home

fra1.ib.adnxs.com

AppNexus Inc

Domain Information

The domain fra1.ib.adnxs.com registered by AppNexus Inc was initially registered in May of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Washington, District of Columbia within the United States which resides on the RIPE Network Coordination Centre network.
Registrar:
MARKMONITOR INC.

Server location:
District of Columbia, United States (US)

Create date:
Tuesday, May 27, 2008

Expires date:
Friday, May 27, 2016

Updated date:
Saturday, April 26, 2014

ASN:
AS29990 ASN-APPNEXUS - AppNexus, Inc, US

Root domain:
adnxs.com

Whois:
2 adnxs.com records

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ShetefSolutionsConsulting1998.c, PUP.ShetefSolutionsConsulting1998.o, PUP.Wilmaonline.c, PUP.Installer.Wilmaonline.f, PUP.Optional.Installer.X, PUP.Optional.Installer.Y, PUP.Amonetize.Ukra2006.Bundler (M), Threat.Win.Reputation.IMP, PUP.Brightcircle.Wilmaonline.Bundler (M), PUP.Solimba.Firseria.Bundler (M), PUP.Amonetize.ShetefSolutionsConsulting1998.Bundler (M), PUP.Outbrowse.Bundler (M), PUP.Brightcircle.Wilmaonl.Bundler (M), PUP.Adknowledge.BootComp.Installer (M), PUP.Amonetize.ShetefSo.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Adknowledge.Liquidbu.Installer (M), Adware.Amonetize.Installer.Installer.Meta (M), PUP.Solimba.EilioDev.Bundler (M), Adware.Amonetize.Installer.Meta (M), PUP.Outbrowse.TikiTaka.Bundler (M)
100.00%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Amonetize
22.22%

avast!
Win32:Adware-BJY [PUP], Win32:Amonetize-M [PUP], Win32:Adware-gen [Adw], Win32:Amonetize-N [PUP], Win32:Amonetize-CI [PUP]
20.00%

Dr.Web
Adware.Downware.1575, Adware.Downware.2250, Adware.Downware.5488, Adware.Downware.8012, Adware.Downware.5717, Adware.Downware.3925
20.00%

ESET NOD32
Win32/Amonetize.AJ (variant), Win32/Amonetize.AX (variant), Win32/Amonetize.BM (variant), Win32/Amonetize.BG (variant), Win32/Amonetize.AG (variant)
20.00%

Malwarebytes
PUP.Optional.Amonetize.A, PUP.Optional.Monetizer
17.78%

Baidu Antivirus
Adware.Win32.Amonetize, Adware.Win32.ELEX
17.78%

Agnitum Outpost
PUA.Amonetize
15.56%

Trend Micro House Call
TROJ_GEN.F47V0227, TROJ_GEN.F47V0304, TROJ_GEN.F47V0309, TROJ_GEN.F47V0313, Suspicious_GEN.F47V0702, TROJ_GEN.F47V0224, TROJ_GEN.R0CBC0EG214
15.56%

Avira AntiVirus
ADWARE/Adware.Gen2
15.56%

McAfee
Artemis!FD84DD4BE9F9, Artemis!4F0D2B78C4BD, Artemis!4FC1814AFEE3, Artemis!68FBA6528597, Artemis!32A84E35209D, PUP-FBM
13.33%

Fortinet FortiGate
Riskware/Amonetize
13.33%

NANO AntiVirus
Riskware.Win32.Amonetize.cwgnry, Riskware.Win32.Amonetize.cvodil, Riskware.Win32.Amonetize.dcblyg, Riskware.Win32.Amonetize.ddtnan
13.33%

AVG
Generic_r, MalSign.Wilmo
13.33%

G Data
Adware.Generic.959515, Gen:Variant.Application.Bundler.Amonetize.12, Win32.Application.Amonetize, Adware.Generic.948802
13.33%

The domain fra1.ib.adnxs.com has been seen to resolve to the following 197 IP addresses.

37.252.170.226
ip478738.fra1.adnexus.net
July 18, 2016

37.252.170.217
float.2965.bm-impbus.prod.fra1.adnexus.net
July 12, 2016

37.252.171.4
float.3004.bm-impbus.prod.fra1.adnexus.net
June 19, 2016

37.252.170.255
float.2998.bm-impbus.prod.fra1.adnexus.net
June 6, 2016

37.252.170.231
float.2994.bm-impbus.prod.fra1.adnexus.net
June 5, 2016

37.252.170.232
float.2995.bm-impbus.prod.fra1.adnexus.net
June 2, 2016

37.252.171.15
float.3010.bm-impbus.prod.fra1.adnexus.net
May 25, 2016

37.252.170.236
float.2983.bm-impbus.prod.fra1.adnexus.net
May 25, 2016

37.252.170.235
float.2990.bm-impbus.prod.fra1.adnexus.net
May 25, 2016

37.252.170.213
May 24, 2016

37.252.171.21
May 24, 2016

37.252.171.20
May 24, 2016

37.252.171.17
May 24, 2016

37.252.171.6
May 24, 2016

37.252.171.3
May 24, 2016

37.252.171.7
May 21, 2016

37.252.171.1
May 21, 2016

37.252.170.233
May 21, 2016

37.252.171.11
May 21, 2016

37.252.170.216
May 20, 2016

37.252.171.2
May 20, 2016

37.252.170.238
May 20, 2016

37.252.170.234
May 20, 2016

37.252.170.229
May 20, 2016

37.252.170.225
May 20, 2016

37.252.170.215
May 20, 2016

37.252.171.22
May 20, 2016

37.252.171.19
May 20, 2016

37.252.171.16
May 20, 2016

37.252.171.8
May 20, 2016

 
Showing 30 of 197 IP Addresses

File downloads found at URLs served by fra1.ib.adnxs.com.

