home

cdn.nextadtomorrowfiles.com

Communigal Communication Ltd

Domain Information

The domain cdn.nextadtomorrowfiles.com registered by Communigal Communication Ltd was initially registered in May of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, May 26, 2015

Expires date:
Thursday, May 26, 2016

Updated date:
Tuesday, May 26, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
nextadtomorrowfiles.com

Whois:
1 nextadtomorrowfiles.com record

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallX.Bundle, PUP.installCore.Installer, PUP.Win.Reputation, Threat.Win.Reputation.IMP, PUP.installCore.AVSoftware.Installer (M), PUP.TomorrowSoftware.SpiralMedia.Bundler (M), PUP.Downloadius.Downloadious.Installer (M), PUP.InstallCore.S (M), PUP.installCore.AVSoftwa.Installer (M), PUP.Softpulse.DIGITALP.Bundler (M), PUP.InstallCore.RES (M), PUP.installCore (M)
100.00%

Dr.Web
Trojan.InstallCore.642, Trojan.Vittalia.823
27.66%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
27.66%

K7 AntiVirus
Adware
27.66%

AVG
InstallCore, Generic
27.66%

Baidu Antivirus
Adware.Win32.InstallCore
27.66%

ESET NOD32
Win32/InstallCore.ZN potentially unwanted application, Win32/InstallCore.YQ potentially unwanted application
25.53%

Avira AntiVirus
PUA/InstallCore.lop
25.53%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
25.53%

McAfee
Trojan.Artemis!2FC907089279, Artemis!10444FA4A210
25.53%

Bkav FE
W32.HfsAdware
25.53%

Malwarebytes
PUP.Optional.InstallCore
25.53%

G Data
Win32.Application.InstallCore.EG
25.53%

Qihoo 360 Security
Win32/Virus.2c8
23.40%

Trend Micro House Call
TROJ_GEN.F47V0824, Suspicious_GEN.F47V0602
4.26%

The domain cdn.nextadtomorrowfiles.com has been seen to resolve to the following 23 IP addresses.

52.33.25.64
ec2-52-33-25-64.us-west-2.compute.amazonaws.com
September 4, 2016

52.39.140.133
ec2-52-39-140-133.us-west-2.compute.amazonaws.com
August 15, 2016

52.27.121.127
ec2-52-27-121-127.us-west-2.compute.amazonaws.com
August 10, 2016

52.27.160.135
ec2-52-27-160-135.us-west-2.compute.amazonaws.com
July 31, 2016

52.10.85.80
ec2-52-10-85-80.us-west-2.compute.amazonaws.com
July 30, 2016

54.68.191.252
ec2-54-68-191-252.us-west-2.compute.amazonaws.com
July 21, 2016

54.148.219.152
ec2-54-148-219-152.us-west-2.compute.amazonaws.com
June 30, 2016

52.24.198.8
ec2-52-24-198-8.us-west-2.compute.amazonaws.com
June 23, 2016

52.40.74.243
ec2-52-40-74-243.us-west-2.compute.amazonaws.com
May 27, 2016

52.34.254.156
ec2-52-34-254-156.us-west-2.compute.amazonaws.com
May 26, 2016

54.148.241.40
ec2-54-148-241-40.us-west-2.compute.amazonaws.com
May 25, 2016

52.35.246.224
ec2-52-35-246-224.us-west-2.compute.amazonaws.com
May 20, 2016

52.25.167.148
ec2-52-25-167-148.us-west-2.compute.amazonaws.com
May 16, 2016

52.35.220.181
ec2-52-35-220-181.us-west-2.compute.amazonaws.com
April 11, 2016

52.32.132.26
ec2-52-32-132-26.us-west-2.compute.amazonaws.com
April 6, 2016

54.191.197.143
ec2-54-191-197-143.us-west-2.compute.amazonaws.com
April 3, 2016

52.10.249.85
ec2-52-10-249-85.us-west-2.compute.amazonaws.com
February 26, 2016

54.191.172.222
ec2-54-191-172-222.us-west-2.compute.amazonaws.com
February 16, 2016

54.148.9.47
ec2-54-148-9-47.us-west-2.compute.amazonaws.com
February 11, 2016

52.27.150.245
ec2-52-27-150-245.us-west-2.compute.amazonaws.com
January 31, 2016

54.200.215.92
ec2-54-200-215-92.us-west-2.compute.amazonaws.com
January 4, 2016

52.27.109.25
ec2-52-27-109-25.us-west-2.compute.amazonaws.com
June 30, 2015

52.25.139.170
ec2-52-25-139-170.us-west-2.compute.amazonaws.com
June 18, 2015

File downloads found at URLs served by cdn.nextadtomorrowfiles.com.

