home

secure-lax.adnxs.com

AppNexus Inc

Domain Information

The domain secure-lax.adnxs.com registered by AppNexus Inc was initially registered in May of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Los Angeles, California within the United States which resides on the AppNexus, Inc network.
Registrar:
MARKMONITOR INC.

Server location:
California, United States (US)

Create date:
Tuesday, May 27, 2008

Expires date:
Friday, May 27, 2016

Updated date:
Saturday, April 26, 2014

ASN:
AS29990 ASN-APPNEXUS - AppNexus, Inc,US

Root domain:
adnxs.com

Whois:
1 adnxs.com record

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.X, PUP.Installer.Stepitapp.F, PUP.Optional.ReimageLimited.N, PUP.Installer.Wilmaonline.CC, PUP.Softpulse.SoftpulseSl.Bundler (M), PUP.Adknowledge.FileMonarch.Bundler (M), PUP.Adknowledge.INSTALLTHIS.Installer (M), PUP.Brightcircle.Wilmaonline.Bundler (M), PUP.Adknowledge.Liquidbu.Bundler (M), PUP.Outbrowse.Bundler (M), Threat.Win.Reputation.IMP, PUP.Adknowledge.FileMona.Bundler (M), PUP.Adknowledge.Liquidbu.Installer (M), PUP.Softpulse.Bundler (M), PUP.Adknowledge.WARPINST.Bundler (M), PUP.installCore.Compiler.Installer (M), PUP.Adknowledge.BootComp.Installer (M), PUP.Adknowledge.INSTALLT.Installer (M), PUP.Brightcircle.Wilmaonl.Bundler (M), PUP.Adknowledge.BuildInp.Bundler (M), PUP.Adknowledge.OverallM.Installer (M), PUP.Adknowledge (M), PUP.Softpulse (M)
97.92%

Panda Antivirus
Trj/Chgt.A, Suspicious file, Trj/Chgt.F, Trj/Genetic.gen, Trj/Chgt.I, PUP/iBryte
20.83%

Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.iBryte, HEUR:Trojan.Win32.Generic
18.75%

VIPRE Antivirus
Conduit, Trojan.Win32.Generic, Threat.4778314, Threat.4150696, Optimum Installer
18.75%

Vba32 AntiVirus
Downloader.Agent, AdWare.Amonetize, AdWare.iBryte
18.75%

McAfee
Artemis!8A2ED863690C, Artemis!17FD46A07B73, PUP-Amonetize, Artemis!0FF2B0F7AD04, Trojan.Artemis!DF0CA657827D, Trojan.Artemis!D06D84983289
18.75%

Trend Micro House Call
Suspicious_GEN.F47V0620, TROJ_GEN.F47V0730, TROJ_GEN.F47V0516, TROJ_GEN.F0C2H00I314, TROJ_CLIKUG.A, Suspicious_GEN.F47V0717
18.75%

Fortinet FortiGate
Riskware/Agent, Adware/Amonetize, W32/Malware_fam.NB, Riskware/Generic.AC.13751, W32/Zbot.AAN!tr
18.75%

Qihoo 360 Security
HEUR/Malware.QVM03.Gen, Malware.Radar03.Gen, Win32/Virus.Downloader.8e5, Win32/Application.c7d, Malware.QVM10.Gen
18.75%

Dr.Web
Adware.Plugin.171, Adware.Downware.5822, Adware.Downware.8331, Trojan.DownLoader11.31105, Trojan.Packed.28222, Adware.Downware.6099, Adware.iBryte.473
18.75%

G Data
Win32.Application.VMDetect, Win32.Trojan.Agent.4P134N, Gen:Variant.Application.Bundler.Amonetize.12, Trojan.GenericKD.1618449
18.75%

avast!
Win32:Dropper-gen [Drp], Win32:Amonetize-DI [PUP], Win32:PUP-gen [PUP], Win32:IBryte-DQ [PUP], Win32:IBryte-DY [PUP]
16.67%

Quick Heal
Downloader.Agent.r3 (Not a Virus), TrojanDownloader.Badur.A5, Adware.iBryte.DK4
14.58%

IKARUS anti.virus
Trojan.Win32.Agent, AdWare.Amonetize, Trojan.Win32.Buzus, AdWare.AdPlugin, PUA.PremiumInstaller
14.58%

Baidu Antivirus
Hacktool.Win32.Downloader, Adware.Win32.Amonetize, Trojan.Win32.Clikug
8.33%

The domain secure-lax.adnxs.com has been seen to resolve to the following 175 IP addresses.

