» www.tourworldmeta.com
Overview
Analysis
IPs Addresses (11)
Downloads (258)
Network (6)

www.tourworldmeta.com

Communigal Communication Ltd

Domain Information

The domain www.tourworldmeta.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Thursday, January 28, 2016

Expires date:

Saturday, January 28, 2017

Updated date:

Thursday, January 28, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

tourworldmeta.com

Whois:

1 tourworldmeta.com record

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.Installer.Installer (M), PUP.installCore (M), PUP.InstallCore (M), PUP.InstallCore.RES (M)

97.56%

Bkav FE

HW32.CDB

2.44%

The domain www.tourworldmeta.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 5, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 5, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 18, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 18, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 18, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

February 15, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

February 15, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

February 15, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

February 15, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

February 15, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

February 15, 2016

File downloads found at URLs served by www.tourworldmeta.com.

1 / 68

http://www.tourworldmeta.com/c?x=J3m7D9cRLd85PhzbzLzKh9m5MfPrWoQ1OOq9ZyuXo54=&c=61LLb7JV7KkVMj1iGX2XdJrHsTAqrjAy7/VlZq9uW6qb3FwJYI9zz/9/B2iwlQdtuizgp2Q6Pgyf8Tsv1caupAynWc xkM7UDMpptCBItwxLeMRh9JhC2JCdscfDM/v5R8aZC6S ezkfSQwQ9zxJOP3KBu5AoLAhxRPKB9WvF8E=&downloadAs=Auto Clicker Setup.exe&fallback_url=http://www.downloadfree5.com/landers/.../download.php (Auto-Clicker.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/.../G549YO6IjSpK7XWxSLIWXgCYMlMieYNZxSZK67JowqPZAz9sP&downloadAs=TeamViewer Setup.exe (fcf2869634fea7a7fedb82d3b302bf49)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=xYsTE/OyNMqe/5dekJkyXzEe0nBJkGEAD9tY27pOk 4=&c=rgaAp8r8GGgkS4JL7FdenaBMdK/emNNVv7uFxC 40A5SswrVqXOkA4G1Xs3fiKhdLSs88aIoecpeuYxS/XGZvNYOvx ktvrIicP3mevpLMRvJTyiIfB2b2/7nTyIcvyw&downloadAs=WinRAR Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com (3c7200863e5c1f34ad6bfaf656b7a596)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=LYN9HszYMCkPCQTNkxJlRBkQYXeeyZr1vxm6ZmvP0dI=&c=AmpNDG/zar6suFyY6r/2BvNn1EnQpqGvvFw/.../OdLm3wBd72yj&downloadAs=Google Chrome.exe (67cfda91efa1a4ef5c5a50d9318960f0)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=NHi0JkdezRQ2dyT56qWvUtX5761OXK6vOl86iQ9L6ts=&c=8Tfxxagqud/girtjMRbmL1eFHVC1ikaKEaljUqKqoavtOLtG/paB1EMseo5i/i7cmZnFS2iArPacSZpc/PBhbY 6DRC7RNyCLNz TD25VtyC7wN6q1Q/yVHP3xEZP4TP&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com (icreinstall_itunes installer.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=1k7iTrakd407HB90PO06UrUS7B0Pe51m3S97OG303x4=&c=iuY0i/vMQlRCBZSSkQS8Vr1npqNRM3K4ycbRHzkD8mz059s/ltfqtqz7F2Hl 9XwEixJNTc6XDa0xSgmbKcOpMdFfKGknQr0l53ExeE5c9Z y/c9O7lT89TGVbDxZCsi&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (1937def5bca7ef06c66737bb11365f87)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=//0gkTGUfwtwq2xXzzMgLJ39wCbJTfK3wRWT 0HfBUE=&c=EPym2HMJopI1uap7F/ogKuRcTY u9HrEjoTyemxqVRgMmCguGh/.../f4RNo9AgW7ubEEde7SiUNL07JatKYZ67f02jkhwk 0OaOjGEHjVx9lmYQ3kxJWK64z4o7TpGjtZxYyH U97fwsgmT4SZ2rcqutvoaKNySII=&downloadAs=iTunes.exe (4605ad6d2055d1a6ca6ae46cc2f7a947)