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=SprR/VAyXweDrAvbnbhcgLc6/6 gvYLlBkYdQrMFZHc=&c=Ed5K0IRVobRg8D86SowFns0G9hYNLFtKJ7tOviAJzqJRFgj8XXBenleorahKx6ZAZ8VWUwitc/nAqOkXmyXh4A==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (207d013fb57bccc261ff4f88299f03bb)

0 / 68
http://cdn.nextadtomorrowfiles.com/c?x=16jcRshJjKhPmpxSKei4UfCZYP2br9Vd8TfRNu8wAUI=&c=Oni8typY KSDyvhVxVO5okfHJLvMYqQwzAbu6kN57K8VfZrCVjyZMZjKkPqf/OC8lqAioR1I3Wv7jVexs7jmTw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (770285b293a71529c33b4c9774d6de1e)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=oENClXGjkPcQztcqznM7vAnvQ/R8ZX1BSI1 k4DolYQ=&c=tzb1Mz1OUPHsGCyG4BwEvxkU8x6wLh1iw6YCV04hzxmnv156JX4vXAW2C3Jgxt48Yi00KuddUdjheiBgliYUHw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (2fe67b70148b6a242a9b0e4474c2e542)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=W4t VkIU0eTcgkcHgBkSf5bfsk9L9gfpKw0G/StKsTw=&c=hW5ay4zPSwwcUDpQfE7XToTOuW4UWHQZY7GfSps/pkLBbz9Sd QThhO724 EPag fBF8hfcY5I djH r YHdkw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (a6ba7d32720678c368fa458b7df3a92f)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=hEFuG su1AZf4AQj HyyHM8R2hhZDBBzTfL3JmFG/Lk=&c=EBKM3DECFCRiKg/KpQGkGhMRQSPuk2teX5rOFvyRSI/Cn4x1PQIxlWjNw8ecKp8ozO7Bvu7 1phKwwVGAoX12Q==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (5cef0fcbef55db7ee57d57280eca39d7)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=7MgJF7DZ6yyzviAyz/ZLsnWEIOpXzLJe7 1rtYB6wWk=&c=VocESQo lnGEUr7bq5poRQF5EtNU9CSl/PBhrvn0/XZZGAAvu5RzM6IlPm1q AacuM2iqRoLGUoJjIkV3OqgPg==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (94732ae00070ad211b0d9baca937f1cd)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=JtjKZJI9RuYdcTGu2M9rmluHZqyZyXNqVn5E9lC7ZpA=&c=0fBdcoA7F56l7MfaNcFVHbNfsS9PXW3VYnv9kW9yvwBArqYmQ0RNOFRWU/JwMrQ/62NNv3Ev7QEGIEMv5B1z2w==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (94acb7a8a267ead2a981bb6f8b8ac2d5)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=apCQdsXwo0L1XSubGfGuXJ3QeT1ud8lRptJ rdQQrc8=&c=Tan4BcmJsn157h2OHzL5WpzE4yVY 27AMw7xuIYTXZEqP/Vge0W/nYZnZZG9ejE eLyQLwWO rEeNT5DFo6VyQ==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (99d388b45d424f45ce6df153ff3e3f94)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=CgW wilywFMoH6575K6Tfdv1c3 Xa06LEqq2xCSVg5A=&c=SIKj3Z6YEVrko5xDM3YhT6Nu0rRX4 I1BhtW5WnqNSNsBmQ Fl7AwbI l/3NlxaVaQHZBPWXXdLjaxD1Jym5Ig==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (57b8a0c6f58ef84e3d1559ef46d3c7bc)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=YkOHtCYKB0U5VH8kqrwNReCdRTfae3kU90k0gaG4sL0=&c=9Y60eKzL3u hLz6IIUzG/amt3czPdu38R/tOMqgcUNloh7GkVyZOwcizktowYBVQRa/Ea/9ww 6bq4x/gPO cA==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (ef93c5e6abb03fe3abf6b1f087195a76)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=rU6UC7nNI0c82pQEVOV9bRK4Jhf9LsQXTsPDAZiGzJ4=&c=8aQEViQMDOT182XZLM2xrkoTWQJ1BV5Cp1d2z84kBvq7RAvAO7H17uqpKj8nO06sOAW 52kZPZgM0HpnTf0Y9w==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (7b3e7d1e270c7d9c5dcb84316a1ffddf)

