home

leads.383media.com

383 Media, Inc

Domain Information

The domain leads.383media.com registered by 383 Media, Inc was initially registered in December of 2010 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Jose, California within the United States which resides on the Hurricane Electric, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
California, United States (US)

Create date:
Thursday, December 16, 2010

Expires date:
Friday, December 16, 2016

Updated date:
Saturday, April 25, 2015

ASN:
AS6939 HURRICANE - Hurricane Electric, Inc.,US

Root domain:
383media.com

Whois:
3 383media.com records

Scanner detections:
Detections  (83% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.H, PUP.Optional.Installer.Z, PUP.Optional.Installer.BB, PUP.Optional.Installer.S, PUP.Optional.Installer.V
100.00%

Dr.Web
Program.Unwanted.90, Threat.Undefined
50.00%

G Data
Win32.Application.OptimizerPro
30.00%

VIPRE Antivirus
Threat.5064388
10.00%

MicroWorld eScan
Application.Generic.861401
10.00%

Trend Micro House Call
Suspici.34695612
10.00%

Bitdefender
Application.Generic.861401
10.00%

Lavasoft Ad-Aware
Application.Generic.861401
10.00%

F-Secure
Application.Generic.861401
10.00%

The domain leads.383media.com has been seen to resolve to the following 2 IP addresses.

184.105.247.17
September 2, 2014

216.218.212.116
April 16, 2014

File downloads found at URLs served by leads.383media.com.

1 / 68      (PUP)
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&daffcode=airinst  (airde87.exe)

8 / 68      (PUP)
http://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&affCode=aeibrsiyntsqtudmr  (systemoptimizerpro.exe)

1 / 68      (PUP)
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&daffcode=szowpt  (systemoptimizerprosetupak.exe)

3 / 68      (PUP)
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&daffcode=azisrfirntsytunioocus  (systemoptimizerpronpn.exe)

3 / 68      (PUP)
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&affCode=szowpt  (systemoptimizerpro.exe)

2 / 68      (PUP)
http://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&affCode=aeibrsiyntsqtudmr  (systemoptimizerprosetupaidr.exe)

3 / 68      (PUP)
http://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&affCode=aeibrsiyntsqtudmr  (systemoptimizerprosetupaidr.exe)

1 / 68      (PUP)
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&daffcode=iznxstymoanqetgizqer  (systemoptimizerprosetupimcl.exe)

1 / 68      (PUP)
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&daffcode=rtoighrtrpe  (systemoptimizerpro_04232014.exe)

0 / 68
http://leads.383media.com/.../tracker-action.jsp?leadTrackerId=4072&affCode=drinternal  (driverrestore.exe)

1 / 68      (PUP)
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=5302&daffcode=szowpt  (air9058.exe)

0 / 68
https://leads.383media.com/.../tracker-action.jsp?leadTrackerId=3212&affCode=drtool&kw=&xptid=36433000  (InstallShield Setup.exe)

URL:
http://leads.383media.com/

Title:
“Login 383 Media”

SSL certificate subject:
CN=*.383media.com, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
Apache-Coyote/1.1

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.