home

www.toursstockclean.com

Communigal Communication Ltd

Domain Information

The domain www.toursstockclean.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Thursday, January 21, 2016

Expires date:
Saturday, January 21, 2017

Updated date:
Thursday, January 21, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
toursstockclean.com

Whois:
1 toursstockclean.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M), PUP.installCore.Program.Installer.Meta (M)
100.00%

The domain www.toursstockclean.com has been seen to resolve to the following 14 IP addresses.

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
July 18, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 18, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
July 18, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 18, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 18, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 11, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 11, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 11, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 11, 2016

File downloads found at URLs served by www.toursstockclean.com.

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=BQ1ELFAW/zy/XLFXfdTtW8eQWiBnE4sdhz3MD/rMod8=&c=Vq4WqWiReTvLzNql3LaOP6ZWpnFKyH6OpSxokVGCFLpokUM9DmMV4tSynPuznVl8Qkv/xHlhalODFfBrzRYtuqC/B3nH2dzFBdbYOvhzEwTT6lhbkIIGZGfY2DfvsEfo&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=G1mA dvH8CzF2a/NMkn4f Ceu/eDzyMlprjfZ2XLtJo=&c=xy559mCdh6uk9kAxCHO9085mzL0MvtjjU 1nDiEGof91AVloifErTPeEu8TUZEVtAypMkHBwjiobxn3kue7cyAF2BWuTyLshR9FSmhxP43rVw3gJcKYmJrUlVRm5bWKkODBEJz0sij5Qt7EtEsnA5A==&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (icreinstall_updatechecker.exe)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=l/pd0kBLvUQgYgOHYVKvSgfClj6zuMUYqDZ T1mOzWk=&c=Wrhyy8E7diMYiNonHznH7 4LvpIpZgk8vW9TnF5kCrW02O3wA0SozRKGI8Z1ECJPvvSt3z4jYkybDTesdaCyIMEkt1mJ Njsinx2fZoFCgPuV43KO 2YLf 84EIAe/Py&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (bb5ff72713698877c4361e1018112fce)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=Zj86L7fQjZmLSX0VER3x 2w0wB/pObTHnOu8wKW8gkU=&c=EI6BSNccxaR2cFN1bB9vne6a/xUU6WGxCt1kgGXKktJego3kKxxOioxSedD8vzW1Jz9EYi3ktqQ3Tro40MSldC/E8/gqfdxkayivZKvz6WfKJqrLG/FhI/lQ97ANEIA8&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (4077d56236ea1fa1581560184e6d79de)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=CTXSKsV5Oe8FgtUiINRma7906w4Hoh IKufYaXKNbHU=&c=TrajTb/T