104.254.150.11
143.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

104.254.150.4
144.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

104.254.150.79
176.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

104.254.150.77
177.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

104.254.150.59
146.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

104.254.150.58
145.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

104.254.150.37
142.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

104.254.150.21
147.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net
September 14, 2016

68.67.129.193
float.2891.bm-impbus.prod.lax1.adnexus.net
September 1, 2016

68.67.129.20
float.2181.bm-impbus.prod.lax1.adnexus.net
August 26, 2016

68.67.129.130
float.2881.bm-impbus.prod.lax1.adnexus.net
August 24, 2016

68.67.128.22
float.1420.bm-impbus.prod.lax1.adnexus.net
August 24, 2016

68.67.129.129
float.2880.bm-impbus.prod.lax1.adnexus.net
August 23, 2016

68.67.129.35
float.2165.bm-impbus.prod.lax1.adnexus.net
August 23, 2016

68.67.128.98
float.1604.bm-impbus.prod.lax1.adnexus.net
August 23, 2016

68.67.129.64
float.2493.bm-impbus.prod.lax1.adnexus.net
August 22, 2016

68.67.128.174
float.1663.bm-impbus.prod.lax1.adnexus.net
August 13, 2016

68.67.128.29
float.1426.bm-impbus.prod.lax1.adnexus.net
August 11, 2016

68.67.129.195
float.2892.bm-impbus.prod.lax1.adnexus.net
August 11, 2016

68.67.129.107
float.2506.bm-impbus.prod.lax1.adnexus.net
August 11, 2016

68.67.128.83
float.1568.bm-impbus.prod.lax1.adnexus.net
August 10, 2016

68.67.129.176
float.2865.bm-impbus.prod.lax1.adnexus.net
August 10, 2016

68.67.128.154
August 6, 2016

68.67.129.185
float.2871.bm-impbus.prod.lax1.adnexus.net
August 6, 2016

68.67.129.36
float.2309.bm-impbus.prod.lax1.adnexus.net
August 6, 2016

68.67.129.120
float.2505.bm-impbus.prod.lax1.adnexus.net
August 5, 2016

68.67.128.104
float.2181.bm-impbus.prod.lax1.adnexus.net
August 3, 2016

68.67.129.66
float.2495.bm-impbus.prod.lax1.adnexus.net
July 26, 2016

68.67.129.175
float.2866.bm-impbus.prod.lax1.adnexus.net
July 15, 2016

68.67.129.105
float.2393.bm-impbus.prod.lax1.adnexus.net
July 15, 2016

 
Showing 30 of 175 IP Addresses

File downloads found at URLs served by secure-lax.adnxs.com.