1 / 68 (Adware)

http://www.tourworldmeta.com/.../i nTIRMee7NnD4BcTZJBVrhAtRSajSNHeGCdEWJVPpCRf9wLzun&downloadAs=Google Chrome.exe (c.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=JCx7Xp22i5xLDLeREJAWd9rgR3C9cprUuzOIndBJ6l0=&c=qTr8G9IwfMHFjiKonHDsu7s8p9UydmZraEKTXWAIWCzy3aCCX0jOyFxckqLHte0WLSMRH vaazMzwJH60oNbFkh7FOFAvdyvv/WNgilTIb962OA557r0wApKOpdODNZq&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (e1006dade847dac54170cfd790c771b2)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=ikdlis8AtxnLKbxNjyPvaBd2g91TiTkcrylPIV1dtkQ=&c=MlCi8yCC9s96Ym9pONbSx bZvEFbDpAlI1LCuZkSo4r17aloK76qnBh3rmIsqCR7mTPcjxzhWCj3TN4qPyBEdoD2ATMHXq1CUDWcZiw8S5Ty10ru RoE4IpiZ0ZocZWD&downloadAs=Firefox Setup.exe (ee68f2f3bf13a1791dfe3620710279b9)

1 / 68 (PUP)

http://www.tourworldmeta.com/c?x=X2GxaxcTYSaIQeF0gbpHzQMgKv6NMbaa4ZyZVPbswz8=&c=QicCrbLI21vvU6ByyumC12mMlRDxMbyY8zdrVtRNUM0lKUUt4BrbS0qs47903sIa2AD9h9pEAr3ouDbAFMqVRKBuY /.../CvmlJeafGXR&downloadAs=Google Chrome.exe (348d106cdc4f3340f111b1265964d171)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=E9GGxHE3qE0oAWzfneG7LxXnGGKE5sIZOOe3u9GN6b0=&c=Lbhex4gBSljTMgBWblKtKWclBstfQuuQgHZpx3aNb7/lqg/0Bupby6ed /PablrXicCMJJYm9uKu6F144A2TpUmJIJt4Gn129IGVIPESH e1xabFognatmSWi1q07rdG&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php (dd3edc5e146b42c682ba197ade434389)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=xGee37UwAOOr0VJ1tDwLIfbVbDBSI/Yrsm5/xJC9Agw=&c=FlN1vcRVNgRBuNMCoYP1L/2/.../Gl8JX5jr NwXDLmQVdSq2etpqp6sCadr PbA02KkdlCeEew6TXy&downloadAs=Firefox Setup.exe (9dc5ae2bda78e38a740d057748b8ff31)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=kTc6YB zUEe0qWPhzwgsq2woC2faMty/ShBYMD5R4 4=&c=/ozQ1UYZezhmb79YKSuuWa9HSL2h1XUZwLQhQugh4oFnLN8WzlqNjhkJlrBysXvXRvbX05czze/MnzwSYqlP1nmrG40lfJPQzsznadpPCbUayjkjMEn05rVGx0ygLVPf&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (6a6561611c98865d6cdc2c422ea34e5e)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=nBdyDH9I0ub9J1e/LOQZyu3Ojx9eWaS2jcYMMa767JI=&c=9wQMyzHiZgySg mIK1ohlM29v4ly2ZWOZxjZRBrnaRSilMb9IxlWyMgL87seB0A7APJkJMtZHBTnnZQltgch6YH9ek3DWdmLW4rjwzjMnlnZEByKhCcPrVMfsfhYqy99&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (8e81a9c3aaaaaa7862a399a98a223c17)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=W14Q1NhiNLCSm0NMVH20VFj6otj6sZGRnxeJIPC4WNM=&c=GUwKfO3j ajL1dbGm7LjuSzlPgHA1f4CwndBwaj0Afj15QXtsoCszcge39OIkJUphV5GjH90295syX7z3pmWUzxXdJ15fEJuUjjVWP4MlK8Lv9fMiDuz8buG1NABW4Br&downloadAs=Google Chrome.exe (c.