a8IQ0ChuWDcgyfeDfissGw5AvG8BWY1tl/aQPeahsUQCfLWafBKCMaU1LHOMt4EusW0unqAl1MqzPs0n46jSznwN9uf4pLO0Rl87T0RpJyTzic2nx4xAgqK&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=Y7Jg6sPKTpS59zUf2ukTkJ4QVbwqpPbWbiRBCYl pLk=&c=VWmzj243JIvBfOMWmvujb6nCbyY8PoQC1Fcp6kQcs 04MKsvq2dRQf/skpNv7BWVju6gh0unsSp7ccXHaLGTttIyrUyO5HU2kWlbY1I/wcAr8o4GoZXLbNAoHFTrEEDL&fallback_url=http://res.mshist.com/.../Fifa15UltimateTeam.exe  (4dd36e34e29b0f7fa73897d25e63cbb9)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=XmmXAwbiaOVMb6tu3NBwkZ143sRbWFZgg7gzCvgXV0Q=&c=PryLdKtP45d1P4NGqB4LWFA8yeaLwCh2 CB937WkYgwLgIAAWi2KBtcg93J5yqwNEY0NBklUV6XBdhmtfuOrxlS z5Jmv7DfcRNsaOYr55kaKxzVBcS7qwYB jteeCaD&fallback_url=http://res.hufftos.com/.../install_virtualdj_home_v7.0.5.exe  (3d17b4cd0bf1134921685cf836d03cc8)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=oySeJUU7byWbVS4gafGqszK0wa/9T/v/45QmCfOQ1Bg=&c=tV/duso/M5BMZKx40OsL1VWwaUgQiUjwdHFrpkxewTmzJ6BbHBDGF9ft/C0j5sX6Kf54HMMcm1REP4nSz7f7H6tQsDHbqzcmii0dBquI6uKUNHvMGyQjre4v9JOMtvF6&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (91ce1df84e32c0495daacfa724d8be4a)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=2CPTcsNvOGnVlHNwHvJLwud4olasoBh4nyYKBhtsdY4=&c=dn/43T1TsPWlaBFYXQVN/T3odton9Ryn3jbuj7pjwK1YlYoB1s bcBrUo/2AHwRKzINbrlljrXMoNX8HdyQ3DXRBiJbB52tlinQtzB7q8t1XUkK4iJL9ocWo7hGiLbay&fallback_url=http://res.mshist.com/.../BoomBeach.exe  (90c2c0269d7f286f1824fb689d01c349)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=/TclKYCg/0Y6o8zH0Fnowk8 c0bhzFKFy1Vp36aKaHo=&c=FEKnxyYDWnoM5mfRxt/qney2vBbwF0Fhq3AXW1rNOGeyU5QaqmKruWnN 4UwkGZZ/uzPZ0kuWihpLIUT47d5SKCTXbiEkL4gSLB6QubvD53NbYwqy9nsJ7v8fdFjIJMz&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe  (347bbd60b04eab7b9e81255a0b31fdf9)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=xcsmqECJ6kn nqAco gy3Wq RBnYdLoaHvUgzO5C2H0=&c=dueAm8XWvpjCzJgRVgfSst /3Udi1oM6LtiAyuS5dng9BnkjQvPwkvqrBE43aMeYB2dsaB3oSYSFBgjFodrBUmgI1rZrdRwk8PgVVk4pIUHZdA3U59uU XQhq4YVXzTl&fallback_url=http://res.emiln.com/cache/upch/.../UpdateChecker.exe  (e347224e487cc0214cef5e7ddb11846e)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=l2ylkMEDnY8QWwE8zrzXFpaKJc9rR4VxjsfYpQximPs=&c=T6 S/KXDwHWQtdWtSIrBvWI0omBc LRy04txBYWGcu66iQUoXBfU aAhuaQV9n0btkkqC8Nzwxr4RdYXTwpqCKa4X/Vc /QlxdsjohUf2CFUEYQJs0xo4xeglJUq74CV&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (3b2a2c562d8507b4194116f49cfb6f96)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=ZQ3 2gIsDsDnRtRIM0akfktAXi8ll3pZlgCZdFw9g4A=&c=LT5LlDDrrsv5AIXK4u76gDSClXJEJ T8yc2SgCGyXSAhhQ0k4W1RIUG20vE8y3EhvvxVNxCxKUj5w9mfRRdOyoQtsxBO9yMiE/o4U3oeSP4Hyr8AxQLvMKLbFuM2InQp&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=bGfxWcseVbeaqtuSLOAr7jkxa4es5IQfC34lw2s/7LE=&c=VY76dW/EzeHC79 