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?oDohA2Njoj8cwbrgyNiaPwrXo3A9Cu8_HMG64MjYmj-fOiEDY2OiPx8rATO0LtwGIfaaceQGJSQbLBZVAAAAAOY_RQDaBgAAdAoAAAIAAAAXtaEBIY0GAAAAAQBVU0QAVVNEACwB-gC3RgAAg64AAgUAAQIAAJ4AniMwagAAAAA./cnd=!DQYnOwjmkdkDEJfqhg0YoZoaIAA./referrer=https://secure.wntg2x.com/serve?zoneid=13702313&pid=1748&pl=below&ch=row&sec=secure&size=300x250/clickenc=http://.../?a=19871&c=58197&s1=APN&s2=lax1CKHs64zH3MGSJBACGJ_WhJjD1ovuBiIMNjguMjI5LjE5Mi4zKAEwm9jYqAU.  (player setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?MaXtOmtJ5D9U46WbxCDgP1TjpZvEIOA_Frp-1bgI-D9VVBPhRTv-P9K0bHUbZx9Yex5Qkqfu8jA6PN1TAAAAAEwZKgChBgAAdgIAAAIAAAANUAEBBIUGAAAAAQBVU0QAVVNEANgCWgC3pQAAqr4AAgUAAQIAAJIAgCYxoQAAAAA./cnd=!DgWIMAiKu5QCEI2ghQgYhIoaIAA./referrer=http://download.radiorage.com//clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CPu8wJL51Lv5MBACGNLpsqu349mPWCIOOTkuMTI2LjExMi4xNTIoATC6-PSeBQ..  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?B3VY1zsy1T9mqTa657LRP8uhRbbz_bQ_Zqk2uuey0T8IdVjXOzLVP4lS9I8PAL9hxY4myrulpVmZPQpUAAAAAGImLgDIAQAAdgIAAAIAAACNqhoBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAAPrsAAgUAAQIAAJIASSgHNAAAAAA./cnd=!kQY9PQjG1pMCEI3V6ggY87IWIAA./referrer=secure.imp-serving.com/clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CMWdmtG8t-nSWRACGIml0f_4gcDfYSILMTc0LjE3LjMuMTkoATCZ-6igBQ..  (flashplayerpro_setup.exe)

31 / 68    (Adware)
https://secure-lax.adnxs.com/click?LWUz2RxPzT9FAGRmES7IPwAAAAAAAPA_RQBkZhEuyD8sZTPZHE_NP_RNFRwFB1Nw_B4BLcYnmiojtfxTAAAAAHQNNAB2AgAArwcAAAIAAADvQNMALTwHAAAAAQBVU0QAVVNEACwB-gBlDAAAlLsAAgUAAQIAAJQAGR1PtAAAAAA./cnd=!SgZEOQiEw6sCEO-BzQYYrfgcIAE./referrer=https://www.youtube.com/watch/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=lax1CPy9hOji-InNKhACGPSb1eDR4MGpcCILNzAuNTYuOTAuNDAoATCj6vKfBQ..&ti2=SBZ&ti3=3411316  (tvapp__8821_i1224367759_il13.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?4gwIJXeK1j_sUbgehevRP-xRuB6F69E_ky525dsN6z-A3mDa4gPxP7Fz07q37UM8W4wugiUiWXipJMtTAAAAAEwZKgChBgAAdgIAAAIAAAANUAEBBIUGAAAAAQBVU0QAVVNEANgCWgC3pQAAm6wAAgUAAQIAAJIAiyfhBAAAAAA./cnd=!DgWIMAiKu5QCEI2ghQgYhIoaIAA./referrer=http://sponsor.adverstitial.com//clickenc=http://downloadsinstant.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CNuYupHYxMiseBACGLHnzdb7tvuhPCIOOTguMTc3LjEzNC4yMzQoATCpyayeBQ..  (flashplayerpro_setup.exe)