11 / 68    (Adware)
http://fra1.ib.adnxs.com/click?JU4hnrkKmD-QnCZ06aGSPxsv3SQGgaU_kJwmdOmhkj8lTiGeuQqYP7ilcTmTtBx7BsR1xmf4f1oRCMRTAAAAAHMKJQCZBwAAdgIAAAIAAACs3c8AF9cFAAAAAQBVU0QAVVNEACwB-gBzDwAA8doAAgUAAQIAAI4AzyRldAAAAAA./cnd=!4gUvOAjMt4QCEKy7vwYYl64XIAA./referrer=http://www.youtube.com/watch?v=4T3-nCHPX2Q/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=fra1CIaI17P8jP6_WhACGLjLxsuzkq2OeyINOTUuMTEwLjExLjE1MCgBMJGQkJ4F&ti2=2427507&ti3=${APN}  (flashplayersetup__4743_i1040925490_il34.exe)

1 / 68      (Malware)
http://fra1.ib.adnxs.com/click?KZuCXGemsj-b2K-egvWuP0w3iUFg5eQ_m9ivnoL1rj8pm4JcZ6ayP2jfdoUyHxJHD-bDjzvZ3EB7lohTAAAAAMboKQCTBwAAdgIAAAIAAACs3c8A4n0GAAAAAQBVU0QAVVNEACwB-gBdVgAAX40AAgUAAQIAAJAAbip9uQAAAAA./cnd=!mgbROwiJp_YBEKy7vwYY4vsZIAA./referrer=http://pogoda.yandex.ru/tver//clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=fra1CI_Mj_64p7buQBACGOi-26uo5oeJRyINNS4xNDMuMTYyLjIyNygBMPusopwF&ti2=2746566&ti3=${APN}  (flashplayersetup__5462_i755919327_il40.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?BvCxEs0PpT9NNf_jMXuhP9NNYhBYOcQ_TTX_4zF7oT8H8LESzQ-lP1Kb_RKlp6l9D-bDjzvZ3EBYGMhTAAAAAG4cLwCTBwAAdgIAAAIAAACs3c8A4n0GAAAAAQBVU0QAVVNEACwB-gClLQAAZdoAAgUAAQIAAJIAoSeufQAAAAA./cnd=!zQbPPgi7qvQBEKy7vwYY4vsZIAA./referrer=http://cdn.sharedaddomain.com/slider_anchored5_300x250_203.htm?cat=28&clientId=aefbf41b-8274-4d71-bd77-66b8ae098824&l=http://villa-emma.ru/prices/&r=http://villa-emma.ru/?_openstat=ZGlyZWN0LnlhbmRleC5ydTsyODM3NTg5OzI2OTkyNTEwO3lhbmRleC5ydTpwcmVtaXVt&yclid=5757429072128807993&kw=Villa Emma Hotel/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=fra1CI_Mj_64p7buQBACGNK29pfR9OnUfSINODIuMTQwLjIyMi44NygBMNiwoJ4F&ti2=3087470&ti3=${APN}  (flashplayersetup__5462_i1053634339_il34.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?LE-tH1JiUD981zRW-AxKPycxCKwcWuw_fNc0VvgMSj8sT60fUmJQPzRfhXtm-CIXHRGoF1MTV0VXuoFUAAAAAI7EPAA4CAAAIQkAAAIAAAA37VwBv28IAAAAAQBVU0QAVVNEACwB-gDf1QAAZ80AAgUCAQIAAJgA0iDd7QAAAAA./cnd=!7wYvQAiA1PkCELfa8woYv98hIAI./referrer=http://ib.adnxs.com/tt?id=3982478&referrer=[REFERRER_URL]&EHdjYvyh=9384_18x18_0/clickenc=http://get.getweb1000.info/.../Get?p=2002&d=24714&l=1694&n=0&d1=NUMBER&clickid=fra1CJ2ioL2x6sSrRRACGLS-ldznjL6RFyIMNDEuMjQ4Ljc4LjYxKAEw1_SGpAU.  (installation.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?JAzW4JY2hz99_K2zFMKBP1g5tMh2vs8_ffytsxTCgT8kDNbgljaHPwY1Nr_Cog0L5qf_oHaZEyPNtRhUAAAAAPtOMwBnCQAAIQkAAAIAAAAfXScBhmAHAAAAAQBVU0QAVVNEANQBPAChgwAAMo0AAgUAAQIAAJQAPSaenwAAAAA./cnd=!ygUVNwjIkbkCEJ-6nQkYhsEdIAI./referrer=webmail.libero.it/clickenc=http://4.track404od.com/d/.../fra1CObP_ofqruaJIxACGIbq2Pmr2OiGCyINOTUuMjM1LjQ5LjE1NigBMM3r4qAF  (setup.exe)

