home

cdn.madanate.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.madanate.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Wednesday, April 16, 2014

Expires date:
Saturday, April 16, 2016

Updated date:
Sunday, March 22, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
madanate.com

Whois:
1 madanate.com record

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Downloader.Bundler.Soft32.Installer (M), PUP.Downloader.Bundler.Soft32 (M)
95.00%

Dr.Web
Adware.Downware.12014, Threat.Undefined, Adware.Downware.11157
15.00%

ESET NOD32
Win32/InstallCore.TP potentially unwanted application
10.00%

AhnLab V3 Security
Win-PUP/Soft32Downloader
10.00%

Agnitum Outpost
PUA.InstallCore
10.00%

herdProtect (fuzzy)
a variant of 012b3e3b7c2c35e6ed25bd93bfdacfc2ec5a6153
5.00%

Bkav FE
W32.HfsAdware
5.00%

Malwarebytes
PUP.Optional.InstallCore
5.00%

VIPRE Antivirus
Trojan.Win32.Generic
5.00%

K7 AntiVirus
Adware
5.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted (variant)
5.00%

NANO AntiVirus
Riskware.Win32.InstallCore.dqheth
5.00%

Comodo Security
Application.Win32.InstallCore.DQY
5.00%

Sophos
Generic PUA GG (PUA)
5.00%

Avira AntiVirus
PUA/InstallCore.Gen
5.00%

The domain cdn.madanate.com has been seen to resolve to the following 9 IP addresses.

85.159.233.63
August 17, 2016

141.8.224.169
July 19, 2016

209.99.40.222
209-99-40-222.fwd.datafoundry.com
April 20, 2016

209.99.40.223
209-99-40-223.fwd.datafoundry.com
April 17, 2016

54.191.250.3
ec2-54-191-250-3.us-west-2.compute.amazonaws.com
February 16, 2016

54.186.139.41
ec2-54-186-139-41.us-west-2.compute.amazonaws.com
January 29, 2016

52.10.176.223
ec2-52-10-176-223.us-west-2.compute.amazonaws.com
January 3, 2016

54.201.218.17
ec2-54-201-218-17.us-west-2.compute.amazonaws.com
August 11, 2015

54.186.33.198
ec2-54-186-33-198.us-west-2.compute.amazonaws.com
August 11, 2015

File downloads found at URLs served by cdn.madanate.com.

1 / 68      (Adware)
http://cdn.madanate.com/?ic_user_id=9338  (x16-32694.exe)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=GbBhVzSkWpnyBj/LSGv1hwKueYtJm6EVa2/dVsyyr E=&c= uDLxe6sx7WfuX/338DF3R7YEKubl7nvkqnrLiuSZ7dicnqsiqQ28WXyMk7Zv12NgMdFPiilsaUbI2ZmBfh57klSweXp9Cb0xZ5WOowKS JD0LcR8x0JnRXgOAQ2c7Etlj9hwN mm80C592jfKKixQ==&downloadAs=Minecraft.exe&fallback_url=http://download.wedownload.info/40/394021/.../Minecraft.exe  (fa9360ecad1be5d2fab03364b3f88ed2)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=f7AeNg3BRx bLPMl4AHPk5pjhzSU53j9qsW/JxWDTN0=&c=bas7Ww oXZH76LgxR7Oa5OV141Mo70PzR4Y4NVvdysAG1PbCoEFXV8f0ePEldZgfdwMGexQ9E0EC9 IFWUBMItFZQKj 88cD 874CXkyQPE=&fallback_url=http://download.wedownload.info/36/359343/.../camtasia.exe&downloadAs=camtasia.exe  (426b138c65022c71d8f48b347c87b825)

0 / 68
http://cdn.madanate.com/c?x=Eht8tUb2 mQrkjAUolbtcNwvYHlAMRUxWLs8L72Ud9o=&c=Uksio7PZJnWWu5c4irUktjzZ7huPzBf1rQO1Pm67yo YRPCL2jR7YfAzkc6ncCPDRjowHdH2HKkL6JiEEjga0om21xXEyXV/TjCyOUbAc Q=&fallback_url=http://download.wedownload.info/39/385531/.../free_freecell_solitaire2012_v201_setup.exe&downloadAs=free_freecell_solitaire2012_v201_setup.exe  (ffd0602583ee7154ea1b42c50d08d950)

0 / 68
http://cdn.madanate.com/c?x=8WEdjISUkMFa33DS1GpkehH0wFGWIwHcQB8 aM3LnVU=&c=H2hOoMvzKIiSWsslsuH1S2YYW4X5EMr cBI2/Zh d0H5S2yxiuLLNPIWqyhGbpQPKcYQec2Jm BP9g8NQQXvtgmZsBFif1osEQKD2x15viEJz0ttMCnSYV6CSpQi4602&fallback_url=http://download.wedownload.info/42/412091/.../free_spider_solitaire_v50_setup.exe&downloadAs=free_spider_solitaire_v50_setup.exe  (49456182cab5f295e25bab81963750c7)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=vraRSCbqLYJU6YMYBDijP77iBw3SdJHZcO6kR2KDyk8=&c=i5YRNiZvViH1s5/sVUK3BX5aQciybkapX24lH0SmMCNRfrj1Tdm6qI3sINcaTrYroqlnf/g2tH859hQ2DnuKnmHGIk525CbbEnwgyWJL7g6 y2juJ5qQPE12d6VkYzSG&fallback_url=http://download.wedownload.info/42/412091/.../free_spider_solitaire_v50_setup.exe&downloadAs=free_spider_solitaire_v50_setup.exe  (3026667823780f87e1a6dda1dd601215)