VAhS2T2oGURFf Lu7ScZr5d/jPbMp5EkAZJj4RRM7Spms7JvNMtro9L2rnUDJJl8 kq5LoUQpVDJBSory/LZE4eGWQsct9J3zTV0VnXlQMQxtuo j&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (d7916977125bb1d27cf8965fc3591990)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=UcyQi6sKP8LI2MyqEz9cKwKC9gA4wjm/aKb24SLanzw=&c=7ebgX5azN27U9xFZqKQt isgUUW8B9DvfIg 1ql3z ZKAJRmHebN4/CrmkPNIyBeiQtavjbM/KDEguTlIzIHwxgp6W7w4g9lfljkzmdq oADj9En17uc/fzQdkNHGRiVuyzk51yW8hI9m8N9Mq3YMg==&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe Press to copy  (aeda1e639177bca9b5fa3ed62fd14be8)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=VVzSgZlQ8nA4g8o4kI/SbTple67SiFN4fbSQu8HbwFc=&c=UYP cRKZqyyLfbgoaXku97ue013B8R/uEiha/MjFIOBtxHIkBePtfrSOBr3ThA9QEuSv1R208q9DCteXhbf4NL wZoQQBssNVenFirVO6epxu XOY3PGYLuRmkglA2TL&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=NIuM710RNzAAR0KFUu0qOf02szRpHrJjXEI2dkwtkq4=&c=MTMdrFXcQEiMJ1T7tUQJXLcdYxobHJaHuXlNg22I0Fc3mzR7dm8MUWhqv7D2KnUNk/Lvd5Ky3lpncrOkZLAaaTUOY4ainLmGB2jsOQGlpkeXElsaKiP4EwGM2qEJiBEn&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (91ce1df84e32c0495daacfa724d8be4a)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=U wU3OCjHxNKN7GhEd8aiwX peUcXJEErrcuvqzW1XM=&c=MjYNEEuZ0 T3JHz32leuWRFuL6RlCJC2eVpcE0whJjgbFEBP8JJuUawc8/q96Au8t91XSZdc irCSnp3/iZ7X1N97SnSJgRbG5eVEo3immt1xRK ofXAe6lXNztAD4mU&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=7Wi90bHtEIcvMNxkzuU/35Q3/ekb8Tvw5fr/jT4IUdA=&c=UesoQOabEoQ3H7Zb8b8vEwN35x4n7/bkxJUkPq7xxhx0epUyETV8kCygviyHw/5Dh8ZdsDHiI0I7AvIW5StHafO2IYqWlKBq8Ip74FUsLeHo2OS85D0ASHBfOz1TF9Fw&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=4lJR TgM5RBjGbrWZv7TjyTiy9EQ2BsTDO/xcZ9JD9U=&c=qyfNme2RpY4AgL7F7qCoDfhN5Pu92X451AIslFPMafbg6rJvgfSDc96CVOEk5SfOp573KH02pcWaw4KXDdnngwGzETLGtQKBBAkW3TAbqUsywc7yMjg2LsBPBbiFs27S&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (7ae50688bd415e0e06b62fcaaceaddb6)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=7hAEbj8vHqvN7EewNk85f4uhYBUR3wGSBCv5MqoaGmA=&c=715s4nWFTXugb4e q0/Cifou8qzn3/RxDhksHkvujz0 F7v/Ds0 2pyKEU 3hhEIVl1c0FFsmWU13UNSBEbLSroU3y P1Mg/H3j8/clb/LsRwFllHVQKLVoA8YLi2osS&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (fc34bb6d1b906c40c6b12473071bf54a)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=gtfqgJPxTlQ51VjD4MxatWqXv2/q7UQKxAEOsiZxfX0=&c=G9MH6xKYFM4FhqemmcH3FmqyZatU p0LmsSQs7iA3RVhS41LyCIGcJYq7fLWHNiD/gfhiXSwCLV7kNPxEepe55PxpUO70GzeLkEfhYNEMmtQCA pG0G81 