» cdn.airdlr2.com
Overview
Analysis
IPs Addresses (1)
Downloads (31)
Related Domains (8)

cdn.airdlr2.com

WHOISGUARD, INC. (Proxy Registrant)

Domain Information

The domain cdn.airdlr2.com is registered by proxy through ENOM, INC. and was originally registered in August of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Studio City, California within the United States which resides on the netDNA network.

Registrant:

WHOISGUARD, INC.

Registrar:

ENOM, INC.

Server location:

California, United States (US)

Create date:

Tuesday, August 28, 2012

Expires date:

Sunday, August 28, 2016

Updated date:

Saturday, December 19, 2015

ASN:

AS4436 AS-NLAYER - nLayer Communications, Inc.

Root domain:

airdlr2.com

Whois:

2 airdlr2.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

Unnamed.Threat.11, PUP.Installer.TGFInteractive.U, PUP.Wajam.O, PUP.Installer.WebBarMedia.W, PUP.Installer.WebBarMedia.P, PUP.Installer.WebBarMedia.H, PUP.Installer.WebBarMedia.G, PUP.Installer.WebBarMedia.d, PUP.Installer.CrawlerGroup.R, PUP.Installer.WebBarMedia.e, PUP.Installer.WebBarMedia.g, PUP.WebBarMedia.Optional.Installer.Meta (L), PUP.WebBarMedia.Installer (M)

100.00%

Dr.Web

Adware.Searcher.2542, Trojan.DownLoader8.47497, Program.Unwanted.45, riskware program Program.Unwanted.45, Adware.Conduit.266

23.33%

VIPRE Antivirus

Wajam, TGF Interactive LLC

13.33%

Clam AntiVirus

Win.Adware.PCFixSpeed

13.33%

AVG

Generic

10.00%

Malwarebytes

PUP.Optional.Wajam, PUP.Optional.WebBar.A

6.67%

ESET NOD32

Win32/Wajam

6.67%

Trend Micro House Call

Suspicious_GEN.F47V0704, Suspicious_GEN.F47V0413

6.67%

NANO AntiVirus

Riskware.Win64.Unwanted.dhdvik

6.67%

Emsisoft Anti-Malware

Trojan-Ransom.Win32.LockScreen

3.33%

XVirus List

Win.Detected

3.33%

Bkav FE

W32.Clod1a0.Trojan

3.33%

Vba32 AntiVirus

TrojanDownloader.Genome

3.33%

K7 AntiVirus

Adware

3.33%

McAfee

Artemis!7477587FF850

3.33%

The domain cdn.airdlr2.com has been seen to resolve to the following IP address.

108.161.189.193

February 20, 2014

File downloads found at URLs served by cdn.airdlr2.com.

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupR2.exe (air53d.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_SSOP.exe (web_bar_setupq4.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_L2.exe (air1df0.exe)

2 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupP6.exe (air176b.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupQ2.exe (d21266798e5c8c14e6719ae941baacf4)

9 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_2.0.5574.22315_3e16a056d.exe (airwebbar_soft_partner.exe)

2 / 68 (PUP)

http://cdn.airdlr2.com/downloads/offers/.../TranslateGeniusSetupC.exe (aird2f6.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupN2.exe (aire20d.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupS_GB2.exe (aire160.exe)

5 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../SpywareClearSetup.exe (9ec9c86034df23508a40fcf7f4564b40)

4 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Setup_en1.exe (e4705e202898cc250bd6752fe2fc50c0)

4 / 68 (PUP)

http://cdn.airdlr2.com/downloads/offers/.../SpywareClearSetup1.exe (airaea7.exe)

1 / 68 (PUP)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_2.0.5450.28350_3e16a056d.exe (web_bar_setup_2-0-5450-28350_3e16a056d.exe)

2 / 68 (PUP)

http://cdn.airdlr2.com/downloads/offers/.../TranslateGeniusSetup.exe (fb70b713bc64a79c3fa4411b43699680)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_G_split.exe (airce83.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_L_02_10_14.exe (air4abb.exe)

6 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../wajam_download.exe (75da74efcebf13be53cbdc4ac4ae75d5)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_CU.exe (airefc.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_L.exe (air50b9.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupQ4.exe (6b47fe603ae7d065d9da360f8af4a3ea)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_CU_2.0.5435.23818_We9ed33f1.exe (68d8c3247aa0f9b376027354a2cc67c6)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_L_22_10_14.exe (air57f7.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_2.0.5435.23818_2b18fa1fe5.exe (8f6ec2e9bad4bd4cd2ec2c798a20f8fb)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupQ5.exe (aee5553df21c43ba31cb6cbbd787e110)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupQ3.exe (web_bar_setup_2.0.5354.24962_xeb05c6e1.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup_CU_24_10_14.exe (9057e768b182b285d4f3b230c405a082)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupQ.exe (airddbc.exe)

7 / 68 (PUP)

http://cdn.airdlr2.com/downloads/offers/.../wajam_downloadB.exe (wajam_download.exe)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_SetupC3.exe (3880a0a992b16ff0396e70f98e4ea6b2)

1 / 68 (Adware)

http://cdn.airdlr2.com/downloads/offers/.../Web_Bar_Setup-no-popup.exe (c64ed03bcf6ddeeefdd5cd3346c177f9)

Latest 30 of 31 download URLs

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.