0 / 68
http://cdn.madanate.com/?ic_user_id=9341  (wrar531.exe)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=gm47nurbBzoLKLBUsD H6R6CpJmYActeHxtUALtaDQM=&c=ReNsSOp/67Xa/zrcEPoiOx8kcdDEW8marKeeJ7ETitmntKO/6OzeMsnJO5yumZzGiA1kAT62dAukyohpZn6GP0PKzEERE0FH7CEz77KBi0A=&fallback_url=http://download.wedownload.info/1/6736/.../tetris.exe&downloadAs=tetris.exe  (e71eef7747ccc476b009028d558a178d)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=AjnnGkEb o0Q LQStbrb5xdEXfVniq4sIlaCb/iZ 1o=&c=dTCpSj85ZoiABmQ9NpLsHuhJUOFL20eBg/mrtXkbcLC8QXh66TQsiNp3hTYNbTo3xXMjimRQQn6aL1QV2ljI36OMbMj1iNx cT/SZUiza4nOZtqP87G7S0j7YUNKmsjavCXXHy4rh4uUBAA7g0ecNg==&fallback_url=http://download.wedownload.info/23/223813/.../CPPProductKeyFinder.exe&downloadAs=CPPProductKeyFinder.exe  (08308ebaa2ac56805dfb3c2cbea88d6b)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=HdUjIeubDoh4id/bNc9C9ABg8/MtYEAiFwOIiaCWd0A=&c=ISdD9dX1ZhQ2CME5ipIyp6sOQePeL7lwiJ/cq6xYlzKVbrSOD8vr/a0qiGRPGIUpsHLGlJbH2TxLhT1XTdli Hh0x284X3rzArkcQDDrTrLQjrvAENCehWQMXjvsnZaU&fallback_url=http://dl2.itools.hk/.../iTools1115E.zip&downloadAs=iTools  (itools.exe)

0 / 68
http://cdn.madanate.com/?ic_user_id=9341  (wrar53b3.exe)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=rzhB53FdVVMXanDoKt yZ3Ake51nRt05KWuh89oOrQs=&c=wNEH9nlMfv6mDNrq3cFms9OFSetbYf/Xc0fl2e7Bam4 VRa QhFrW5WIjBlAOayKx4I6cUUypwYe8O0V1em0PAmN0pEAwoVrKKd6K5DYc4o=&fallback_url=http://download.wedownload.info/41/401779/.../htc_sync_setup_3.3.21.exe&downloadAs=htc_sync_setup_3.3.21.exe  (htc_sync_setup_3.exe)

1 / 68      (Adware)
http://cdn.madanate.com/?ic_user_id=9278  (lgpcsuiteiv_setup.exe)

0 / 68
http://cdn.madanate.com/c?x=TS z01UXAUtO5ho6QCa5yqGYYpUVDBPxxieiJ oD9KM=&c=mFsx/NEEg7foA5RNKa3os9VUWZ5DUUHeM5w6M/S0yCM3Y1iPZiUwnajPQFxihJxnuCQJLVy 3SsDk3t8omojumB2UNW4g8uImTEtPs1iFjC501eTdSlwPv2/zC7uDoGJp 8x3vYPiXH1192N5 qzsQ==&downloadAs=free_spider_solitaire_v50_setup.exe&fallback_url=http://download.wedownload.info/42/412091/.../free_spider_solitaire_v50_setup.exe&uid=14390914230b76358b06e18969c3027ca9fc441f83&_ga=180594626.1439091423  (49456182cab5f295e25bab81963750c7)

17 / 68    (Adware)
http://cdn.madanate.com/?ic_user_id=9341  (winrar.exe)

1 / 68      (Adware)
http://cdn.madanate.com/?ic_user_id=9278  (camstudio_2.7_r316_setup.exe)

1 / 68      (Adware)
http://cdn.madanate.com/?ic_user_id=9338  (picasa39setup1.exe)

1 / 68      (Adware)
http://cdn.madanate.com/?ic_user_id=9278  (horizon.exe)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=4VLukfLzmty5bdd09UvI7rYk/YHwSiBMyTuAgTu9sfE=&c= YS61MZPFURkyuLpKcW6nwHzUlWWdxwlvdyq 6tTI/px8EpOCFzaivSri o6TjbrdfNASDSXq1mXAICyJ8wCDciAxlykRKDBZH66uKaJaYp Pfw5DcqARebWN09wCmVBTv4QumkJOhuDRnatPfsLmQ==&downloadAs=Zoo2Trial.exe&fallback_url=http://download.wedownload.info/1/222/.../Zoo2Trial.exe  (88c3e58b82e299b64ae47dad69ab394d)

