home

ak.dl.popularscreensavers.com

Mindspark Interactive Network, Inc.

Domain Information

The domain ak.dl.popularscreensavers.com registered by Mindspark Interactive Network, Inc. was initially registered in May of 2003 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
MARKMONITOR INC.

Server location:
Massachusetts, United States (US)

Create date:
Friday, May 23, 2003

Expires date:
Monday, May 23, 2016

Updated date:
Tuesday, April 22, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
popularscreensavers.com

Whois:
1 popularscreensavers.com record

Scanner detections:
Detections  (56% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.MindsparkInteractiveNetwork.Y, PUP.Installer.MindsparkInteractiveNetwork.?, PUP.Mindspark.Installer
100.00%

avast!
Win32:Mindspark-A [PUP]
60.00%

Dr.Web
Adware.MyWebSearch.47
60.00%

VIPRE Antivirus
MyWebSearch.J
60.00%

AVG
Zango, MyWebSearch
60.00%

Baidu Antivirus
Adware.Win32.MyWebSearch
40.00%

Trend Micro House Call
TROJ_GEN.F47V0112
20.00%

Panda Antivirus
Adware/WebSearch
20.00%

G Data
Win32.Adware.Mindspark
20.00%

Malwarebytes
PUP.Optional.MindSpark
20.00%

The domain ak.dl.popularscreensavers.com has been seen to resolve to the following 15 IP addresses.

23.62.6.162
a23-62-6-162.deploy.static.akamaitechnologies.com
June 4, 2016

23.62.6.210
a23-62-6-210.deploy.static.akamaitechnologies.com
June 4, 2016

23.3.13.225
a23-3-13-225.deploy.static.akamaitechnologies.com
February 9, 2016

23.3.13.201
a23-3-13-201.deploy.static.akamaitechnologies.com
February 9, 2016

23.62.6.40
a23-62-6-40.deploy.static.akamaitechnologies.com
November 18, 2015

23.62.6.96
a23-62-6-96.deploy.static.akamaitechnologies.com
July 1, 2015

23.62.6.41
a23-62-6-41.deploy.static.akamaitechnologies.com
July 1, 2015

23.0.160.75
a23-0-160-75.deploy.static.akamaitechnologies.com
January 14, 2015

23.0.160.51
a23-0-160-51.deploy.static.akamaitechnologies.com
January 14, 2015

23.0.160.16
a23-0-160-16.deploy.static.akamaitechnologies.com
January 14, 2015

216.156.199.35
216.156.199.35.ptr.us.xo.net
January 4, 2015

63.88.100.147
August 12, 2014

63.88.100.136
August 12, 2014

23.67.250.123
a23-67-250-123.deploy.static.akamaitechnologies.com
April 14, 2014

23.67.250.105
a23-67-250-105.deploy.static.akamaitechnologies.com
April 14, 2014

File downloads found at URLs served by ak.dl.popularscreensavers.com.

0 / 68
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/.../PopularScreensaversSetup.exe  (39f40f56594955bac0d45593d7e25345)

1 / 68      (Adware)
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1412879917053/.../PopularScreensaversSetup.PopularScreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe  (7683a67d7beb5aa8d2583a94995238df)

0 / 68
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1404759913239/.../PopularScreensaversSetup.PopularScreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe  (7688a3112c4d29d056a93af475248022)

0 / 68
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1404759913239/.../PopularScreensaversSetup.PopularScreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe  (4b682650c496997e5a62fa51af105f9f)

0 / 68
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1404759913239/.../PopularScreensaversSetup.PopularScreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe  (c8154761b8cf917a9eeec2b9de757d59)

7 / 68      (PUP)
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1412879917053/.../PopularScreensaversSetup.PopularScreensavers_7i.dnnlpdpkabbnfmbdnofhpbiidcbgpnma.ch.exe  (popularscreensaverssetup.popularscreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe)

7 / 68      (PUP)
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1412879917053/.../PopularScreensaversSetup.PopularScreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe  (eafd136e820582f5e64f712e8756623f)

2 / 68      (Adware)
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1412879917053/.../PopularScreensaversSetup.PopularScreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe  (7344e12bd8f61d00d945404c4fbded25)

7 / 68      (PUP)
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/1404759913239/.../PopularScreensaversSetup.PopularScreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe  (0270406cb8aaeed5b2fe5bcfd879d63d)

6 / 68      (PUP)
http://ak.dl.popularscreensavers.com/images/nocache/vicinio/executable-packages/PopularScreensavers/.../PopularScreensaversSetup.exe  (a078d262a5c1bc35197bfa71ccb047df)

The following 299 files have been seen to comunicate with ak.dl.popularscreensavers.com in live environments.

TCP » 23.62.6.162:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.210:80
wikithemes.exe

TCP » 23.3.13.201:443
cpx.exe (Google Embedded Application)

TCP » 23.3.13.201:80
Toolbar.exe (Toolbar Core by APN)

TCP » 23.62.6.210:80
wikithemes.exe

TCP » 23.3.13.201:80
Toolbar.exe (Toolbar Core by APN)

TCP » 23.62.6.162:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.0.160.16:80
TWCApp.exe (The Weather Channel App by The Weather Channel)

TCP » 23.0.160.16:80
PSANHost.exe (Cloud Antivirus Platform by Panda Security, S.L)

TCP » 23.0.160.16:80
iafdglafjnbhhfnbdlmageiffbhapked.crx

TCP » 23.0.160.16:80
kifafadhaonpfpdepdjmdmcgmnjieenj.crx

TCP » 23.0.160.16:80
pmkdchokpegklckhiggdmjfjfdlkgmmg.crx

TCP » 23.0.160.16:80
ckkfipncfiigadelehgcbcbemeopmcdg.crx

TCP » 23.0.160.16:80
hfcmajnmfggpkknianiidjfhapbkmdgp.crx

TCP » 23.0.160.16:80
ceiapeodjfjcbfkfkfbdpgbhbgiidjdb.crx

TCP » 23.0.160.16:80
mclkedoeeehnmdcbjejgkhobkbibkkdk.crx

TCP » 23.0.160.16:80
gmlikmikiobdfcmdfgacgjikmpcfgdkc.crx

TCP » 23.0.160.16:80
lpmmogapccokpnokcdhjfiildnodjgam.crx

TCP » 23.0.160.16:80
ceiapeodjfjcbfkfkfbdpgbhbgiidjdb.crx

TCP » 23.0.160.16:80
ofbadnfgflalgnlglgchfonmpoiiclig.crx

 
Latest 20 of 302 files

URL:
http://ak.dl.popularscreensavers.com/

Title:
“imgfarm.com”

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.