2 / 68      (PUP)
http://fra1.ib.adnxs.com/click?eHs_GrNEqj94ez8as0SqP1K4HoXrUeg_eHs_GrNEqj94ez8as0SqP5GCt-259cAaFvjnEvU0_TMj8qlTAAAAAC2HLQB2AgAAdgIAAAIAAADyBegA-7oGAAAAAQBVU0QAVVNEACwB-gAICAAAnMsAAgQAAQIAAJIA8CYrRgAAAAA./cnd=!mwaHOwiIm_QBEPKLoAcY-_UaIAQ./referrer=http://danipenet.ro/jocuri/soraluidanipenet/soraluidanipenet.html/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=fra1CJbwn5fRns3-MxACGJGF3u2et73gGiILNS4xMy45My4yMjAoATCj5KedBQ..&lplink=http://www.yac.mx/download/.../down.php?pt=broe  (yet_another_cleaner_glp.exe)

1 / 68      (Malware)
http://fra1.ib.adnxs.com/click?eomxTL9Eyj96ibFMv0TKP2Q730-Nl-Y_eomxTL9Eyj96ibFMv0TKP38e69KfKENEzyG5Mc7YO3MCKzNTAAAAAN2_IgB2AgAAdgIAAAIAAADEDcYA-7QFAAAAAQBVU0QAVVNEACADuAHktwAADtoAAgQCAQIAAIwAmig5DQAAAAA./cnd=!agZsOgiqrcYBEMSbmAYY--kWIAQ./referrer=http://ads1.qadabra.com/t?id=76ccfb96-b2b9-44bd-a9ad-a12ef1955807&size=800x440&iframe=true&a=1/clickenc=http://.../direct-download.html?version=1.1.7.40&ci=6147&capp=MediaPlayer&ti1=fra1CM_D5I3jmfadcxACGP-8rJf9k8qhRCINNzguMTYwLjEwOS4xOSgBMILWzJkF&ti2=PMZ&ti3=2277341  (flashplayersetup__6145_i493024560_il125.exe)

1 / 68      (PUP)
http://fra1.ib.adnxs.com/click?pvedvjJvpT-HOYcglJygP76fGi_dJN4_hzmHIJScoD-m952-Mm-lP46QFC04-EteDwmRfXHh5SzXGJ9TAAAAAOKwJQCqBwAAdgIAAAIAAAC-DcYAweoFAAAAAQBVU0QAVVNEACwB-gD5DQAAL4sAAgUAAQIAAIgAwic7yAAAAAA./cnd=!QAZtOwj2iMsBEL6bmAYYwdUXIAE./referrer=http://yalla-shoot.com/live/3648/germany-vs-portugal.html/clickenc=http://a.ad-sys.com/c/click?tenant=ad&context=LqOPtmbfswtzCwSAPYaCoaFgbGha_FOaDzas-V__JEbaidQbyAPGK-rtjObOWO10jpAmWG0aA0tdaeaaidAajA1tjpGmAaGmt9aqkaTWUnpn3IpDl5ZrLSndcpWTD4QU144XykD798lR61lVDe_JnhaGKgOesajedqv6aPfZKhodyuvPwSxrzi4vRIbqHrDdong4kyUQ0C7Qil4IX8Wc8IEIr8ArLsXrgyQjJO7diJMHnUMMtBLChaUoy4YhPWYEGU-vZdpLZdE6-R8E6ZGiEmjfyW7c0JcN0vazDfEl9DPas6CmVSt3FOOHodKXSybrR3vfuU9C1KXgEPYcKIfxeRVPSEgsxXsNsf-KWOrHZ4NT0yAK5gq8bkfI0KcEsLm0hKLjqNxBOWLHeek4AaK6RPpb_kDuFt_YU4i5WPsOngzwUua&fwd=&log_click_as=click~~~http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=fra1CI-SxOyXrvjyLBACGI6h0uiCh_6lXiINMTc2LjQzLjIz  (flashplayersetup__6145_i882911298_il974.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?zgmSu1v-eT8GPNAo7GR3P0Ck374O3ARABjzQKOxkdz_OCZK7W_55P_co82Yrnx1_5OafEIe7uHfbSYZTAAAAAJV9KAC2BwAAzgIAAAIAAAAjh4wA5k0GAAAAAQBVU0QAVVNEANgCWgBMCAAAqYwAAgUAAQIAAJAAxyeizAAAAAA./cnd=!pQW6MwilhaYBEKOOsgQY5psZIAI./referrer=http://www.austriahungary.info/en/gazetteer1900/clickenc=http://cnct.tlvmedia.com/ckl.php?s=1&c=fra1COTN_4Tx8K7cdxACGPfRzLe25eeOfyINOTMuODYuMjQ2LjEzMSgBMNuTmZwF&mx=anx&t=adv191352&d=145258&r=http://mbttd.com/engine/.../c4c3VwcGx5X3BsYXRmb3JtX2FjY291bnRfaWQ9NDI1JnN1cHBseV9wbGF0Zm9ybV9pZD00OTEmbGluZV9pdGVtX2lkPTk4MDU?ext_click_id=$CLICKID$  (install-flashplayer.exe)