1 / 68      (Adware)
http://cdn.madanate.com/?ic_user_id=9341  (teamviewer.exe)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=CWibN0Ja9NM86y0r7w5Sy7AVi19oMEdCrjVCwJkrDUA=&c=rDB44rw2pVUP4GaQxcG56 jT0oKHoaPCP6f7RNXtqeM9IvnkY0LeZQ30WbO cVKXZ6KnGUGUvTXJMK T38X Y6npGeFfwGvfrKL5 ihRNwlCrzCBXhBZyNiA4QyvMSFZMvJC6yoZuAp7LIPadERmNw==&fallback_url=http://update.cyberlink.com/ftpdload/Patch/YouCam/YUC130813-01/.../YouCam_6.0.2326.0_Trial_Trial_YUC130813-01.exe&downloadAs=CyberLink YouCam  (cyberlink youcam.exe)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=YW8JFTbWnG kObHuPCXsAA0KxA2gqMKQDG/aTrnOOgo=&c=MSGPAv2IS/hzwDG0bqBw7WCsBqnhU0NmumWNVlfWivCnYxHfjE50BDgPUfh4I n1zAwa9eT0RSQwdHw2Nw5HXWL0vtrPsO5EWyrZzrja0 jJY340aqGi9MXOnhDmQ Nw&fallback_url=http://download.wedownload.info/8/76230/.../karafunplayer_1.20.86.exe&downloadAs=karafunplayer_1.20.86.exe  (karafunplayer_1.exe)

0 / 68
http://cdn.madanate.com/c?x=UY9UCYNkmR qgSx3gG9RvoyMNPwh1EC 7mOyq9CG8bw=&c=en/P8L69DYR95wsEEec xhPk1LL8LP5PK0cm2tg5MJqaZhiECaKTWecNYzFBwM3Aq3AQ oWGFNBIWW1XUlvsG SytPkxVmMDRMWLIvXPJnbGK5HQzZHFpleNZCBNbinU3hfX5DE5IzkdKUVazTdbMQ==&fallback_url=http://download.wedownload.info/20/190404/.../setup.exe&downloadAs=setup.exe  (7ccdb06729e2731af9d0dfbd86b437de)

1 / 68      (Adware)
http://cdn.madanate.com/c?x=CsX90bivKaksRty9wM6 cXOLcgYbbBxasDfHiSnNPVo=&c=SAZsF3fEM/OlMBy/qmUPTLBWaE4ahkHixnwmzqaaRiftzTprrxOcGtOO2u1GnzK050zR43jSgzyHnvaQd9B3DJFgtTlzRYdKybuGhWjpFIWdDUxVPaMt3m7Oj9d86ztN&fallback_url=http://download.wedownload.info/41/409625/.../surgeonsimulator2013-win.zip&downloadAs=surgeonsimulator2013-win.zip  (surgeonsimulator2013-win.exe)

3 / 68      (PUP)
http://cdn.madanate.com/c?x=IHYNK6dNfd7BLJErME6TH/GSO8MS6Q2jr bWDcPJMgc=&c=pX lsuiXzHtjBgt07T3vBFRo9GGyTHFGz6fB3VYV/K3cY6vJU73lYt1vYsGmdEwzSKsuUgNsDcm4UvHKppJJ1Wq8fbCo5lHX/IrNIT5n5jQjL0AbI4FbGVbVQjgoi9Y5GNniKZ33mf3mOM1NGCELZw==&fallback_url=http://update.iobit.com/.../advanced-systemcare-setup.exe&downloadAs=Advanced SystemCare  (advanced systemcare.zip)

5 / 68      (Adware)
http://cdn.madanate.com/c?x=OAZc3Rt1nko7xH6hUhR8pfMYkq1zkrkrJnLxvwu3vvQ=&c=enmo9i/VjGGHadsIt8IdOBVXvxaz 6HHnXky9Yv4u1rahtoZUALCuqnpyrHzSIPGM7Si7 3cMTwLKAbClUGT0 3c3to6ii1XiEvtKxRbs9KERiDvjzdNlIuVWs1wVabPmoGl Cv0jK4abgnfKtpetA==&fallback_url=http://download.wedownload.info/34/337181/.../PhotoScape_V3.7.exe&downloadAs=PhotoScape_V3.7.exe  (photoscape_v3.exe)

The following 58 files have been seen to comunicate with cdn.madanate.com in live environments.

TCP » 209.99.40.222:80
UCBrowser.exe (by UCWeb)

TCP » 209.99.40.223:80
UCBrowser.exe (by UCWeb)

TCP » 209.99.40.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 209.99.40.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
online-guardian-v2.0.9.exe

TCP » 209.99.40.223:80
jingling.exe

TCP » 209.99.40.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:80
hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80
msn.exe

TCP » 209.99.40.222:80
apptrailers.exe

TCP » 209.99.40.223:80
online-guardian-v2.0.9.exe

 
Latest 20 of 84 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.