallback_url=http://.../get.php?file=9ded2e0b&m3  (104a62b513717202d32e5d1d517535c8)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=osyGaq v4L/0winaqvXuI9t86mahr5tMp AcYz8SAr4=&c=yW5R4EJ s6V1WS7DASghmGJHIPT4zFA4JsR9MWq r5AhhHMJE/XOZXAYoYdkM1iuPEc3Diz7PIMtBvlgrxEXSdi4/f1m4eJlSweMF 3E9mTg059XMby84iEux0mQeStP&downloadAs=Got_Make_Up_On_My_Na.exe&fallback_url=http://.../get.php?file=21857a94&m3  (0a0400599ce3f10ff16b0268cd38b132)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=XsLtxZLQFU4B0b9/yeBLMS/zAEwKht2l90t2OJXbUBs=&c=QQUfaEL0roC5dyF0RKJoqnqyDzj0fvvxMzEpSQawvXsxus0b8lURuhx4mE/VFeYRC bs4fsU6b0a3sYaM5S6HnJndrZgKhCh YKfb8fhtnt0MgU6RPndolrpEfOq8747&downloadAs=Hibiki_Collection_by.exe&fallback_url=https://s04.solidfilesusercontent.com/MzVmMDJkOWRmZmY5OGYzYzFkYmI5MDY4Y2VlZjIwY2VlNjY5MDYxODoxYkViejQ6QWJEbkNYTVpXMWNDMWFveFBfMTh0MFlWaXJn/.../Hibiki_Collection_by_??????.rar  (e64c6dfd42e0ebf0297de9440a3d095b)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=f/f5/7lEckchr3w2ic6rH 9O7Oxl7BVCSQF9JOYZAX0=&c=FoaaPlKiKa5rqpC9yDy6ex1JQcke6ruX5WKuCrFo4VB3XQGL6VKN5yPPQXB1i2tlvV0vOpBXmT2IxDmlJQa2Z05mOEmVAkJ/h2B/rOt2JwfFkJvx7jCJnjNp2p6P/kGF&downloadAs=NO_LOVE_BACK.exe&fallback_url=http://.../get.php?file=b2b823d9&m3  (c21b1bf8b25653773f2997dcec88e84e)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=sfohuf5P0D/Wx/TpCg wPsRatlIhQ4wUsMOtIY2fybU=&c=DCDCu7y3H04RvOy51jcCKpYvRsE5yQ7hRbT96jNcONF82Xq24XXWRpdtq4Ct2miJQq2mSJEJNFFXoXnV72NK8mZHv11IbZf4vPDvQ2A0qBGSb7WSNSTlS WhwS0S5gCU&downloadAs=Black_Ops_CFG_Tool.exe&fallback_url=http://.../get.php?file=c5eca357&m3  (58e24288bfdb88f599560991665503b7)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=BsyjkaT9jyCjwpWVCKqXx7tCn1MiQLXqGryrJKtcytk=&c=XiGo1hW/MF4eaSvlbvqR1NCClsxGYbLQs3ql7Np3KyeHxxyL/ZbwPJpu9UyvcyjOqKnIZtiH g1tRjZc3qx6I7IvPl6wEv9vRFlVjaSX6JUhSMz8UVlD/0L95JXFSQYZ&downloadAs=NCHSoftwareAllNCHSof.exe&fallback_url=https://s03.solidfilesusercontent.com/OTMzZGJjODI1MzZjNTI5MTlhMjJmMTlkMDNhMzRkOTA0ZGY5NGFiNzoxYkVqYWI6ZDVVb3JRZHpIamctOW1VRlpXWVB4VjlGVTZ3/.../NCH.Software.All.NCH.Software.Products.vx.x.Generic.Patch.SND.zip  (574ab007b75d568f5b1ceae48416f99a)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=Zj7P UdgWKU69fZTsbsP1WG29R3mvstI/sEDCXfjVAo=&c=OOD93RotDQUIIWDgz7xrzT1E3zM8pNvawJjths0FzqmGCF1TfFP7q7m9o8abZUqy8v7dYdAqx8RCtOwxkEp5oUGS6vKjU0oL3KLEcs 0doB0YT9KmgVwd478BB8fV4w7&downloadAs=WindowsLoader_222_by.exe&fallback_url=https://s03.solidfilesusercontent.com/ODJlZWRjMWYxNTI5NmMyYzAyNWQ0MDY5MDQyYjQ0MDM4OTFjMzk2NjoxYkVtdDQ6NXNoMnpLXzZWMFNEbF9JWXRIUEdhRFpta1dB/.../WindowsLoader_2.2.2_by_DAZ.rar  (594bfae05c8e83bac49c55adc3f82042)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=UsKmC90XqIQ/B ioloI55/zzIqWzcUVlF9xxRd Vdww=&c=jmvsPCtWqEKm6/msLt2LkXp/sMNZp YyMoGAhvn0E87XhQ4pDeSgEyo/qcmaA VRuRuFUHtMTM2TYfmO7fjbIKV8u5YKPFTki0uc7x/Ay/BFXH043NurM3mmgPEsr1rH&downloadAs=winkey.exe&fallback_url=http://.../get.php?file=f48ca254&m3  (b805c4edb78262b2bbe582acfc94dadb)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=pADj4qCnPe 165a6ptsZMrrw3EYu4rUvElE4zKMYmLY=&c=SApS162leuBIBTbuZGyk9DirY7Cmp8YFVzdRh1ZP3OwFboJ XPwz/wjwk p 88 vlVEwp9n74L3A/l0CUXDUdqIVt8J1Q9EStRE0MLCzEAe8/WSQNY YTenH22HfUBIg&downloadAs=Zapya_v2wwwmmithelpe.exe&fallback_url=https://s03.solidfilesusercontent.com/NzA3ZGQxNWY2NDU1NWU4NTg4MjU2M2JmZjgxYjViOWNkMTE5YjFlYzoxYkVnNUo6Ykd5TGgxVTVNSU1ZTEk2TWs2ZTZpNUotenFj/.../Zapya v2.www.mmithelper.com.apk  (2beeae855571448ddebcb67771ba63fb)

1 / 68      (PUP)
http://www.currenttourstoday.com/c?x=tNFVJlc/UtC99rpb0/Ausni4PyCugXWvC80dOtCCD3Y=&c=NP32yLZdi6FoKD 83lGSTnMHBTo0dF4AftrYJpDElzZJld4uzA9 VJBMaaQqLqzJ6pgyM1DGDVOK/fyfer1OUNvPbqQ992lzZM3wzODZAzkzDtj2LN01gQ 7Dot8SKO&downloadAs=Zapya_For_PC_maungpa.exe&fallback_url=https://s02.solidfilesusercontent.com/ZTI1OTIxM2Q4MDMxOTk2NGFlZjUyNjZlOGFmMzlmMzIxNTVjODZlNDoxYkVnT1E6WHhocHJWYWFfWFg2Wm9pX194NGEwVndYVWUw/.../Zapya_For_PC_maungpauk.org.rar  (229611771c3b86d9ec12f2f4c10ae811)

The following 50 files have been seen to comunicate with www.currenttourstoday.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.