14 / 68    (Adware)
https://secure-lax.adnxs.com/click?01I2yO-Cuz_1UVYj2vi2P3sUrkfherQ_9VFWI9r4tj_SUjbI74K7P4xiqAOdtxBRPM1HJnnwySWlowxUAAAAAGImLgDIAQAAdgIAAAIAAADrIRwBc5kFAAAAAQBVU0QAVVNEACwB-gC6iQAAj9wAAgUAAQIAAJIAOilBeQAAAAA./cnd=!5gZdQAij27QCEOvD8AgY87IWIAA./referrer=secure.adnxs.com/clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=lax1CLyan7KSj_zkJRACGIzFoZ3Q862IUSIMNjcuNDguMTIyLjUxKAEwpceyoAU.&tag=3024482  (setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?8g6ptoDExj9iOPbzFqXBPwAAAAAAAPA_Yjj28xalwT_yDqm2gMTGPzvKWGslWwA2PM1HJnnwySVE21hUAAAAALB8OQByBwAAdgIAAAIAAACjTCcBBq8HAAAAAQBVU0QAVVNEACwB-gDKDAAA4-oAAgUAAQIAAJYAgCV5-wAAAAA./cnd=!4AW_NwjPjswCEKOZnQkYht4eIAA./referrer=https://ib.adnxs.com/tt?id=3767472&referrer=${REFERER_URL}&LKdg43Mt=473_18x18_0/clickenc=http://fabulous-wealth2d3fd5.com/.../serve?c=marimedia&s=marimedia_lightspark-us-ddl-cpa&ce_cid=lax1CLyan7KSj_zkJRACGLuU49rW5JaANiIMNjcuNDguMTIyLjUxKAEwxLbjogU.  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?zKDJ9FbtpD-_eq3tYHmhPwAAAAAAAPA_v3qt7WB5oT_MoMn0Vu2kP7W5GDb7WDdu25nkTfHL0AIsZlxUAAAAALk3OgDIAQAAdgIAAAIAAACfTCcBn7cHAAAAAQBVU0QAVVNEACwB-gB9IgAAX74AAgUAAQIAAJYASCnHiwAAAAA./cnd=!GwbAOQjiy5ACEJ-ZnQkYn-8eIAE./referrer=https://ib.adnxs.com/tt?id=3815353&cb=253601962991536480&referrer=[REFERRER_URL]&5Dylr9Kt=474_18x18_0/clickenc=http://fabulous-wealth2d3fd5.com/.../serve?c=marimedia&s=marimedia_lightspark-us-ddl-cpa&ce_cid=lax1CNuzku-U_rLoAhACGLXz4rCzn9abbiINNzQuMTkyLjUwLjE4NCgBMKzM8aIF  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?PoRpjs6iyz--Buq2dhPHP_yp8dJNYrA_vgbqtnYTxz8-hGmOzqLLPzNSWTQJ9MUe87qE6rpBT0W_jhxUAAAAAGImLgDIAQAAdgIAAAIAAADxzysBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAAO64AAgUAAQIAAJIAKSnPdAAAAAA./cnd=!rgapPwjQ9JMCEPGfrwkY87IWIAE./referrer=8chan.co/clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=lax1CPP1ktSut9CnRRACGLOk5aKTgf3iHiINMTMwLjY1LjI1MS4yMCgBML-d8qAF&tag=3024482  (setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?Qtw8-Y4M2z8bL90kBoHVPxsv3SQGgdU_WesIwPzH_z-0ITkg-fwDQHmth62iThtBW4wugiUiWXg4EsdTAAAAAEwZKgChBgAAdgIAAAIAAAANUAEBBIUGAAAAAQBVU0QAVVNEANgCWgC3pQAAA60AAgUAAQIAAJIAUyJ2OwAAAAA./cnd=!DgWIMAiKu5QCEI2ghQgYhIoaIAA./referrer=http://pcsoftupdate.com//clickenc=http://downloadsinstant.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CNuYupHYxMiseBACGPnanuyq1NONQSIOOTguMTc3LjEzNC4yMzQoATC4pJyeBQ..  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?MEQq2uoQyj-y7lPS4sPFPzvfT42XbrI_su5T0uLDxT8vRCra6hDKP4Ettcyq0vJXahgPD3DaB3SjVCtUAAAAAGImLgDIAQAAdgIAAAIAAACjTCcBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAA7twAAgUAAQIAAJIAFimOawAAAAA./cnd=!HwacOQjG1pMCEKOZnQkY87IWIAA./referrer=secure.imp-serving.com/clickenc=http://adserverff4a94next.com/.../serve?c=marimedia&s=marimedia_lightspark-us-ddl-cpa&ce_cid=lax1COqwvPiAzvaDdBACGIHb1OWs1bT5VyIMNjcuNDkuNzMuMjIzKAEwo6mtoQU.  