home

apnpip.ask.com

Domain Information

This domain is owned and operated by APN LLC.
Server location:
Virginia, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
ask.com

Registered by:
APN LLC

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Ask.H
100.00%

Dr.Web
Trojan.DownLoader7.16675
100.00%

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
100.00%

Boost by Reason
Optional.Ask.H
100.00%

XVirus List
Win32.Detected
100.00%

The domain apnpip.ask.com has been seen to resolve to the following 2 IP addresses.

23.0.160.97
a23-0-160-97.deploy.static.akamaitechnologies.com
February 4, 2016

23.0.160.99
a23-0-160-99.deploy.static.akamaitechnologies.com
February 4, 2016

File downloads found at URLs served by apnpip.ask.com.

5 / 68      (PUP)
http://apnpip.ask.com/media/toolbar/stub2/releases/.../ApnStub.exe  (817e86b7c18a015223a405e79db836e9)

The following 17 files have been seen to comunicate with apnpip.ask.com in live environments.

TCP » 23.0.160.97:80
nokalcjbbdlpmlbhbpjhfpdggbieahfo.crx

TCP » 23.0.160.97:80
loepaecnehfgonejbbblmobcfmcafbfe.crx

TCP » 23.0.160.97:80
loepaecnehfgonejbbblmobcfmcafbfe.crx

TCP » 23.0.160.97:80
bajabccdmihihgpddknddbebeiionoeb.crx

TCP » 23.0.160.97:80
kdompfkmgahepamkcopabhgippnigpij.crx

TCP » 23.0.160.97:80
jhjjdgbhohaallcimgcmakfiobacimkm.crx

TCP » 23.0.160.97:80
kdompfkmgahepamkcopabhgippnigpij.crx

TCP » 23.0.160.97:80
hdheajejbpeacoiechhgeopdnpihmocd.crx

TCP » 23.0.160.97:80
ocmboijoedmbfoccbamenohhabjjhlik.crx

TCP » 23.0.160.97:80
jhjjdgbhohaallcimgcmakfiobacimkm.crx

TCP » 23.0.160.97:80
cfgnifjaajfcpedaghpomgemfkkdiblj.crx

TCP » 23.0.160.97:80
iobjjcahfhldcakcacmcomhgepfcppkc.crx

TCP » 23.0.160.99:80
cnetinstaller

TCP » 23.0.160.99:80
omibgckckhpddglnkmcncahalaahdphp.crx

TCP » 23.0.160.99:80
ceiapeodjfjcbfkfkfbdpgbhbgiidjdb.crx

TCP » 23.0.160.99:80
goipcfdihomaoojgckmhigcogbnpncaf.crx

TCP » 23.0.160.99:80
ajjpgnlpolfpnebjjaciccmmjnmjfjkl.crx

search-results.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.