0 / 68
http://cdn.nextadtomorrowfiles.com/c?x=AHywTzYJvpqt5NCWTY5BvohCajHxxRhPLVq7lJg SKU=&c=JFhH1SH/hflA78n0oJ1WoPARyZ1dDBoqnB8zBNfY CRh8k czESblwbmVQsxeszKZtsmBPHlK1Rb0ny3ngnx5g==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (ef667a56a249e7a27a42db31f1418691)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=qO3/3HNTkG7xaX2OdIpRo8lZMHiwgQ5mhoVliei4j w=&c=YadXVByR7 aLFLkmw/PKc2rwXrQCtZ5mu1RyRNuCpB4lm2xQ7vrkw4eDab9MvGy1k7xNFO8nZA5VR0Nez zcRQ==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (80c044f85e43c9c74ed59a1becd50a37)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=g5vEl9gstFO7VZf97 Y9Mf4uL/gRB1jPdqzaBu4Yxc=&c=vatSGmqh4ZYB9BtYfxVOrCPQ/Nw0teWS6chQgAOBs67wguLmsebtVFEPi3U6a660tNZApvrHXLOe0nEeLKPsCw==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (2124fd8fe273fa5c09b7ea9ecd5292d5)

1 / 68      (PUP)
http://cdn.nextadtomorrowfiles.com/c?x=kM/fhwUVMqxmrmcQ6WmlGLcNuXDSAXS0KWXgMZixids=&c=cG6vlhENe2j5A6B/DO6ZemCGfaBl1kLhw105eC63PyEwiBS2fGXuFRXixmcBuG3STQGB8R5w1i5pM5O1iv7D2w==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (892f70750d3ff0ea742551a015845160)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=0w1dykQiXonQAPujf72YUryGsPi1wJ Kn6LwaN09uP0=&c=1cd9kDc437n200EAYUOgNCo6KuV2NmdwVuZ50gVPPSd3r4OsNjE3wySsbtb3NQuhc2Nlk58OgNkt/0OEQ071zw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (8299456c077c8ce3d3674b9fe15c2768)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=KisaGUmAHxBqzfHNkx584bJvYHBIE2KUHFfyo0t8x48=&c=IzQMWD8a/cWlECEFZZWNwHY1lA0uf5YTWdi3UqCemx2DExiEcFi4TMWGdGuPIGSHvuB0xtJl7QX bBdhBoxRfw==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (d575c4d262eb6bed57e8513641bfe159)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=DCnD diexOtgBnNlwKCh8Q4CaaLq4xaOlcP1oy2ESJo=&c=snOncQc9vNP30rj4Stj0LD/40ozy0avs6sYdtLk3YKovJLuABfMHSjsdUQvIefa25dRy5WP7pwU6MsP6bz9Igw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (ffff6edd1ea1f82c5708a8576140d584)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=oopZz3vqL6XSlobYHmOZL7Lge1yZcXIb1xBesXWCwJw=&c=r6Ao Qf9HcVvEdOkO7bMB7PkTNDihFzchjGHaImbdxTHUcOxBzZLeQUjEvu Ann9m99p33UVvLrh0VQYXN 4cw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (c668a41c336ab6f4619ebdf7c5dfe139)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=sr2lqodb5MZBiMfPDbXk1VMGTIS nmOGOBwSxGHHWG8=&c=z95COFnQDrDFQNJMci/VpG7IG5MGO9hFO6/pAtMYsJ d19 OR6xLBFqYtk UpMCgf5EZcBs7G8QuLi9a0LK7UQ==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (d9519186ac03c788222f399789bfd763)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=c9i3FGz2mPfIIjA8DJDWkR4Trj03jAH8tp6ebeNeDV0=&c=Z0eGAe7fVrcbGEIqqLGSYoQdrE6BZYWOJamTpPknMUbucChkKv28e0oCCj9tMvxyjjIzBu He8uT6zFmRicCig==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (66bbdb191c22d1e10d863fdb68a59bfb)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=WSkRoeIRw4yQtag9iTwDmth02uXuV rNelQEMId2cCo=&c=mFB9w7KhFtGyVBL9KHtVf4 ml23meRaErxrPT/isQj7cvVWS9Ml7p2Pl2Ee02pi WxvaWVSBja8tMcVOFrP2Rw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (5ff4cbb461e272a6fb5245386364ce83)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=IxKYyvkCk/0MqHxj/flr97jYnViC70mAttWyZV5qmug=&c= ixTZws9PFA7MFY1uWRYKTHjIgI6teQBcm9UZ8NtWqUnicXvR4k8EURH37kxHcwANbesefI0VsMX7bab82LZrw==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (1b547d9c9cdf313f2a90643c4305741c)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=j Qt0ZyBe19F/ZI8 yI06aKtwLFTs3V/2iuBbMj/pNk=&c=FRiU0HNdOf6Z9RoJKV5TFdmNuaAcCCXzI/549qgPmEu/KLmxPGnE2EQWRiQRQhTKUs9NKtYUqgPAMnkKkuXHJA==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (e9662a867a8034f7106b8f1cff5c625d)