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?4FWanPMbvT-_3gAtYU64P1g5tMh2vq8_v94ALWFOuD_fVZqc8xu9Py-ACA2x7ENEXb1vSfVqBmhf9SBUAAAAAGImLgDIAQAAdgIAAAIAAACjTCcBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAAld0AAgUAAQIAAJIAeSbEdAAAAAA./cnd=!HwacOQjG1pMCEKOZnQkY87IWIAA./referrer=feedcompany.org/clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CN36vsvU3pqDaBACGK-AouiQlvuhRCINNzIuMjAwLjM2LjIzNygBMN_qg6EF  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?MvSElwqTxz9enMoAyQnEPwAAAAAAAPA_XpzKAMkJxD8y9ISXCpPHPxQ_BpD9k2oU_B4BLcYnmirek_5TAAAAAMkkNAB2AgAA_AcAAAIAAAAZOAIBLTwHAAAAAQBVU0QAVVNEACwB-gCJmwAAir4AAgUAAQIAAJQASCIjzwAAAAA./cnd=!VgbwOgi8xKkCEJnwiAgYrfgcIAA./referrer=https://www.youtube.com/watch/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3417289&clickid=UAT_lax1CPy9hOji-InNKhACGJT-mIDZ_6S1FCILNzAuNTYuOTAuNDAoATDep_qfBQ..  (installation.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAHSMgF7j08ImzjvyRZK020zk7ARUAAAAAFdoNAB2AgAArwcAAAIAAADvQNMALTwHAAAAAQBVU0QAVVNEACwB-gBKsgAAYL8AAgUAAQIAAJQAzxZGeAAAAAA./cnd=!sAYoPwjL95UCEO-BzQYYrfgcIAI./referrer=https://ib.adnxs.com/tt?id=3434583&referrer=&cb=1179615738/clickenc=http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=lax1CM73yK-kku3tTBACGPSYgvS1_LThJiIOMjA2LjE2My4yNDQuOTkoATDk2ZOgBQ..&ti2=SBZ&ti3=3434583  (flashplayersetup__6145_i1251488567_il380.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?24yG7IWonz-W3NJITRyXPwAAAAAAAPA_ltzSSE0clz_bjIbshaifP92nCB7YpcBpwXJu7WiQ3RLruxRVAAAAAPYmRQDaBgAAdAoAAAIAAABJEKABIY0GAAAAAQBVU0QAVVNEACwB-gD2QAAAx-oAAgUAAQIAAJ4AYCh2zQAAAAA./cnd=!xAWZNwiGyNcDEMmggA0YoZoaIAA./referrer=https://account.live.com/password/reset/clickenc=http://.../?a=20601&c=58197&s2=lax1CMHlueuOjeTuEhACGN3PovCBu6ngaSINNzQuMTk2LjEwOS43NSgBMOv30qgF  (player setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?-HJDDEjH4j9cj8L1KFzfP3sUrkfherQ_Bi7gfClz3z9BsMkcDtXiP_3L3aUY8rsehHcu4sOBEHO5Cg1UAAAAAGImLgDIAQAAdgIAAAIAAACNqhoBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAAJa0AAgUAAQIAAJIAEycYwAAAAAA./cnd=!kQY9PQjG1pMCEI3V6ggY87IWIAA./referrer=secure.imp-serving.com/clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CITvuZG-uKCIcxACGP2X966Kw_zdHiILNjguMi4zNS4yMjkoATC5lbSgBQ..  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?8ICLmkKvxz-aHdtiFkDEP8P1KFyPwsU_mh3bYhZAxD_wgIuaQq_HP0wke1KSbcJ4c75LlQ8eKiAkKQFUAAAAAFUFHwBfAAAAdgIAAAIAAAANUAEBXRIFAAAAAQBVU0QAVVNEANgCWgA9GAAA5L4AAgUAAQIAAJIAqSJasQAAAAA./cnd=!4wVYOAiz3rACEI2ghQgY3aQUIAA./referrer=pro-labs.imdb.com/clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CPP8rqr5wYeVIBACGMzI7JOlspvheCIMNzUuODMuMTEyLjgzKAEwpNKEoAU.  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?YZZX0Pv20z9YObTIdr7PP1g5tMh2vs8_aoYxdoxL6z_AtrlIryrxP0-kXqi1RUZvN6eyqi_Ur2GDSM1TAAAAAEwZKgChBgAAdgIAAAIAAAANUAEBBIUGAAAAAQBVU0QAVVNEANgCWgC3pQAAGq4AAgUAAQIAAJIAIyjQdwAAAAA./cnd=!DgWIMAiKu5QCEI2ghQgYhIoaIAA./referrer=http://www.gamesgames.com//clickenc=http://downloadsinstant.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CLfOytX6hfXXYRACGM_I-sLatpGjbyINOTguMTk5LjIyNi4yOCgBMIORtZ4F  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?tv9XloFL1z_H_1Chtw3SP-kmMQisHO4_x_9QobcN0j-2_1eWgUvXP17ChEYRVE4cvqr6IzVXWE8QRk5UAAAAAO1IOAByBwAAdgIAAAIAAACfTCcBYO0HAAAAAQBVU0QAVVNEACwB-gCf9QAAqcQAAgUAAQIAAJYALyh6BQAAAAA./cnd=!nAYhPwj0xNoCEJ-ZnQkY4NofIAA./referrer=https://ib.adnxs.com/tt?id=3688685&referrer=${REFERER_URL}&iOVg0Mwk=459_18x18_0/clickenc=http://fabulous-wealth2d3fd5.com/.../serve?c=marimedia&s=marimedia_lightspark-us-ddl-cpa&ce_cid=lax1CL7V6p_S5pWsTxACGN6Ek7SUgpWnHCILMTk4LjAuNjcuODUoATCQjLmiBQ..  (flashplayerpro_setup.exe)