18 / 68    (Adware)
http://fra1.ib.adnxs.com/click?D3uhgO1g5j8Pe6GA7WDmP2ZmZmZmZvY_D3uhgO1g5j8Pe6GA7WDmP4fXKWwF75EBReQBneXKvWW-liRTAAAAAGawHwB2AgAAdgIAAAIAAABopLwA1ioFAAAAAQBVU0QAVVNEACwB-gBG0AAADNoAAgQCAQIAAIoAbygLDQAAAAA./cnd=!xwYjPgiLybgBEOjI8gUY1tUUIAM./referrer=http://cdn.sharedaddomain.com/slider_anchored_300x250_284.htm?cat=101,298&clientId=0bcdec42-1cde-4699-96f3-f9f8e29cf3cd&l=http://www.megacinema.fr/sexy-a-tout-prix-play/?ptn=cashtrafic&t2c=a0a1197b00852819f5811254d54814037559&utm_source=157&utm_medium=1-3&utm_campaign=8267-1&utm_term=13540&utm_content=52676&subid=18426534381394906807&r=http://www.adcash.com/script/pop_packcpm.php?k=532496b73d5c1320641.504693&h=781bbfa4591bb77a39dd120756ec484f93e21844&id=0&ban=320641&r=195299&ref=h&data=&subid=&new=1/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5221&capp=FlashPlayer&ti1=fra1CMXIh-jZ3PLeZRACGIevp-HW4PvIASIPMTA5LjIxMi4xNjgu  (flashplayersetup__6636_i435221884_il8.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?Kij-OLNNoj8gAhkSjEyfP7gehetRuL4_IAIZEoxMnz8rKP44s02iP8YkACCdxD1LnDN6pBH2FH_VWOpTAAAAAGstIABfAAAA_AcAAAIAAAD7NwIB2n0DAAAAAQBVU0QAVVNEANgCWgDS6AAA38oAAgUAAQIAAIoAuSONtgAAAAA./cnd=!xQZ9Pgi_t6ACEPvviAgY2vsNIAA./referrer=http://www.gaugemaster.com//clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=2108779&clickid=UAT_fra1CJzn6KOawr2KfxACGMbJgIDSk_GeSyILMi4yNy41Mi4xOTIoATDVsamfBQ..  (setup.exe)

1 / 68      (Malware)
http://fra1.ib.adnxs.com/click?ehSuR-F6hD8yVTAqqROAP7TIdr6fGt8_MlUwKqkTgD97FK5H4XqEP5zgfBIL_BAzuYYgTdF_ilfcUXhTAAAAANNXJwAIBgAAdgIAAAIAAAAtbL0ABSYGAAAAAQBVU0QAVVNEACwB-gDdBgAA49kAAgUAAQIAAJAARSN7IAAAAAA./cnd=!fQbCPQi1n-8BEK3Y9QUYhcwYIAA./referrer=http://rzr.tractionize.com/WLBidRequestHandler?width=300&height=250&pubid=1700&noaop=1&tagid=1047&revmod=GR&born=INSERT_BORN&Prof=INSERT_PROFILE&BTF=INSERT_BTF&cb=85623091854&encoded=1&pstn=1&cirf=http://www.onet.pl//clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5561&capp=FlashPlayer&ti1=fra1CLmNgumU-p_FVxACGJzB85Oxgb-IMyIONzkuMTc1LjIxNS4yMTkoATDco-GbBQ..&ti2=2578387&ti3=${APN}  (flashplayersetup__5462_i690512414_il27.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?H3JZMVDCuz8K16NwPQq3PwrXo3A9Crc_4Nz9dgqpvj9xJTN_VnjCP4PZFbPOOvsQ5fKj3ylmRAVcD_lTAAAAADSVJwCTBwAA_AcAAAIAAAAVOAIBwS4GAAAAAQBVU0QAVVNEAKAAWAJQ5AAAsswAAgUAAQIAAI4AkCXs6wAAAAA./cnd=!FQbsNwiktp0CEJXwiAgYwd0YIAA./referrer=http://ib.adnxs.com/tt?size=160x600&cb=2259185&id=2594100/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=2594100&clickid=UAT_fra1COXlj_2dxZmiBRACGIOz15jr2c79ECINNzcuMTAyLjM4LjE1MigBMNye5J8F  (installation.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?ZmZmZmZm5j9kO99PjZfiP2Dl0CLb-e4_ZDvfT42X4j9mZmZmZmbmP4qndP0R6NEXxlwrfNvyNBysfBxUAAAAAG4HNQCTBwAAdgIAAAIAAACrTCcBrrEHAAAAAQBVU0QAVVNEACwB-gBKMwAAt8oAAgUAAQIAAJQATyjJJgAAAAA./cnd=!BwbtNwiF2rwCEKuZnQkYruMeIAA./referrer=http://www.jet2holidays.com/free-child-place-finder/beach/15-sep-2014/flexibility-0/7-nights/leeds-bradford,manchester/any/any/any/any/any/[{adults:2,children:1,ages:5}]/true//clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-GB-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=fra1CMa5reG327yaHBACGIrP0uufgvroFyINNzcuOTcuMTU5LjEyNigBMKz58aAF  (flashplayerpro_setup.exe)

