home

ad.aim4media.com

aim4media

Domain Information

The domain ad.aim4media.com registered by aim4media was initially registered in December of 2002 through KEY-SYSTEMS GMBH. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the AppNexus, Inc network.
Registrar:
KEY-SYSTEMS GMBH

Server location:
New York, United States (US)

Create date:
Sunday, December 29, 2002

Expires date:
Thursday, December 29, 2016

Updated date:
Tuesday, December 29, 2015

ASN:
AS29990 ASN-APPNEXUS - AppNexus, Inc,US

Root domain:
aim4media.com

Whois:
1 aim4media.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Jottix.JottixinternationalmediaGM2007.Installer (M), PUP.Outbrowse.Bundler (M), PUP.Jottix.Jottixin.Installer (M)
100.00%

The domain ad.aim4media.com has been seen to resolve to the following 38 IP addresses.

68.67.178.170
137.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
August 10, 2016

68.67.178.246
134.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
August 10, 2016

68.67.178.243
135.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
August 10, 2016

68.67.178.137
116.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
June 8, 2016

68.67.178.132
114.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
June 8, 2016

68.67.178.111
115.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
June 8, 2016

68.67.178.110
119.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
June 8, 2016

68.67.178.109
118.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
June 8, 2016

68.67.178.138
117.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net
June 8, 2016

68.67.152.105
float.1240.bm-impbus.prod.nym2.adnexus.net
February 10, 2016

68.67.152.66
float.1370.bm-impbus.prod.nym2.adnexus.net
February 10, 2016

68.67.176.27
float.1195.bm-impbus.prod.sin1.adnexus.net
February 10, 2016

68.67.176.22
float.1190.bm-impbus.prod.sin1.adnexus.net
February 10, 2016

68.67.176.14
float.1182.bm-impbus.prod.sin1.adnexus.net
February 10, 2016

68.67.153.216
float.2211.bm-impbus.prod.nym2.adnexus.net
February 10, 2016

68.67.153.180
float.2061.bm-impbus.prod.nym2.adnexus.net
February 10, 2016

68.67.152.125
float.1161.bm-impbus.prod.nym2.adnexus.net
February 10, 2016

68.67.153.152
float.2271.bm-impbus.prod.nym2.adnexus.net
January 4, 2016

68.67.153.54
float.1935.bm-impbus.prod.nym2.adnexus.net
January 4, 2016

68.67.152.168
float.2233.bm-impbus.prod.nym2.adnexus.net
January 4, 2016

68.67.152.127
float.1162.bm-impbus.prod.nym2.adnexus.net
January 4, 2016

68.67.176.137
float.2911.bm-impbus.prod.nym2.adnexus.net
January 4, 2016

68.67.176.53
float.2469.bm-impbus.prod.nym2.adnexus.net
January 4, 2016

68.67.152.114
float.1249.bm-impbus.prod.nym2.adnexus.net
January 3, 2016

68.67.152.113
float.1248.bm-impbus.prod.nym2.adnexus.net
January 3, 2016

68.67.176.28
float.1196.bm-impbus.prod.sin1.adnexus.net
January 3, 2016

68.67.153.247
float.2280.bm-impbus.prod.nym2.adnexus.net
January 3, 2016

68.67.153.207
float.2203.bm-impbus.prod.nym2.adnexus.net
January 3, 2016

68.67.153.197
float.2186.bm-impbus.prod.nym2.adnexus.net
January 3, 2016

68.67.153.168
float.2051.bm-impbus.prod.nym2.adnexus.net
January 3, 2016

 
Showing 30 of 38 IP Addresses

File downloads found at URLs served by ad.aim4media.com.

1 / 68      (PUP)
http://ad.aim4media.com/clk?3,eJydjdmOgkAQRb-GN4b0gkCHzENBizEREhPQ4BtLy64GOip8.bTR-AFzUw.31qkFU7fIEClMyuyMmKVAzMX0zEReCisnOnJdd0VMTAiziX7gZQq-HawrWC089eAl3v4ke3irgi1A-vaK-ooC8.vog41zl3xgvt108H95eQPTx6uXD.WaO-CLI7u0jvcd2xy6iO-fIe.m3TGZT8NahnHQhw2u07ZvdnHQpkvQnWJAURu16eO7-avrtZQ3jYJGAlXjNJFJZGNRG8V1UI1S9M1djLOyMquMWg69RgM5aJQ.l85h1-GmEeuuIrKwiSlCKr4O8ry5.AHBPWyK,  (xvidly_setup.exe)

1 / 68      (PUP)
http://ad.aim4media.com/clk?3,eJydjltrhDAQhX-NbyImqRqRPoxGoaCCsBf0baPxssZu0bDW.fXNUtm-9zAw3zkMh0EkqLnTNlgI3lDaeNwNEGl9j2Cfu55pB0GAHQe5mCLHM0-sKSHykrgL05XVITyVpdYJXioAyh317iCM.Ujme2K14.GXItHgFf6vkA-w7PwBoKs6RsGtxk0-aPg6Y.k1Oxe4mkqcno.fFStUdkhkNqBe52t6iNf8CnY5xbhiev-99G6avVJfBgEDJ3rmZcGLuMx1b9W3SQeNkMNdzJtGqS6d1atJGiRRk0HY9hipf1Odgd27traL3hCxbW2fjYwPnz9.nWyD,  (xvidly_setup.exe)