14 / 68    (Adware)
https://secure-lax.adnxs.com/click?co0uTR9jsz9tbkkENTCwP3sUrkfherQ_bW5JBDUwsD9yjS5NH2OzP8uZwkC7h2on96xs4VsKKw7RQg5UAAAAAGImLgDIAQAAdgIAAAIAAADrIRwBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAAlbsAAgUAAQIAAJIABCLRiQAAAAA./cnd=!5gZdQAij27QCEOvD8AgY87IWIAA./referrer=secure.imp-serving.com/clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=lax1CPfZsou-y8KVDhACGMuzioa096G1JyINNTAuMTYxLjkyLjE5MCgBMNGFuaAF&tag=3024482  (setup.exe)

28 / 68    (Adware)
https://secure-lax.adnxs.com/click?6Lt_DNwzyT-AVjKATQvFP_Q9B7oLXe0_gFYygE0LxT_ou38M3DPJP52Fp5rq1u9996xs4VsKKw7GsxVUAAAAAGImLgDIAQAAdgIAAAIAAAAQDikBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAAMLsAAgUAAQIAAJIAsyV5QwAAAAA./cnd=!GQYXOQij27QCEJCcpAkY87IWIAA./referrer=secure.imp-serving.com/clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=lax1CPfZsou-y8KVDhACGJ2LntWp3fX3fSINNTAuMTYxLjkyLjE5MCgBMMbn1qAF&tag=3024482  (setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAPxOjnfa6skHL9049tERARY9HPFTAAAAAB7uMgByBwAArwcAAAIAAAB5LdYAF1EGAAAAAQBVU0QAVVNEACwB-gCdZwAAi7sAAgUAAQIAAJQAJBVAAgAAAAA./cnd=!mga5PwizutYBEPna2AYYl6IZIAI./referrer=http://www.youtube.com/clickenc=http://clickus.tractionize.com/st?cipid=377000&ttype=1&crid=2347468&dast=Ym89MSZzbGlkPTAmc3ViaWQ9ODIwMiZzbz0xJmNpY21wPTk1NDc4JnB1YmlkPTkwMzAmY2lwaWQ9Mzc3MDAwJmNpc2lkPUY1NjAzMzg0QUMxNDA5NzExMTIzNzc5MTQzNiZjaXJpZD1GNTYwMzM4NEFDMTQwOTcxMjE4ODE4OTgxJmNpdWlkPS02MDMxMjczNTYyNTUyMTk2NTA3JmNyaWQ9MjM0NzQ2OCZleGNpZD0yMiZtbXQ9LTEmY250cnk9MTM2&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=lax1CK-647GfusSAFhACGPydubyn2_rkByIPMTg5LjIxOC4xNzUuMTU3KAEwvbjEnwU.&ti2=SBZ&ti3=3337758  (flashplayersetup__6145_i1186787544_il28.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?mGTf8y-8tT9prf9mh0exP1g5tMh2vt8_aa3_ZodHsT-YZN_zL7y1Px7j4RzbcOEsk1QD6ayyAlmckrdTAAAAANsTKgChBgAAdgIAAAIAAAAPeNQABIUGAAAAAQBVU0QAVVNEAKAAWAKOXwAAJ90AAgUAAQIAAJAAxylV6wAAAAA./cnd=!jAYqQgjo8OQBEI_w0QYYhIoaIAA./referrer=http://www.walmart.com//clickenc=http://downloadsinstant.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CJOpjcjO1ayBWRACGJ7Gh-exm9zwLCIMNjguNjMuMTk1LjM2KAEwnKXenQU.  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?RfWgkXf-1j8zMzMzMzPTP3sUrkfherQ__BhKSDPq2D_SpMgxkNbdP3eZDBXky59hUVl2Bgg31HfgoBNUAAAAAGImLgDIAQAAdgIAAAIAAACjTCcBc5kFAAAAAQBVU0QAVVNEACwB-gClXQAAnL4AAgUAAQIAAJIAZyaSYQAAAAA./cnd=!HwacOQjG1pMCEKOZnQkY87IWIAA./referrer=secure.imp-serving.com/clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CNGy2bOA4Y3qdxACGPeysqjB_PLPYSIOMTA3LjIxNi42MC4xMjAoATDgwc6gBQ..  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAHsUrkfherQ_AAAAAAAAAAAAAAAAAAAAAPYW6u0QBeweKHQLUkcQvBdYq99TAAAAAEeAHgB2AgAAdgIAAAIAAABA7_UAa_4EAAAAAQBVU0QAVVNEACwB-gAcewAAZsEAAgQAAQIAAIoA5haWyAAAAAA./cnd=!WAdxRAit5PsBEMDe1wcY6_wTIAQ./referrer=https://aws.rjs.in/fblexulous//clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=lax1CKjorZD1iITeFxACGPatqO-OooH2HiINOTkuMTYyLjE1NC4yMSgBMNjW_p4F&tag=1998919  (setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?fI788kIQnz85u4OvABOYP83MzMzMzOA_ObuDrwATmD97jvzyQhCfP1ri4uLUXO9hCf5oFKLHF1wlCXhTAAAAAEW5JQByBwAAdgIAAAIAAAAnUd8AeWQFAAAAAQBVU0QAVVNEACwB-gCg9gAAEbsAAgUAAQIAAI4AeSgdOgAAAAA./cnd=!7AYVQQjTweMBEKei_QYY-cgVIAE./referrer=http://urbanministries.com//clickenc=http://downloadsinstant.com/.../flashplayerpro?source=marimedia_lightspark-us-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=lax1CIn8o6Oh9PGLXBACGNrEi5fOmtf3YSIMOTkuMjMuMTk5LjI3KAEwpZLgmwU.  (flashplayerpro_setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?vhe3xQtZxz_7oNs0fdjDPwAAAAAAAPA_-6DbNH3Ywz-9F7fFC1nHP1flCk6ntWJCqZG_lmOlY27xL_5TAAAAAMkkNAB2AgAA_AcAAAIAAAAZOAIBLTwHAAAAAQBVU0QAVVNEACwB-gBlDAAAzqwAAgUAAQIAAJQA_yX8YQAAAAA./cnd=!VgbwOgi8xKkCEJnwiAgYrfgcIAA./referrer=https://www.youtube.com/watch/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3417289&clickid=UAT_lax1CKmj_rW5rOmxbhACGNfKq_D0tK2xQiIONzYuMTcwLjE2Mi4yMTMoATDx3_ifBQ..  (installation.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?mpmZmZmZqT_kpZvEILCiPwAAAAAAAPA_5KWbxCCwoj-amZmZmZmpP7oETwpvzSpLExNq8K-C9BqVbwtVAAAAAInARADaBgAAdAoAAAIAAAB6c4YBIY0GAAAAAQBVU0QAVVNEACwB-gAxbgAAP64AAgUAAQIAAJAAhiXwOwAAAAA./cnd=!owZoQQjF6MgDEPrmmQwYoZoaIAA./referrer=https://www.youtube.com/watch/clickenc=http://.../?a=20601&c=58197&s2=lax1CJOmqIP_1aD6GhACGLqJvNLwrbOVSyIMOTguMjQ4LjEyLjY3KAEwld-tqAU.  (player setup.exe)