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=H0PaGcOXSnA6G3AozJaZt89T/UlzChq8nv1u92ZxWlw=&c=pufA1j9CDkky9TVhi/5Tr6umh18vmMEHXX8M71WZxSrs0UC3O6VgNZM1ta2G/O vNn58g0GzEotH6LH5mSrz6RkbR0hb/FZ7jSdaN9Qx8I4uhTH4xVCn6Hou7cx2ZKoj&downloadAs=Safari Setup.exe&fallback_url=http://www.downloaddu.com/landers/.../download.php (b683e9424d47cee6d772a94b090131a7)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=JL9GqCePvYFFjciuN8XpjKb0WwTA1GG4zVZ BPIDxf0=&c=rxaOYXOW2r2Xuvy94vAfDBThaFID2Q/9LpaIZJwALv35Z 01k9Dw3XdjVwC18ym7BQscptObV1gRc5yL4qxJAqtnMMk7VudQbKCcdjQB/JwG4HzCaW7lvvP8VGA8pLrZ&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (6a6561611c98865d6cdc2c422ea34e5e)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=WhZ// GfVA7scmfKdyLDQvsSzay7rND 0FZVDTmosD4=&c=jiFVnMCP2DKYJAjK/wBCzJ1Yd0iTbURgHPi2UQgUUQZdXAAWJjehO7d8FKwmNRmnA/.../FXgRV2b&downloadAs=Opera Setup.exe (icreinstall_c.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=Fpl5xuMhWCLPaZSQS8/c3Hda5DbuEW9RagM/AFdn6nA=&c=vJxQ Yt7p 4u3pz FD4eEo6QLh1qo0KW/DJfCgnKeUv ctVaPWc3ErLLy1SNiFSvBAcF3EaKgXxL7KgEhz4EI1O9A9BZZlq2cu2HtiVFmPP6ss507SjoKmQI8jNo3osw&downloadAs=Audacity Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (e3be8c0c26d5e4e3fc2cdf8ee908d3f6)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=/Fdnx/0mncZp/5mB1MarAc06SELcmYPMg8ZnfrHYc 8=&c=tgcjMcGs7TJA830ridfci3nja6FoT10WH362PBb4Ho3IArqRZGXyCJSic3LZ0fIm/c7IFU3yLk2sdYLDBNQyd0jzuEwHCgNAE3Cn2hYUWn6QGWg0kNHCm0tyrwzxeh0l&downloadAs=TeamViewer Setup.exe&fallback_url=http://cdn.downtoad.com/.../teamviewer.exe (icreinstall_teamviewer setup.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=YjRY3K2EkUTEpiMk6Ih71xs bjmL8dmUBF TwcKf9sI=&c=l/QD3LBUrBR2bt1l53QcVf50b0warfEhD47LjLv7ohWRCJ7GUk3CYNlCAsGrKWsC xyiB wFK5dG7rX2HQctTSa2XF03M7pXlW5sOY2SeLX ffjR5wH7zeCoe1EsmCSY&downloadAs=Tango Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php (5c7c06e89d5d9814903937d7e2511aae)