1 / 68      (PUP)
http://fra1.ib.adnxs.com/click?OOS0J2uBlj-VGf83-q2SP6jGSzeJQeQ_lRn_N_qtkj845LQna4GWP4Dku0_3BYJa8zGUu1m2HmAZwXdTAAAAAMvYKACTBwAAdgIAAAIAAAC-DcYAa1cGAAAAAQBVU0QAVVNEACwB-gDSDAAAMMsAAgUAAQIAAJAAmyhhOAAAAAA./cnd=!9QXuNgickcwBEL6bmAYY664ZIAE./referrer=http://www.e-bebek.com/firsat-bu-firsat?instock=1/clickenc=http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=fra1CPPj0Nyby62PYBACGIDJ7_30voHBWiINODguMjMxLjkxLjE4MCgBMJmC35sF&ti2=PMZ&ti3=2676939  (flashplayersetup__6145_i688494405_il126.exe)

18 / 68    (Adware)
http://fra1.ib.adnxs.com/click?26LMBpmk8T_boswGmaTxP2ZmZmZmZvY_26LMBpmk8T_boswGmaTxPxHCorhr6bspnNGJ0uwZbW5fTiRTAAAAAGawHwB2AgAAdgIAAAIAAABopLwA1ioFAAAAAQBVU0QAVVNEACwB-gBG0AAAscwAAgQCAQIAAIoA1ytfVwAAAAA./cnd=!xwYjPgiLybgBEOjI8gUY1tUUIAM./referrer=http://cdn.sharedaddomain.com/slider_anchored_300x250_284.htm?cat=21&clientId=6dc31a62-388c-42f1-b671-b2bd39d4eaa3&l=http://www.mundijeux.fr/?showregister&&utm_source=Google&utm_medium=Search&utm_campaign=Google_FR_Generic&utm_term=aka003114&gclid=CI6xt-TLlL0CFagKwwodRbkAJg&r=http://www.google.com/.../afs?q=jeux de fille&client=aj-fot&channel=101700,geo-FR,brow_Chrome,sp_testWB,lang_fr,test_15608&hl=fr&adtest=off&adsafe=medium&r=m&lo=true&adpage=1&adrep=3&po=true&oe=UTF-8&ie=UTF-8&fexp=21404,7000107&jsei=3&format=p7|n3|pn5&ad=n3p7pn5&nocache=211394888275775&num=0&output=uds_ads_only%2  (flashplayersetup__6636_i435221884_il8.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?AAAAAAAA4D-QwvUoXI_aP3Noke18P-U_kML1KFyP2j8AAAAAAADgP-OU-ixZEDlt4A5gTeozUENHHThUAAAAAG4HNQCTBwAAdgIAAAIAAACrTCcBwZcHAAAAAQBVU0QAVVNEACwB-gA2HwAA-ooAAgUAAQIAAJYA-SD6WgAAAAA./cnd=!5gV8NwiF2rwCEKuZnQkYwa8eIAA./referrer=http://2dlsmrtddl.maynemyltf.netdna-cdn.com/v2/page_89/v10/index.html?sub=w0879LKF839G2P5FG1QO0D0E/clickenc=http://adserver0f2e7enext.com/.../serve?c=marimedia&s=marimedia_lightspark-gb-ddl-cpa&ce_cid=fra1COCdgOuk_YyoQxACGOOp6ueSi8ScbSIMOTIuMjguMjEuMTUzKAEwx7rgoQU.  (flashplayerpro_setup.exe)

1 / 68      (PUP)
http://fra1.ib.adnxs.com/click?nYvrKP33dj8DrTczl2hzP_YoXI_C9dg_A603M5docz-di-so_fd2P0ZVU5BE-lV6V3StT-2bsH5eJpNTAAAAAFiEJgDIAQAAdgIAAAIAAADyBegArJoGAAAAAQBVU0QAVVNEACwB-gCj_wAAiswAAQUAAQIAAI4ApyntMAAAAAA./cnd=!BwbpOAiHm_QBEPKLoAcYrLUaIAA./referrer=http://www.bixi.ro/2337-trenul_cu_fructe.html/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=fra1CNfotf3U_abYfhACGMaqzYLJyP6qeiIOMjEzLjIzMy45MC4xMDAoATDezMycBQ..&lplink=http://www.yac.mx/download/.../down.php?pt=broe  (yet_another_cleaner_glp.exe)

