d.tubedimmerapp.com
Creative Island Media, LLC (via a Proxy Registrant)
Domain Information
The domain d.tubedimmerapp.com is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2013. This domain has been seen distributing various forms of adware (some being very aggressive) directly or via bundled installations. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below). The domain is associated with the publisher Creative Island Media, LLC who is located in San Diego, California in the United States.
Registrar:
GODADDY.COM, LLC
Server location:
Washington, United States (US)
Create date:
Tuesday, May 14, 2013
Expires date:
Saturday, May 14, 2016
Updated date:
Friday, May 15, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Adware distribution
Scan engine
Details
Detections
Microsoft Security Essentials
Worm:Win32/NeksMiner.A
50.00%
F-Secure
Application:W32/Generic.70053c248f!Online
50.00%
Trend Micro House Call
TROJ_GEN.F47V0417
50.00%
Dr.Web
Adware.Searcher.2647
50.00%
VIPRE Antivirus
Injekt
50.00%
G Data
Win32.Application.TubeDimmer
50.00%
Reason Heuristics
PUP.Installer.CreativeIslandMedia.l
50.00%
The domain d.tubedimmerapp.com has been seen to resolve to the following 16 IP addresses.
server-52-85-131-77.iad53.r.cloudfront.net
April 5, 2016
server-52-85-131-67.iad53.r.cloudfront.net
April 5, 2016
server-52-85-131-7.iad53.r.cloudfront.net
April 5, 2016
server-52-85-131-244.iad53.r.cloudfront.net
April 5, 2016
server-52-85-131-237.iad53.r.cloudfront.net
April 5, 2016
server-52-85-131-171.iad53.r.cloudfront.net
April 5, 2016
server-52-85-131-115.iad53.r.cloudfront.net
April 5, 2016
server-52-85-131-87.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-210.iad53.r.cloudfront.net
February 4, 2016
server-54-192-195-191.iad53.r.cloudfront.net
February 4, 2016
server-54-192-195-91.iad53.r.cloudfront.net
February 4, 2016
server-54-192-195-54.iad53.r.cloudfront.net
February 4, 2016
server-54-192-195-37.iad53.r.cloudfront.net
February 4, 2016
server-54-192-195-249.iad53.r.cloudfront.net
February 4, 2016
server-54-192-195-238.iad53.r.cloudfront.net
February 4, 2016
server-54-192-195-225.iad53.r.cloudfront.net
February 4, 2016
File downloads found at URLs served by d.tubedimmerapp.com.
The following 2 files have been seen to comunicate with d.tubedimmerapp.com in live environments.
URL:
http://d.tubedimmerapp.com/
Network:
Amazon Cloudfront
Related Domains