1 / 68      (PUP)
http://ad.aim4media.com/clk?3,eJydjFtrg0AQhX-NbyJ7a9wgfRhdtQVNWtCIffMWtWoNusTaX98NkdDnHgbmO4czg6lV5hnHtNizvEJlUeUWZuiMCpMzE-nIsiyTPzHECWH6SZQpOKbn1nawiMKGm47t5VTDH6Xb5uAAeF7p9IctMc5dfCeRRD6D.8vOW5g3fgVYAGrBIR.fXrgL9qMmavQxpDj87FAQueTopzKMvD5ccXPw31mQxDQUseq4JE3S73B5XD7reiPlRaOgEU.NNM9krrKpaIxiHFRQVn17raZVYS-z2mjk0GvUk4NGxfrT8f0oa43srsqiHWaYIqTs7aPI269frSJrbg==,  (xvidly_setup.exe)

1 / 68      (PUP)
http://ad.aim4media.com/clk?3,eJydjVtrg0AQhX-Nb1b2EnVF-jCb1SCokGIq9s013rUpukTMr68B2773MDDfORxmMHURs6RVVIVp0jJHDnIxrSx2kJLaSEeu62KMkYMJwUR.F9cMjrbv1WA-RMbhKdG9XM7wI36BbEcGfIGTFx-HeE-Mqr.sNRmcevi.uGxh3jkAWABqwWC2eZgLxn9rIliirl7ibYfpW5OlkYoSf4haZH6kcRMm3hJ3gLLRM6PkvMZ.D151vVHqS6OgEX-baZ7JXOZT0RjFbdyCazm093JaNxxUXhuNGgeN-mrUqFgfPXNuqtaIdd8ssvABU4Q2-7woZPv5DU05a5s=,  (xvidly_setup.exe)

1 / 68      (Adware)
http://ad.aim4media.com/clk?3,eJydjU9rg0AUxD-NN5Fdd10V6eGZVSlEpaAJ9ua.qonbiC6x9tN3Q5P03h.vMDM8ZjDxasoIa21ss6a2HRN7mKLWqlyztCwdeZ5HiMtcRKhL9QNvCtjZYdD5-5XXPtxIh-nQwYNXgOIuF4A34IHcjck9MT7O-a.ixyyi8H.8arj1PyZXgI47kG.CsnLwn29RgJJjYaVRjvZZgN6jQsZZOMYbHuIs3lS2JidAhQhFmiWn-G.gRdd7KSeNgGaG6uZlMZe2nOveqC9CBU07Dtd23pSUZWf0UowaCaXQCP.6PjvuRUyaya7KIoYpJggpeyvk1fD5A7-matU=,  (setup.exe)

1 / 68      (PUP)
http://ad.aim4media.com/clk?3,eJydj8tqhEAURL.GnQxt276QLK62moBtmKARlzO-tY1BOyP69XGIk-xT3MWp4lJQimrnyKgMhCpk6BYmVWkrBBnE1Au91GRk2zbBqqVpxNA0-Z0WGbiG79VOuNDcgbu8rymt4aEEIDuQgAvgUsvl0ZGcqj75IWecn1.g.3KuLcwH7z0LQE1NmIo0KDxwft-CBEeYKVHHuzCG7TXuBYt9zlalZfS8hTHbou6tY2nUR8F5yf52PMlyI8SnpIKE.f2mecZzeZny5pSPwx4UJW9v5bTuyMWlPjVi4JLqi0FS6br1pjWKWsL6bbdIV4iiIrTbeyO9th.fnXVsRw==,  (xvidly_setup.exe)

1 / 68      (PUP)
http://ad.aim4media.com/clk?3,eJydTdtqg0AQ.RrfRPbGZkX6MGa7pdQLKSZi34wxulWboEtS.foqldDnHgbOhTkzmHoUMUJdgoTgmG5o7mGGEBE5FS6zked5mHNGuYuofZCnDLYb9Vz5wV0WPiyI9fVQwR9kKwuAO.gy2rbRmjjnZv-rZJq8MPg..KOGYdWvyx-opIBzUr5BA.5jTb7XcVK3H58FCdJsDKe9CRPVhhrrrFNNkCodpbspTIrvmVm8ezSfbLs25mpRsIiapx8GMpR5X9ROcenm4FS2-lb24yxbk1dObbrWosp0FpXj1Aj3YiqL8NtsEccMU4Rmu1yUR.31A.8Ea0U=,  (xvidly_setup.exe)

The following 208 files have been seen to comunicate with ad.aim4media.com in live environments.

TCP » 68.67.178.138:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 68.67.178.243:443
Client.exe

TCP » 68.67.178.137:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 68.67.178.111:443
Client.exe

TCP » 68.67.178.138:443
Client.exe

TCP » 68.67.178.246:80
jingling.exe

TCP » 68.67.178.137:443
jingling.exe

TCP » 68.67.178.132:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 68.67.178.170:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 68.67.178.243:443
kometa.exe (Kometa by Kometa Authors)

TCP » 68.67.178.137:443
opnsqr.exe (OpinionSquare by TMRG)

TCP » 68.67.178.243:443
jingling.exe

TCP » 68.67.178.111:443
online-guardian-v2.0.9.exe

TCP » 68.67.178.132:443
online-guardian-v2.0.9.exe

TCP » 68.67.178.110:80
jingling.exe

TCP » 68.67.178.110:443
jingling.exe

TCP » 68.67.178.243:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 68.67.178.137:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 68.67.178.110:80
GPlayer.exe (by Exent Technologies)

TCP » 68.67.178.132:80
GPlayer.exe (by Exent Technologies)

 
Latest 20 of 877 files

URL:
http://ad.aim4media.com/

Google Analytics:
UA-4057742

Title:
“error page for redirects from product”

Web server:
Apache/2.2.22 (Ubuntu)

Facebook:
Likes:  125
Shares:  278
Comments:  73

Statistics are for the previous month.

adnxs.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.