18 / 68    (Adware)
http://fra1.ib.adnxs.com/click?QiECDqHK8j9CIQIOocryPwAAAAAAAPg_QiECDqHK8j9CIQIOocryP0-wQZ-GUzs90hTLQ4A4XU68MRZTAAAAAGawHwB2AgAAdgIAAAIAAABopLwA1ioFAAAAAQBVU0QAVVNEACwB-gBG0AAAV9QAAgQCAQIAAIoAGyBnpgAAAAA./cnd=!xwYjPgiLybgBEOjI8gUY1tUUIAM./referrer=http://cdn.sharedaddomain.com/slider_anchored_300x250_284.htm?cat=21,298&clientId=d4c61f3b-3760-40ce-a5b0-588a0ff6fafe&l=http://www.monsterhigh.com/fr-fr/index.html#&r=http://www.monsterhigh.com/fr-fr/index.html&kw=monster high, school, videos, monster games, ghost, activities, kids, girls, dolls/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5221&capp=FlashPlayer&ti1=fra1CNKprJ6EkM6uThACGM_ghvrp8NSdPSIMOTEuOTEuMzIuMTM5KAEwvOPYmAU.&ti2=2076774&ti3=${APN}  (fast file downloader__3338_i404923439_il179177.exe)

1 / 68      (Malware)
http://fra1.ib.adnxs.com/click?xT5febiaoz-xB7pVBGOeP6rx0k1iEKg_sQe6VQRjnj_FPl95uJqjP6A8icfZ8RsrRGtPbXtNzmZ7DslTAAAAAHMKJQCZBwAAdgIAAAIAAACs3c8AF9cFAAAAAQBVU0QAVVNEACwB-gBzDwAATowAAgUAAQIAAI4AiyXxIAAAAAA./cnd=!4gUvOAjMt4QCEKy7vwYYl64XIAA./referrer=http://www.youtube.com/watch?annotation_id=annotation_3955213601/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=fra1CMTWveq2r5PnZhACGKD5pLycu_yNKyIMOTEuMjA1LjEzMS4zKAEw-5ykngU.&ti2=2427507&ti3=${APN}  (flashplayersetup__5462_i1057105754_il34.exe)

