ams1.ib.adnxs.com

AppNexus Inc

Domain Information

The domain ams1.ib.adnxs.com registered by AppNexus Inc was initially registered in May of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Remove Malware from ams1.ib.adnxs.com - Powered by Reason Core Security
Registrar:
MARKMONITOR INC.

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Tuesday, May 27, 2008

Expires date:
Friday, May 27, 2016

Updated date:
Saturday, April 26, 2014

ASN:
AS29990 ASN-APPNEXUS - AppNexus, Inc,US

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BundloreLimited.F, PUP.Installer.ShetefSolutionsConsulting1998.c, PUP.Installer.Wilmaonline.f, PUP.Wilmaonline.c, PUP.Optional.Installer.X, PUP.Installer.Wilmaonline.g, PUP.Installer.BootCompute.U, PUP.Installer.Liquidbuild.U, PUP.Installer.BootCompute.F, PUP.Installer.Adknowledge, Threat.Installer.NanningweiwuTechnologycoltd, PUP.Outbrowse.STaRTNoW.Bundler (M), PUP.Brightcircle.Wilmaonline.Bundler (M), PUP.Outbrowse.Bundler (M)
92.50%

Avira AntiVirus
SPR/Bundlore.A, ADWARE/Adware.Gen2, APPL/Bundler.Amonetize.N.102, TR/Kazy.439479.2, ADWARE/iBryte.Gen7, Adware/Amonetize.tzv
75.00%

Malwarebytes
PUP.Optional.Bundlore, PUP.Optional.Amonetize.A, PUP.Optional.InstallMonetizer, PUP.Optional.Downloader, PUP.Optional.GigaClicks.A
72.50%

Dr.Web
Adware.Downware.1732, Adware.Downware.1575, Adware.Downware.1655, Adware.Downware.2250, Adware.Downware.3925, Adware.Downware.5913, Adware.Downware.1897, Adware.Downware.8798, Trojan.DownLoader11.40661, Trojan.iBryte.34, Adware.Downware.2220
65.00%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.IBryte, PUP/Win32.Amonetize, PUP/Win32.Eorezo, PUP/Win32.Downware
62.50%

McAfee Web Gateway
Artemis!7FA7B38A12E2, Artemis!FD84DD4BE9F9, Artemis!3487FF7EDD2D, Adware-Amonetize!C9FC7E0B9D69, Artemis!4FC1814AFEE3, PUP-FBM!174C091A15BD
60.00%

avast!
Win32:Adware-BJY [PUP], Win32:Adware-gen [Adw], Win32:Amonetize-M [PUP], Win32:Amonetize-N [PUP], Win32:Amonetize-AX [PUP], Win32:OutBrowse-G [PUP]
60.00%

McAfee
Artemis!7FA7B38A12E2, Artemis!FD84DD4BE9F9, Artemis!3487FF7EDD2D, Adware-Amonetize!C9FC7E0B9D69, Artemis!4FC1814AFEE3, PUP-FBM!174C091A15BD, Artemis!8A2ED863690C, Artemis!32A84E35209D
55.00%

AVG
MalSign.Bundlo, Generic_r, MalSign.Wilmo, Adware Generic_r.MG, Adware AdPlugin, Adware AdPlugin.AQX, Adware AdPlugin.BQT
55.00%

VIPRE Antivirus
Bundlore, Amonetize, Trojan.Win32.Generic, Threat.4785227, Conduit, Threat.4778314, Threat.4150696
52.50%

Sophos
Bundlore, Amonetize, Generic PUA MC, PUA.iBryte Optimum Installer, Generic PUA LP, Mal/Generic-S, Mal/Inject-CEE, PUA 'iBryte Optimum Installer'
52.50%

Baidu Antivirus
Adware.Win32.Amonetize, Adware.Win32.ELEX, Adware.Win32.Elex, Trojan.Win32.Clikug
52.50%

Trend Micro House Call
TROJ_GEN.F47V0227, TROJ_GEN.F47V0310, TROJ_GEN.F47V0309, TROJ_GEN.F47V0306, TROJ_GEN.F47V0206, TROJ_GEN.F47V0313, Suspicious_GEN.F47V0620
50.00%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud), Win32.Troj.Amonetize.cg.(kcloud), Win32.Troj.DownAgent.ba.(kcloud), Win32.Troj.Amonetize.b.(kcloud)
50.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.Amonetize, not-a-virus:Downloader.Win32.Agent, Trojan-Clicker.Win32.Agent
50.00%

The domain ams1.ib.adnxs.com has been seen to resolve to the following 236 IP addresses.

float.2690.bm-impbus.prod.ams1.adnexus.net
February 15, 2016

float.2674.bm-impbus.prod.ams1.adnexus.net
February 15, 2016

float.2691.bm-impbus.prod.ams1.adnexus.net
February 15, 2016

float.2411.bm-impbus.prod.ams1.adnexus.net
February 1, 2016

float.2647.bm-impbus.prod.ams1.adnexus.net
February 1, 2016

float.2693.bm-impbus.prod.ams1.adnexus.net
February 1, 2016

float.2457.bm-impbus.prod.ams1.adnexus.net
February 1, 2016

float.2455.bm-impbus.prod.ams1.adnexus.net
July 2, 2015

float.2119.bm-impbus.prod.ams1.adnexus.net
July 2, 2015

float.2807.bm-impbus.prod.ams1.adnexus.net
July 2, 2015

float.1720.bm-impbus.prod.ams1.adnexus.net
May 6, 2015

float.2435.bm-impbus.prod.ams1.adnexus.net
May 6, 2015

float.2698.bm-impbus.prod.ams1.adnexus.net
May 6, 2015

float.1385.bm-impbus.prod.nym2.adnexus.net
May 6, 2015

float.2673.bm-impbus.prod.ams1.adnexus.net
May 6, 2015

float.1744.bm-impbus.prod.ams1.adnexus.net
May 6, 2015

float.2696.bm-impbus.prod.ams1.adnexus.net
May 5, 2015

float.2420.bm-impbus.prod.ams1.adnexus.net
May 5, 2015

float.2653.bm-impbus.prod.ams1.adnexus.net
May 5, 2015

float.2436.bm-impbus.prod.ams1.adnexus.net
May 5, 2015

float.2660.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

float.2440.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

float.2684.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

float.2729.bm-impbus.prod.nym2.adnexus.net
May 4, 2015

float.2680.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

float.2650.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

float.2679.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

float.2717.bm-impbus.prod.nym2.adnexus.net
May 4, 2015

float.2117.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

float.2692.bm-impbus.prod.ams1.adnexus.net
May 4, 2015

 
Showing 30 of 236 IP Addresses

File downloads found at URLs served by ams1.ib.adnxs.com.

 
Latest 30 of 86 download URLs

The following 83 files have been seen to comunicate with ams1.ib.adnxs.com in live environments.

 
Latest 20 of 162 files

URL:
http://ams1.ib.adnxs.com/

Google Analytics:
UA-4057742

Title:
“error page for redirects from product”

Web server:
Apache/2.2.22 (Ubuntu)

Remove Malware from ams1.ib.adnxs.com - Powered by Reason Core Security