6 / 68      (PUP)
http://cdn.nextadtomorrowfiles.com/c?x=U8AnYIPp/i1syIJ5Co88xS C2Ya5FODx/myEvkvhP9c=&c=XlXPWneAPOh3LFYzAncu10gvR2QJZro6lEp32j9PaDUbzYvmmPMhx1Xmqn0Y03Lm6tgFbm h50pJ1STNAWlR3w==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (38d7ad5fb6fd8b5271f68f721cc703bd)

1 / 68      (PUP)
http://cdn.nextadtomorrowfiles.com/c?x=sJesY5MYs1tS4GzlySkpffSPqiNMA/QLRVwroZqsgDA=&c=UB 5IycWIQV3cY7uib3nWl8qSIe9BZUgoBE0hKxiqTaJRqYPvaknPcBe/UCuoahUJtF6phj303VR4vDs6ZZO3A==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (58c77997f202c48a07e43b80bf50a910)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x= RNJ1JHVfootIu/Cf1HopObkTmd6RX/8RLJGO99/7m0=&c=dHFZwkrvCTukFbAsK7/HDh9IE1HASP3KHDXJ5B6pxPTBye9FxB2rQejJ7ZCjUMpyk/qkvSmdNWtUGDzlGIam9g==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (5f1b28760853f4df2cd74bb659d2151b)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=abBAVfS9IHY2vtloXU9As8 xBRXUdu7guDPCD36y/ U=&c=Xcjz30fwKhV/CG0XCGleYPb1s5RT2ZsrT87GQhxoLXBlaaohOaDzy4QkDW0rk2pgrE bgHPiPnpwAwfO0WZMaA==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (d7e331486599a1b175342cd746174ca3)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=BmwPbG/P002IkUWBhIiiLSt6QMF8AbwhrFuZsD4uS6I=&c=Lau MCob2rOLjl7OszJmRSCXkqAX6G9IabgIVbpI4PRDlvBrQ7zvnEBRnYo6fc75n06Myy/hDlI7dHoh/LJj5A==&downloadAs=setup.exe&fallback_url=http://dtncm7b86mywn.cloudfront.net/.../fdminst.exe  (9f6a881b5c75977c5b84c99107060325)

1 / 68      (Adware)
http://cdn.nextadtomorrowfiles.com/c?x=URT yrMm88e7wmYQI6REw7TcYdn4ZHcg3RJKh7vlU8o=&c=Z0imvn4o2JiRHjRf0aAwXGKx3oyNV BI25dDRuJ8gT9u6IqjMf7Vtnm XRIGRip6EgLIWaVmgUXs5s6BeHAH4A==&downloadAs=setup.exe&fallback_url=http://.../fdminst.exe  (4ffa5010e9decf328d669ba335c94c12)

 
Latest 30 of 50 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.