12 / 68    (Adware)
http://fra1.ib.adnxs.com/click?p3fxfty-8z-nd_F-3L7zPwAAAAAAAPg_p3fxfty-8z-nd_F-3L7zP_acqs_eaZUtJsvSDs4TOXUMVxBTAAAAAGawHwB2AgAAdgIAAAIAAABopLwA1ioFAAAAAQBVU0QAVVNEACwB-gBG0AAAvo0AAgQCAQIAAIoAwCoBFQAAAAA./cnd=!xwYjPgiLybgBEOjI8gUY1tUUIAM./referrer=http://cdn.sharedaddomain.com/slider_anchored_300x250_284.htm?cat=107,302,7870&clientId=4f511835-b8ac-401f-85dd-3bfa0b46263e&l=http://www.sfr.fr/?sfrcpid=t1_marq-exacte_g_ls&sissr=1&r=http://www.google.fr/aclk?sa=l&ai=CCWYgAVcQU7KcI8OH7gb0y4DwDOCyqdME-LavjI0B0p6SFQgAEAEgmajZHlCwo8b7B2D7qe-C9AmgAej2kv4DyAEBqQIFbA4m-gK3PqoEH0_QV2jkhePGgVnBhy9x8Xw9uf18zcyUrXO6bx96tpCABZBOugUTCNPb65zB7rwCFYMZ4Qod0g4A3coFAIAHgIntAZAHAw&ei=AVcQU5PXH4OzhAfSnYDoDQ&sig=AOD64_1LoKDnbo8a9BAdgemDc6oVuVkjkA&rct=j&q=sfr&sqi=2&ved=0CC4Q0Qw&adurl=http://dms.netmng.com/si/cm/.../clickredirect.aspx?sidevicemodel=&sidevice=c&siplacement=&simobile=&sinetwork=g%  (launcher__3338_i395140339_il689050.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?ZmZmZmZm5j9kO99PjZfiP76fGi_dJPA_ZDvfT42X4j9mZmZmZmbmP2bD7OcXJnMF2kU_nsjN3kOi0x1UAAAAAG4HNQCTBwAAdgIAAAIAAACrTCcBwZcHAAAAAQBVU0QAVVNEACwB-gBKMwAAecoAAgUAAQIAAJQA8CbKmQAAAAA./cnd=!5gV8NwiF2rwCEKuZnQkYwa8eIAA./referrer=http://www.sonicgames.cc//clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-GB-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=fra1CNqL_fGJubPvQxACGOaGs7_-wsm5BSINOTAuMjAxLjQ5LjE5NSgBMKKn96AF  (flashplayerpro_setup.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?-60IfGJi6D9dufLmLT3kP_yp8dJNYvA_Xbny5i095D_7rQh8YmLoP3C-NfznAKMV2kU_nsjN3kOj0x1UAAAAAIIHNQCTBwAAdgIAAAIAAACrTCcBwZcHAAAAAQBVU0QAVVNEACwB-gBKMwAA69MAAgUAAQIAAJQAKysWOQAAAAA./cnd=!SQZbPQjp6qsCEKuZnQkYwa8eIAA./referrer=http://www.sonicgames.cc//clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-GB-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=fra1CNqL_fGJubPvQxACGPD81uH_nMDRFSINOTAuMjAxLjQ5LjE5NSgBMKOn96AF  (flashplayerpro_setup.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?uB6F61G4nj9Wfa62Yn-ZP-kmMQisHNI_Vn2utmJ_mT-4HoXrUbieP8hXlUiVT0hdIXrICVoTURykXBBVAAAAAETTQgDIAQAA7QgAAAIAAAChwJ0B0K8HAAAAAQBVU0QAVVNEANgCWgB_vwAAc80AAgUAAQIAAJwAWSdLaAAAAAA./cnd=!hQZyPAjbkNQDEKGB9wwY0N8eIAA./referrer=http://www.handelsbanken.se/clickenc=http://clickeu.semantichelper.com/st?cipid=168190&ttype=1&crid=3570258&dast=c2xpZD0wJmJyc3I9Mzg0MSZjdTQ9MCZjaWNtcD01ODA1MTgmY2lzaWQ9QjAyRTRBREU2NDcxNDc1MTQ0OTI4MDYyNCZjaXVpZD04MTg3MjA1ODQ0MDc0MjA4NjE1JnB1YmlkPTk3MDAmY2lwaWQ9MTY4MTkwJmNpcmlkPUIwMkU0QURFNjQ3MTQ3NjEyOTY3MzY1OTUmb3NpZD01MzUmYm89MSZzdWJpZD0xMDM3Jm1tdD0tMSZjbnRyeT0yMDYmc289MSZjcmlkPTM1NzAyNTgmZXhjaWQ9MjI=&cmcv=${CMCV}&tgtf=http://.../down.php?p=KDS&trckid=fra1CKH0oc6g68SoHBACGMiv1cTU8pOkXSINODkuMTYwLjgxLjIzNCgBMKS5wagF  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?Pfp1f8FWhz9WCJWPbxaCP1pkO99PjZc_VgiVj28Wgj8--nV_wVaHP3Sjye-etmEHKueTQ_iiJCMDnxBUAAAAADyEKgByBwAAdgIAAAIAAACNASYBg48GAAAAAQBVU0QAVVNEANgCWgDBMQAAqtoAAgUAAQIAAJIATiTckAAAAAA./cnd=!DQWXLwiKibkCEI2DmAkYg58aIAE./referrer=http://cdn.sharedaddomain.com/ancbanner_general4_728x90_195.htm?cat=48,101&clientId=a020161a-d4d8-4a4f-a627-8270eec7dbc6&l=http://www.findsmarter.ru/web?q=почта на яндексе&sq=яндекса почта&r=http://www.findsmarter.ru/web?ts=go&q=яндекса почта/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=fra1CKrOz5yE36iSIxACGPTG  (flashplayersetup__5462_i1291976496_il77.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?lyCROLwSij91rKN46zSEPxsv3SQGgZU_dayjeOs0hD-XIJE4vBKKP_y0InWwzM0dKueTQ_iiJCPJ4BVUAAAAADyEKgByBwAAdgIAAAIAAACNASYBg48GAAAAAQBVU0QAVVNEANgCWgDBMQAAPs0AAgUAAQIAAJIA6CRb0wAAAAA./cnd=!DQWXLwiKibkCEI2DmAkYg58aIAE./referrer=http://cdn.sharedaddomain.com/ancbanner_general4_728x90_195.htm?cat=45,46,107&clientId=a020161a-d4d8-4a4f-a627-8270eec7dbc6&l=http://my.mail.ru/mail/mihail1966s/photo/&r=&kw=??????????, ???? ?????????, ??????, ????, ???????, ????? ?????, ?????, ????????????, ?????????????, /clickenc=http://www.new-  (flashplayersetup__5462_i1308159814_il77.exe)

2 / 68      (PUP)
http://fra1.ib.adnxs.com/click?l5XpQLNNjD8Kt2Vh7n2HPyGwcmiR7cw_CrdlYe59hz-WlelAs02MP6n7P17Zr_dMru6G3-rEo2NsnqBTAAAAAMDoKQCTBwAAdgIAAAIAAADQ6OYA4n0GAAAAAQBVU0QAVVNEACwB-gBbVgAAGMwAAgUAAQIAAJAAuSzISQAAAAA./cnd=!2wZsPwjBm_QBENDRmwcY4vsZIAA./referrer=http://tvnwarszawa.tvn24.pl/informacje,news,diabel-w-warszawie-br-zobacz-trailer-filmu-kick,126044.html/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=fra1CK7dm_ytnfHRYxACGKn3__GV--v7TCINNzkuMTg1LjE5Ny4zOSgBMOy8gp0F&lplink=http://www.yac.mx/download/.../down.php?pt=broe  (yet_another_cleaner_reh.exe)