1 / 68 (PUP)

http://www.tourworldmeta.com/c?x=V8xFnfwiiuumLhfEdAPN3EqZwjyyFo2QUiv6su4UUFY=&c=1Qhu0WUWnh/x6t2PJH5tt/.../IqNHCLCFQ yauZ056TU7ssja8KpMY6wBmFI5F3m4oe3bHZiEvVxzzaen1ZdqlrITQeLveq1OJCktjxauYnqawmpkvAWdGc8oc3z83D3xkOseSNNdT Ug=&downloadAs=TeamSpeak Setup.exe (3c0f9fc5e4540b24896854b4ac9cb092)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=DxQ31gweqkF/mUQX/gcPO1efioBpSeUWBGyZh9W8d3U=&c=w ROhErPjIZpYKS0uzqcI5rydqJQ4sN Ayvv2iTEw1q3/1ZwUWxw vfG1pxpsAhlfoMtT9LxtU adwj1GFd8o5WZcnGJ0xSSO ESw/DJ3zRtKIWFRnqSFXHd25VxMqKY&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (8e81a9c3aaaaaa7862a399a98a223c17)

1 / 68 (PUP)

http://www.tourworldmeta.com/c?x=gV7RBWjXB8pvt7gGc3cxjmexIKD/xQ7aWtOGSjfOYPo=&c=z9feKENwK6QXxcg0UNTjo9TiXNo9rafyxXELpAd7pFIC1EsP/yT0GM6tYeoOWVPbCIkFZe/GGsN2pN1IlfAtmkGoi/0tXgkukFe5B NyPvoXJW03lftxW1mIiEuTxBv/7Vo83RaWuUttc07vwTQx6bKuWxwoTxZp06slUttOP2A=&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com (setup.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=JchI4Rbu8xLq5qd6zm9waM8I6OBkykOUOB2w/.../Cw11zrawVwhFk4vj1oNHS2BtBLB6hVM4Beq2t67k4FObFT7pqn4GghPsfg3tiar4BmTwUh9wMXA&downloadAs=iTunes Setup.exe (7c05c47253f42b5a4388703e04de3e92)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=dNyR9BX6p8BOB6B/6SqpPGTfk5fqOratIJxJAMI2R8g=&c=nw3VCAlKIHrrf7OYxNsZXdrWGnlqw1CUp3XwkmhngJ/.../enNao HsotgdAfwFgDoIFw5Uz4v0 uLCn7t9rWNTTLVtcl8EnKc9TsxIRWI7GGGbzerIC28UQm5k&downloadAs=iTunes Setup.exe (icreinstall_itunes setup.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=Bcl/iSj/1d/p5tG4eAbUkBkJ17WRvY 7WvWdC9mZxJ0=&c=Kd XLTRDmCxoDQI9vjkMSIrjJOT1 e OEG nIJ aFeXM6zOX1Lw/gRSeBqiHXcPrq24gg IpRv0fventPz9fmI9BpLq8Ne8KG5OU4QGEXDebYmwSKGpSqWv1zf rdDGY&downloadAs=Audacity Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (audacity_setup.exe)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=T9qovcJKUgGJ/0fGZeai ZxW1HYBRPzSr0LvqxoBD74=&c=knoFl47Rc2SoxA/iH61YgO4 pGtSzx6acXMGuj aT44itGviozckWGKBzn6eQABfHhYJVB9KLoM/.../B5N2h2lntv2uRGz3eU1dIMxUExrOyFYQk1AbiTYj1VJ&downloadAs=Opera Setup.exe (0580b65eadf6832ed1a07c6ca7aae959)

1 / 68 (Adware)

http://www.tourworldmeta.com/c?x=DSJnYRL6bVRR1GzKpQZJgLQZv9/.../CpcucS2D58=&c=DPom4JzSmeebHXMA1oiPIW OEGlZPkchnCq0b5NwlBmAwsmy8KJ4hVMCyeb5qwxpM6U7zgHt2 z0Bl9mIOvPAcLo0XyaYwpzx05rzG4YTsXI64KbMZogzmSuc6YxcZbu&downloadAs=AdwCleaner Setup.exe (c66369b816a00ce4b391832ea63dd7ba)

Latest 30 of 258 download URLs

The following 6 files have been seen to comunicate with www.tourworldmeta.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.