» ad.adnetwork.net
Overview
Analysis
IPs Addresses (4)
Downloads (8)
Network (168)
Website Detail
Related Domains (13)

ad.adnetwork.net

IMS, INC.

Domain Information

The domain ad.adnetwork.net registered by IMS, INC. was initially registered in February of 2002 through NEW DREAM NETWORK, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Omaha, Nebraska within the United States which resides on the Yahoo! Inc. network.

Registrant:

IMS, INC.

Registrar:

GODADDY.COM, LLC

Server location:

Nebraska, United States (US)

Create date:

Saturday, February 2, 2002

Expires date:

Friday, February 2, 2018

Updated date:

Tuesday, April 5, 2016

ASN:

AS36646 YAHOO-NE1 - Yahoo,US

Root domain:

adnetwork.net

Whois:

3 adnetwork.net records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.TuguuSLU.F, PUP.Awimba.W, PUP.Tuguu.Bundler (M), PUP.Tuguu.Awimba.Bundler (M), PUP.Tuguu.PaymentsInteractive.Bundler (M), PUP.Jottix.JottixinternationalmediaGM2007.Installer (M), PUP.Air Software.AirSoftw.Bundler (M), PUP.Jottix (M)

100.00%

McAfee

Adware-DomaIQ!6F2E275B3259, Artemis!19C2A66A893E, Artemis!63A35618D52B, Artemis!CB6DC09FCB8F

50.00%

K7 AntiVirus

Unwanted-Program , Trojan , Riskware

50.00%

avast!

Win32:DomaIQ-BB [PUP], Win32:DomaIQ-AI [PUP], NSIS:DomaIQ-C [PUP], Win32:DomaIQ-I [PUP]

50.00%

Comodo Security

Application.Win32.DomaIQ.D, UnclassifiedMalware, Application.Win32.DomaIQ.~l

50.00%

Dr.Web

Trojan.PayInt.14, Adware.W3i.29

50.00%

VIPRE Antivirus

DomaIQ

50.00%

Avira AntiVirus

APPL/DomaIQ.G.2, APPL/DomaIQ.Gen, PUA/DomaIQ.Gen7

50.00%

Sophos

DomainIQ pay-per install, DomaIQ pay-per install (PUA)

50.00%

ESET NOD32

Win32/DomaIQ.AU (variant), Win32/DomaIQ.L potentially unwanted

50.00%

IKARUS anti.virus

AdWare.DomaIQ, Win32.SuspectCrc, PUA.DomaIQ, Trojan.Win32.Ceatrg

50.00%

Malwarebytes

PUP.Optional.BundleInstaller.A, Adware.DomaIQ, PUP.FakeFlash.DomaIQ

50.00%

F-Prot

W32/DomaIQ.B.gen, W32/DomaIQ.A

37.50%

NANO AntiVirus

Trojan.Win32.PayInt.csffwn, Trojan.Win32.W3i.cjeffs, Trojan.Win32.Generic.cthglr

37.50%

G Data

Dropped:Adware.Generic.656740, NSIS.Application.DomaIQ, Win32.Application.DomalQ

37.50%

The domain ad.adnetwork.net has been seen to resolve to the following 4 IP addresses.

98.138.49.84

mpr2.ngd.vip.ne1.yahoo.com

July 16, 2016

98.138.49.44

mpr1.ngd.vip.ne1.yahoo.com

May 20, 2016

98.139.225.42

mpr1.ngd.vip.bf1.yahoo.com

April 20, 2014

98.139.225.43

mpr2.ngd.vip.bf1.yahoo.com

April 20, 2014

File downloads found at URLs served by ad.adnetwork.net.