17 / 68    (Adware)
http://fra1.ib.adnxs.com/click?p6rDE3CIfT_-v9IOVCZ2P4lBYOXQIqs__r_SDlQmdj-nqsMTcIh9P4rcMD5ZnDNKW1TLGMApaQ7vIPNTAAAAABFvLwByBwAArwcAAAIAAACcYdUAg48GAAAAAQBVU0QAVVNEACwB-gD8VwAAgNoAAgUAAQIAAJIA2iaCYQAAAAA./cnd=!TQbUPgj68pcCEJzD1QYYg58aIAE./referrer=http://yandex.ua/video/search?text=?/? ???? ??????? ? ????? ???? 3/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=fra1CNuorcaBuMq0DhACGIq5w_GTi-eZSiIMMTc4LjkyLjcuMTAxKAEw78HMnwU.&ti2=SBZ&ti3=3108625  (flashplayer__6114_i1193628804_il28.exe)

1 / 68      (Adware)
http://fra1.ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAANXWAk3MIrFhW1TLGMApaQ4A1gpUAAAAALvkMwByBwAArwcAAAIAAACcYdUA7VAGAAAAAQBVU0QAVVNEACwB-gBxyQAAXowAAgUAAQIAAJQAKhVr2wAAAAA./cnd=!UgbcOgihz6wCEJzD1QYY7aEZIAI./referrer=http://altabar.ru/clickenc=http://clickeu.tractionize.com/st?cipid=227010&ttype=1&crid=2506368&dast=Ym89MSZzbGlkPTAmc3ViaWQ9MTAwOSZzbz0xJmNpY21wPTcyMjU4JnB1YmlkPTkzMDAmY2lwaWQ9MjI3MDEwJmNpc2lkPUE3QTI0NUQ0MTIxMTg0Mzk3Mzk1NTg4MDQ0JmNpcmlkPUE3QTI0NUQ0MTIxMTg0Mzk4NjgxMDA4NzMyJmNpdWlkPS02OTEyNzEzMTMwNDIwOTc0OTc0JmNyaWQ9MjUwNjM2OCZleGNpZD0yMiZtbXQ9LTEmY250cnk9MjI0&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=fra1CNuorcaBuMq0DhACGNWti-jE2cjYYSINNDYuMjAxLjIzNi43NSgBMICsq6AF&ti2=SBZ&ti3=3400891  (tvapp__8821_i1271002095_il24.exe)

1 / 68      (PUP)
http://fra1.ib.adnxs.com/click?wuEFyDtr2T_C4QXIO2vZP5qZmZmZmdk_wuEFyDtr2T_C4QXIO2vZP5qppSggb7xLn-i9iPQC-1fn1x1UAAAAABLtGwB2AgAAdgIAAAIAAADHBvkAwZ8EAAAAAQBVU0QAVVNEANgCWgDs4wAACsoAAgQAAQIAAIgAyCsyGwAAAAA./cnd=!YAYyPAiq17cCEMeN5AcYwb8SIAQ./referrer=http://img.df-stream.net/df/iframe_4.1.html/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=fra1CJ_R98XI3sD9VxACGJrTlsWC5JveSyILMi4xMzkuMjEuNjcoATDnr_egBQ..&lplink=http://www.yac.mx/download/.../down.php?pt=broe  (yet_another_cleaner_broe.exe)

 
Latest 30 of 103 download URLs

The following 69 files have been seen to comunicate with fra1.ib.adnxs.com in live environments.

TCP » 37.252.171.1:21
file6.exe

TCP » 37.252.170.1:80
CyberGhost.exe (CyberGhost VPN 5 by CyberGhost S.R.L)

TCP » 37.252.170.1:80
mysearchs.exe (by Pay By Ads)

TCP » 37.252.170.10:80
paltalk.exe (Paltalk Messenger by AVM Software)

TCP » 37.252.170.10:80
jingling.exe

TCP » 37.252.170.101:80
vxhost.exe (vm file module)

TCP » 37.252.170.102:80
1b4cebe3-f952-4482-8ca2-0c9dd2b0db70.exe (Google Chrome by Google Chrome Inc)

TCP » 37.252.170.103:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 37.252.170.103:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 37.252.170.105:80
Desk365.exe (Desk 365 by 337 Technology Limited)

TCP » 37.252.170.106:80
vxhost.exe (windows player)

TCP » 37.252.170.107:80
Client.exe

TCP » 37.252.170.111:80
paltalk.exe (Paltalk Messenger by AVM Software)

TCP » 37.252.170.111:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 37.252.170.113:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 37.252.170.117:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 37.252.170.118:80
q7dt179.exe

TCP » 37.252.170.119:80
vmhost.exe (vm file module)

TCP » 37.252.170.120:80
drpanel.exe

TCP » 37.252.170.121:80
drpanel.exe

 
Latest 20 of 113 files

URL:
http://fra1.ib.adnxs.com/

Google Analytics:
UA-4057742

Title:
“error page for redirects from product”

Web server:
Apache/2.2.22 (Ubuntu)

aim4media.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.