» www.adshost2.com
Overview
Analysis
IPs Addresses (6)
Downloads (246)
Network (3)
Website Detail

www.adshost2.com

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain www.adshost2.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in United, Pennsylvania within the United States which resides on the RIPE Network Coordination Centre network.

Registrant:

Domains By Proxy, LLC

Registrar:

GODADDY.COM, LLC

Server location:

Pennsylvania, United States (US)

Create date:

Thursday, September 22, 2011

Expires date:

Thursday, September 22, 2016

Updated date:

Thursday, September 3, 2015

ASN:

AS47328 TRI-AS True Records Inc.

Root domain:

adshost2.com

Whois:

3 adshost2.com records

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.MaxigetLimited.G, PUP.New IT Limited.Maxiget (M), PUP.New IT Limited.Maxiget.Bundler (M), PUP.Catalina (M), Threat.Win.Reputation.IMP, PUP.New IT Limited (M)

97.92%

McAfee

Artemis!BB39D90B74D5, Artemis!BE3C0F483A31

6.25%

Trend Micro House Call

TROJ_GEN.F47V1115, TROJ_GEN.F47V1001

6.25%

VIPRE Antivirus

Trojan.Win32.Generic, Threat.4150696

6.25%

NANO AntiVirus

Trojan.Win32.GetFaster.ctshtu, Trojan.Win32.Agent.cyhtxg

6.25%

Agnitum Outpost

PUA.Downloader, Riskware.Agent

6.25%

Comodo Security

Application.Win32.Graftor.KLK, Application.Win32.Delta.C

6.25%

Vba32 AntiVirus

Downloader.GetFaster.byi, suspected of Trojan.Downloader.gen.h

6.25%

AVG

MalSign.Generic, Trojan horse Agent4

6.25%

K7 AntiVirus

Unwanted-Program

6.25%

Avira AntiVirus

Adware/Delta.H.17, Adware/Delta.F

6.25%

IKARUS anti.virus

AdWare.Delta

6.25%

ESET NOD32

Win32/Maxiget.B potentially unwanted application

6.25%

Sophos

4Share Downloader

2.08%

ESET NOD32

Win32/4Shared (variant)

2.08%

The domain www.adshost2.com has been seen to resolve to the following 6 IP addresses.

January 31, 2016

January 29, 2014

January 29, 2014

mail.eventers.me

January 29, 2014

68.233.228.234

68-233-228-234.static.hvvc.us

December 26, 2013

74.50.103.39

74-50-103-39.static.hvvc.us

December 26, 2013

File downloads found at URLs served by www.adshost2.com.

1 / 68 (Adware)

http://www.adshost2.com/cr?b=53297&p=22813&ch=&c=20379&l=SA&h=43e5430f5cdeadeb1c6ea916897323c4&t=1381344643596&u=http://download-faster.net/smart-download/4303280/.../Barcelona.VS.Real.Valladolid.exe (9852e86ec006fca723c922877d8e84e1)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=42665&p=5268&ch=&c=17770&l=TH&h=811ba80a156725d490e70834cf60f148&t=1377612512803&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (4b08206eccf28cc241e356fddf658fe1)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=42923&p=5268&ch=&c=17770&l=TH&h=d99d6cdaf0a9565cfba2ca3a8bc9a65b&t=1377868647641&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (5edb80d523b8a81d83c964cae5b9f02a)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=25041&p=5268&ch=&c=10178&l=BR&h=a50982dffa693dd6d781d2eeed87585f&t=1377351543261&u=http://download-faster.net/smart-download/11055/.../SaveAs.brazil.exe (b218ff7fcb0bc326bdc1e68b533549c0)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=43408&p=4052&ch=&c=18071&l=BR&h=c94675d204a231e4c85db14a80ff3c53&t=1378568798638&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (4ee0e04b3565d630a5f1446bd56eb1d7)

1 / 68 (Malware)

http://www.adshost2.com/cr?b=39729&p=19203&ch=&c=16566&l=NP&h=6e34a07021a48a76c5477bea9f776736&t=1377706638128&u=http://download-faster.net/smart-download/51911733/.../PDF Viewer Plugin.exe (d0c4e059dbce0d0003122e92ff1fb1e6)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=42950&p=21187&ch=&c=17961&l=AE&h=0a9ba66c06259376e609c925900dd34a&t=1378905334190&u=http://download-faster.net/smart-download/51903231/.../Diary Ng Panget Ebook Complete.exe (a3af3f4a6c12265a1086431cb14bee76)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=26078&p=5268&ch=&c=10178&l=TH&h=9b0a15fd7fc02d83170a43eb690f489f&t=1376494613906&u=http://download-faster.net/smart-download/11066/.../SaveAs.th.exe (59a13e766b89f1a5c1556f4fe96c422b)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=43564&p=5268&ch=&c=18073&l=TH&h=962ecb480ea3021768ebdc00caf7eed5&t=1379495076476&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (a7bbab1d3f8b2cf2ec930ba83b6bd32d)

19 / 68 (Adware)

http://www.adshost2.com/cr?b=43376&p=4053&ch=&c=18071&l=EG&h=a69185a930e220404c1c69b8b4e5ee30&t=1381254560537&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (d4e38422064c4f51a7d76b3ae7669e87)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=26080&p=5268&ch=&c=10178&l=EG&h=b6b1fd49b2eb7411b5846b9802a51eca&t=1377348345784&u=http://download-faster.net/smart-download/11020/.../SaveAs.eg.exe (3b7598a79a313113fe99cac0cb0fa5bc)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=43348&p=4053&ch=&c=18071&l=TH&h=041276e7e9b33d61cb6f5582b9a29794&t=1380334646990&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (6153461ab981b3602af2561451454fb0)