10 / 68    (Adware)
https://secure-lax.adnxs.com/click?ruxzSE0w3j8AAAAAAADYPwAAAAAAANg_cChTgFlw4j9CMYfzizHnP9fma2UwVpIOwckNeP9SLC7SzdZTAAAAAEwZKgChBgAAdgIAAAIAAABN7vUABIUGAAAAAQBVU0QAVVNEANgCWgC3pQAA-dEAAgUAAQIAAJIAtSLGNAAAAAA./cnd=!GQZTOwjMt5QCEM3c1wcYhIoaIAA./referrer=http://delivery.us.myswitchads.com/adserver/hat.php?instances[0][instance_id]=0&instances[0][zone_id]=5307&instances[0][token]=T_cXtKFkWIlR&l=xGJqhYKemU&bw=728&bh=90&loc=http://general.websteroidsapp.com/.../ad-728-c.html?ac=1001&ccg=3d9136b71f194002b31eab7e86b1a8f0&ns=WBST&pid=66852&ccv=1002006053&hu=http://www.afcgroup.com/&me=NA&cv=71&inc=1&cc=US&load=4&epk=32d31532af6ec59715623548157b9830&as=servenet3&tzo=360&referer=http://general.websteroidsapp.com/.../ad-728-c.html?ac=1001&ccg=3d9136b71f194002b31eab7e86b1a8f0&ns=WBST&pid=66852&ccv=1002006053&hu=http://www.afcgroup.com/&me=NA&cv=71&inc=1&cc=US%  (setup.exe)