Hg0r1EytxS&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=jY/0FGrElApSen8Z8fl0rOzUjeisDlzCEvXk3zFi4Y8=&c=Dlc2z5FQ/5Q5xhwt24SHri2iJtJO88Eu5yOu3sKtCeDFOQQbYf6FtwCBd6OJTyEFpYDAZWI2KlAy/rBSlD3D04QrEYqdZp6kxTRCSYnIK5Zp /ZIrpf guQ7RV2HsLVb&fallback_url=http://res.mshist.com/.../LeagueofLegends_EUW_Installer_9_15_2014.exe  (7bd76d4498454f0005b964bf324fc688)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=/FRoYWKjdiKeAO cgy6WO7cbfHHLOQENLnyPXHm4vh0=&c=Pu0B3iu57EgfTh01gL7C6xjVJBr6KxwDnTrt/yS9yQmas4pbGi4v0n5gwlRoRvJOHUy58U3FpXflpUX93jbwwIiq dwE06/zu 1taGyguxsFKMfw/EeQ0K0WaD4NUv3s&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (8f98fdc2f8db262eb3a3fba902fdc9c4)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=ks4Tboj4E5t95cb1ndKUfDXCxn0KyFVmTyejUNBqyO0=&c=Llgo5pJ SVUBcZvpDW4iRRR4WYDPHcoKrz7K CClmv8QrHPG5Etd3tmNnlSIVRh78 eh4/ERoJSJHKXP7TUGeu Ozexon7/uCezYZMexBRYa3Ay8TE45p6FKY9lzEYIG&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=Swg3Arw5BaNel63bVSGXQSk0yLmFdVMc1uSyz0UVMQc=&c=M3xrje5LDY58NVmOlrcjR4wsvF9b0xNXUqyyeOfMlJBekeQM/biH tSnCxgwvCng3Yb6zuEGe19JX4TF5ktBvRJYMUWNFaNmL4bDAJ087YMco1iMZ9UBwi4nE14cN 9j&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=6 UKD536iTCvFPqUXTS5YZGaV0RaZoOCnFtGkJK2Qjo=&c=HblCwmN1pMPUoBs 1Gf A9bjaX UyP3p/vyNi/iTYSjSf9GTDKYDyjafdL/2OBmRmHNeS4lQx18Ejji4AI8/9VRnaBAokxcMszl0rKo rqidswneNs6O/qWlFLYhozNU&fallback_url=http://res.setauls.com/.../Firefox_Setup_21.0_fr.exe  (32cd0b6def608839f9c4f8ff1b0db4c5)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=Dcg75crw7IkrLXIv17lqozAnJFAhBJ7wOko7j4lRxLM=&c=M65FTjcMHh8fchO8IqmgvHvPfrQc5dH2h7p VzV6b6uKmzfSBGLWaKgq0Dr8Vm3Gx2r/PT3d53rvtUQHLu YxKDWhuzAjUXVZ4pxazGhAczSfOM0ZtTC29ZA8DC8yiMY&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (91ce1df84e32c0495daacfa724d8be4a)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=ZQ0R55EvRI3/2u/1lRmNBEPO6gaMlTMfYylQo18orpc=&c=aINJXR2JDazAS63U v67YYsIWPPgb8 j0HVMQq6TtGKcKc6w3XAFXG5UIE5xR0OFr5LdFR30cBES4aVWWnkCGeOh9zBJASL0R8UEoHwn/bomB4yIuYVEa6XDPTXZAaSJ&fallback_url=http://res.hufftos.com/.../ccsetup325.exe  (77e7585be63655890e2d69b8fbe350bc)

1 / 68      (PUP)
http://www.toursstockclean.com/c?x=qYRxnIGkc6Gj8hQH5PVjc2DkSacHNqWCIRa0YWMb8pM=&c=KGMA56AWIeXGu3nXuAQPbb45wT1hsGvIVDufGQRuX7ejSMKoDwbUSSA94MdwlZPeLscJF4N9go U9Evc/4wEiMkMDSejcyfWSpIl2T6HsfWDIkOcolMN i43cvWu/5aV&fallback_url=http://res.dooxer.net/.../AcrobatPro.exe  (7513a001b1d0174c2ecf1cb3270d4005)

 
Latest 30 of 32 download URLs

The following 36 files have been seen to comunicate with www.toursstockclean.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.