13 / 68 (Adware)

http://www.adshost2.com/cr?b=43358&p=4053&ch=&c=18071&l=TH&h=1c80baea0a7cf985f5b14bdb64a78bc6&t=1380374584992&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (6b9eca64aa9ff620fdc0ed0e2f69861e)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=43474&p=5268&ch=&c=18073&l=ID&h=b161e3f79332c08427bb9e990fc00d55&t=1379519745345&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (97a8186c2b8ddc03b65e58c344c4972c)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=42675&p=5268&ch=&c=17770&l=TH&h=b83e946646d4c0501de8828e1bcff76a&t=1377660537310&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (40de083f73c7af51c27500c85843b22c)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=43564&p=5268&ch=&c=18073&l=TH&h=962ecb480ea3021768ebdc00caf7eed5&t=1379407032694&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (709b586b85f48f0ca3224e62dfadcea0)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=25040&p=5268&ch=&c=10178&l=ID&h=165f0e3ec582ed68c5c9ae02766c3b7d&t=1375321911214&u=http://download-faster.net/smart-download/11062/.../SaveAs.id.exe (4869ba504b0843b36826a7059f7f16c7)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=28516&p=3825&ch=&c=11447&l=ID&h=1a68a11cd4daca46c648d38741f60068&t=1376905323779&u=http://download-faster.net/smart-download/11062/.../SaveAs.id.exe (3dd35d68aec489b4610a787d9fb9f057)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=43357&p=4053&ch=&c=18071&l=SA&h=023cbb861969de06e34015c814de6129&t=1381107346872&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (23827f36a42099a0a26f3b5cab4f3a32)

1 / 68 (Malware)

http://www.adshost2.com/cr?b=26080&p=5268&ch=&c=10178&l=EG&h=b6b1fd49b2eb7411b5846b9802a51eca&t=1377224019692&u=http://download-faster.net/smart-download/11020/.../SaveAs.eg.exe (14b6949e8d05dc804becbec6e64406b0)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=25228&p=5268&ch=&c=10178&l=AE&h=3dc2c10326980b749f5ec11dc70cebdd&t=1375767432221&u=http://download-faster.net/smart-download/11971/.../SaveAs.ua.exe (d095521d8b93e99106e534190d217e8f)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=53837&p=23195&ch=&c=21196&l=GR&h=419c9888670b41639a66491836ab9a25&t=1381421679812&u=http://download-faster.net/smart-download/5303314/.../Insidious.2010.exe (9649738339e81ad9bf27126c1810be3e)

1 / 68 (inconclusive)

http://www.adshost2.com/cr?b=25234&p=5268&ch=&c=10178&l=SA&h=5f398554ee28d831e206f13e0d0aeb5a&t=1375808929128&u=http://download-faster.net/smart-download/11966/.../SaveAs.sa.exe (3efc8622e4b6afbf1325821bb0e68b13)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=25232&p=5268&ch=&c=10178&l=SA&h=0566594bb09ec286931d87ca9ca872bd&t=1377623187089&u=http://download-faster.net/smart-download/11966/.../SaveAs.sa.exe (b71876598f4e86c9ac605155f5d2b576)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=53295&p=22813&ch=&c=20379&l=ID&h=1522e8acb4c71334ddd2a9bfc9b8b5df&t=1380295888324&u=http://download-faster.net/smart-download/4303280/.../REQ_Cesar_Millan_How_to_...the_Perfect_Dog_EPUB.exe (b4e58a14b2392f3c16bffd428402bfb5)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=25234&p=5268&ch=&c=10178&l=SA&h=5f398554ee28d831e206f13e0d0aeb5a&t=1377815618775&u=http://download-faster.net/smart-download/11966/.../SaveAs.sa.exe (e8a1e6d8e9dfd69a23410e552531273b)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=42665&p=5268&ch=&c=17770&l=TH&h=811ba80a156725d490e70834cf60f148&t=1377317783361&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (96c2b8d0148016fde52a4e394d91dae3)

1 / 68 (Adware)

http://www.adshost2.com/cr?b=43408&p=4052&ch=&c=18071&l=BR&h=c94675d204a231e4c85db14a80ff3c53&t=1377906385169&u=http://download-faster.net/smart-download/150107/.../SaveAs.exe (6028c631f4b057348891a672e5713e36)

1 / 68 (Malware)

http://www.adshost2.com/cr?b=25042&p=5268&ch=&c=10178&l=BR&h=cc67f80ceb16c1115b67f915a1f055ba&t=1377313093876&u=http://download-faster.net/smart-download/11055/.../SaveAs.brazil.exe (a5f4247f332ba25fbdf248f8df52ca61)

1 / 68 (PUP)

http://www.adshost2.com/cr?b=26078&p=5268&ch=&c=10178&l=TH&h=9b0a15fd7fc02d83170a43eb690f489f&t=1375455492630&u=http://download-faster.net/smart-download/11066/.../SaveAs.th.exe (f30aa82a9820c999efcc701c548ab2c2)

Latest 30 of 246 download URLs

The following 3 files have been seen to comunicate with www.adshost2.com in live environments.

TCP » 212.124.126.10:80

browser.exe (Co Rom+ Browser by Itim Technologies Co.)

TCP » 74.50.103.39:80

browser.exe (Co Rom+ Browser by Itim Technologies Co.)

TCP » 74.50.103.39:80

browser.exe (Co Rom+ Browser by Itim Technologies Co.)

TCP » 74.50.103.39:80

Client.exe

URL:

http://www.adshost2.com/

Title:

“Login | Epom”

SSL certificate subject:

CN=www.adshost2.com, OU=Domain Control Validated

SSL certificate issuer:

CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:

Apache-Coyote/1.1

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.