1 / 68      (Adware)
https://secure-lax.adnxs.com/click?uB6F61G4rj93LSEf9GymPwAAAAAAAPA_dy0hH_Rspj-4HoXrUbiuP2ZVwcCgIhw6jsazFpDyWERz4BVVAAAAAOY_RQDaBgAAdAoAAAIAAAAqtaEBIY0GAAAAAQBVU0QAVVNEACwB-gC3RgAAX74AAgUAAQIAAJ4AByRjOgAAAAA./cnd=!IAblOwjmkdkDEKrqhg0YoZoaIAA./referrer=https://www.taxact.com/registration.asp/clickenc=http://.../?a=19871&c=58197&s1=APN&s2=lax1CI6Nz7WB0rysRBACGOaqhYaM1IiOOiINMjQuMTcxLjc3LjE2MCgBMPPA16gF  (player setup.exe)

 
Latest 30 of 93 download URLs

The following 172 files have been seen to comunicate with secure-lax.adnxs.com in live environments.

TCP » 104.254.150.58:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.79:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.77:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.4:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.37:80
client.exe

TCP » 104.254.150.37:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.59:443
browser.exe (Browser)

TCP » 104.254.150.59:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.59:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.11:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.21:80
jingling.exe

TCP » 104.254.150.77:443
browser.exe (Browser)

TCP » 104.254.150.21:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 104.254.150.21:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.37:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 104.254.150.37:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 104.254.150.79:443
browser.exe (Browser)

TCP » 104.254.150.4:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.254.150.79:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 592 files

URL:
http://secure-lax.adnxs.com/

Google Analytics:
UA-4057742

Title:
“error page for redirects from product”

SSL certificate subject:
CN=*.adnxs.com, O="AppNexus, Inc.", L=New York, S=New York, C=US

SSL certificate issuer:
CN=GeoTrust SSL CA - G3, O=GeoTrust Inc., C=US

Web server:
Apache/2.2.22 (Ubuntu)

aim4media.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.