1 / 68 (PUP)

http://ad.adnetwork.net/clk?3,eJydj11rgzAYhf-QK2a6mBJ68YZoZtFsllTn7mKMsZv2C0G2Xz9G2.V-z9XD4cDhoICaSBNEdNM2URct7SNFQdciYnFntOdTSpHvY.wUBTj0cBsbgG0qHctmbhj88nw6lg5uxAD1VQkwBwKWbtLFJSnfEn4x1igRwv.hldjcdlKAGcBxAq.i4cVXhP3VxGaUVRxIsf7IqrKvx3TKVTLkO7SrVfyVqeJb8qGX.DPMx2R4v.9YeZ7em.5w7s7WLvZ2-gFYrFWV, (xvidly_setup.exe)

1 / 68 (Adware)

http://ad.adnetwork.net/clk?3,eJydjctugzAQRb.GOxQZ2wQj1AWUR9Li0CqgKtlEFLs8CoSCI9p8fYxolX2vRjN3zox0dWzzLCP5GhMuTMS5Ydk65gJRw7CoqUHbtjGhkGJDN00tiXzmv-27uHhMRTW6zqyn.Gs.OYuKuW0X.0LnvgnKDUleFzSl-vPiPMiR7.xfHu.dw69XeSq.8KhTBiIgNXTvb2XNWjYdw2MdJU3LrlvJkqBhlV7F4QFFya7ehb7B2pTESVCye8CDppVS9gA7AAWqMo5WGe-EnM7D50pNxUYJsDqc5E8vAPaqjyFrBUBrhcbqOiMM4TcyoGKjyGV17mZGCbbIzPrL--kyNIoBRIDp.u2mdwMiEXXA, (setup.exe)

16 / 68 (Adware)

http://ad.adnetwork.net/clk?3,eJydjc1ugzAQhJ-GG0I2LsSV1cNSYorET6pYasmN1AYMJKSqK0ievqAk7b2fVqNd7cwuJmzveyWhe1X5imJXlQwTtVohKStCbMQYw8il1H-krv2-6R3IR52NYZGHdQALKX4RI1ypYQ3weu03dNGAPzvyvu8Cb3tzbsOogP8TJGK652OA-X4dUhgNyuTlIfi1RespbWWXiY9z8hbjXZSaVPA-1bjJWvASwdviwrudAFS08Zj.PXiy7caYk0XAcvlcUn3pRhvnqMw8Dd-LylL358Ng9HB0Ts3s5ZXulUXCqa4P7ucPEYllvg==, (flashplayer_v.107001446c.exe)

1 / 68 (PUP)

http://ad.adnetwork.net/clk?3,eJydjdkOgjAQRX-IkEILaBofhhQQg3UJgvBGoQWMKyEh-vUuGD.A8zBzczOTY2CKCbEUQkgIURZTx6YGQVJJ4SiiNEQpNS1iW9i0sK3ZlVcC7EJeu9HAShfezG.XpIaRz87GvJ68p-9VdV9sxirZ-2xMrogDAv.D0mD79UAIMLzU7OXDeucgcH9nQXZfxYs2P.BjFHsmP236Zewfl3ejzVK.jVIPcxaiPE1O.FE12fD7nGlacS6bS6c6KfWz7J8H.1VT, (xvidly_setup.exe)

1 / 68 (Adware)

http://ad.adnetwork.net/clk?3,eJydjVtvgjAUxz9N35ihHK4heyihLi6WbFmjwRdTC2JVhGAdyKdfnW573z8n5.I7NwxxIIWNQYZb3wfhgh1jKGQBXoRFZNlxHHt-4IEH2Lb4nDIqxTSrku6q-oTcRJ.Sj57cVRFKSH7P38KbT6leyPdHf.NZDfcseYUXSv6vNGPD4w-ZEWLuV2lI2ibEI7eTv7Gkzutsly2pO-dHtdrPNOPTI1NYZXs2zrl0V7w4ML6o8yXrs-p389mydlq3CAhypsZE4UxEcSp133SHiYmGnTUC01jra1siSNW2E3WJHN-gsxpvKHDCIbINOpdSq-ZkEHgB4G.WXjbrS3c0DDkuCpKfOki.APtldns=, (setup.exe)

28 / 68 (Adware)

http://ad.adnetwork.net/clk?3,eJydjV1rgzAUhn9N70TyaSOyiyRVKG1CyxSxd5kVbax0m25h.vpltWz3ezlwnsN74IE4Icw0EJzjuoE1MXCdQNw0mCFTv6wDkCQJpDgmLKIxC6Lwa5SHXXFspRxtKvg9ghfHhXjLU863Cx.Yvcw68qkffS.o80IS5mXL.x9haVc.2PucV28Yd-ZNkpmI37eNmquyotoWYF8qpG0.qTy7qgu8KHTq93nqtOWgGrLhZLez.hM8BUE3Ta8rzFco8-Oci0JzG2.h-4c.EYDILwh-OOym4foN25Zc4A==, (flashplayer_v.160073670c.exe)

23 / 68 (Adware)

http://ad.adnetwork.net/clk?3,eJydjd1ugkAQhZ.GO0KcXX6WbHoxwEps-SkpYPROkYC4FBI2tr5912B8gH6ZmZzMnMkBygFOx7PnMMu2CIH6yIE2aw9su3ZdY805B88h1LUcmxpAyhtG8jttg-CjL318EEnyleNCiwJxu-hP9pi-mH.btF1W7wLNRYWyrxj-n5DF.v6pdd6Pjg4ZCjlWQWH5L1tUQhYd-pSIe7wTkBS5SoqNTC5wSUh1jQtBs3B7PwwCst2eZvnr880wOqWmFcUV2ei6NWqcJ.Mkx3aeRmXW42A2sz5MuuvOMjs1yD8Mnl5h, (flashplayer_v.71428794b.exe)

31 / 68 (Adware)

http://ad.adnetwork.net/clk?3,eJylkN9ugjAUxp-md8SUFigL2QWsmGwDla1o8MagLVDmX6jiePqVsPkC-3Jy-vV3evIlNbGHXFgQ1ym4ZZrYIblnYi6InRd8KwzoeR6ybIgweULIYFEYhwVdLsqXVMg28Ae97S6fnT-qHNrr6Bfu0IPppSHzZERdar6PjkKOQv8fuq2C3a.VeTq.pK7.cVO53cPg8Ypm5qyv6qxeVxHbH9arTMVsuo8ltGcs7SK2lDFLurhO7nPKZVw-Np8No1LqDLAP0FRXztEk50ehulPzNdGnZq0CWA826vssAKayaPKDAMjRqJX9gDCEd2RDzVqxU.J01Ez.swvhwM7X7eba7DUDyAIk-LsT-gMGdXcN, (setup.exe)

The following 168 files have been seen to comunicate with ad.adnetwork.net in live environments.

TCP » 98.139.225.43:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 98.139.225.43:443

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 98.139.225.43:80

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 98.139.225.43:80

NexGuard.exe (NexCafé by Nextar)

TCP » 98.138.49.44:80

client.exe

TCP » 98.139.225.43:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 98.138.49.44:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 98.139.225.43:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 98.138.49.44:80

NexGuard.exe (NexCafé by Nextar)

TCP » 98.138.49.44:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 98.138.49.44:443

browser.exe (speed browser by Smart Applications)

TCP » 98.138.49.44:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 98.139.225.43:443

browser.exe (speed browser by Smart Applications)

TCP » 98.138.49.44:80

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 98.139.225.43:443

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 98.139.225.43:443

wikithemes.exe

TCP » 98.138.49.44:443

browser.exe (Browser)

TCP » 98.138.49.44:443

browser.exe (speed browser by Smart Applications)

TCP » 98.138.49.44:443

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 98.138.49.44:443

UCBrowser.exe (UC Browser by UCWeb)

Latest 20 of 309 files

URL:

http://ad.adnetwork.net/

Web server:

ATS

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.