out.popads.net

TOMKSOFT S.A.

Domain Information

The domain out.popads.net registered by TOMKSOFT S.A. was initially registered in May of 2010 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the SingleHop, Inc. network.
Registrar:
ENOM, INC.

Server location:
Illinois, United States (US)

Create date:
Sunday, May 16, 2010

Expires date:
Tuesday, May 16, 2017

Updated date:
Thursday, October 17, 2013

ASN:
AS32475 SINGLEHOP-INC - SingleHop,US

Root domain:

Scanner detections:
Detections  (87% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.TuguuSL.F, PUP.Installer.InstallX.W, PUP.Installer.FullSpectrumInteractive.Y, PUP.Jottix.JottixinternationalmediaGM2007.Installer (M), PUP.DownloadAdmin.FullSpectrumInteractive.Installer (M), PUP.DownloadAdmin.FullSpec.Installer (M), PUP.Jottix.Jottixin.Installer (M), PUP.Tuguu.Bundler (M), PUP.Tuguu (M)
100.00%

Dr.Web
Trojan.Packed.24553, Adware.W3i.32, Adware.Downware.2220
23.08%

VIPRE Antivirus
Threat.4783235, InstallIQ Installer, Threat.4783369
23.08%

Sophos
DomainIQ pay-per install, InstallQ, PUA 'Download Admin'
23.08%

ESET NOD32
MSIL/DomaIQ.F potentially unwanted application, Win32/DownloadAdmin.G potentially unwanted application
15.38%

avast!
Installer-AE [PUP], Adware-OH [Adw]
15.38%

AVG
Adware AdLoad.B, InstallC
15.38%

Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.InstallIQ
15.38%

K7 Gateway Antivirus
Unwanted-Program
15.38%

K7 AntiVirus
Unwanted-Program
15.38%

NANO AntiVirus
Riskware.Win32.DomaIQ.cumlcs, Trojan.Win32.Searcher.cjaztx
15.38%

Comodo Security
Application.Win32.DomaIQ.R, Application.Win32.InstallIQ.B
15.38%

Avira AntiVirus
APPL/DomaIQ.Gen, APPL/InstallIQ.Gen5
15.38%

MicroWorld eScan
Trojan.Generic.11155325
7.69%

nProtect
Trojan.Generic.11155325
7.69%

The domain out.popads.net has been seen to resolve to the following IP address.

lm2600hs.tomksoft.net
June 5, 2014

File downloads found at URLs served by out.popads.net.

1 / 68      (PUP)

1 / 68      (PUP)

11 / 68    (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

11 / 68    (PUP)

9 / 68      (Adware)

The following file have been seen to comunicate with out.popads.net in live environments.

URL:
http://out.popads.net/

Google Analytics:
UA-19696955

Title:
“PopAds - Home”

Description:
“Simply the best popunder adnetwork in the industry - try and check yourself!”

SSL certificate subject:
CN=*.popads.net, OU=PositiveSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
LiteSpeed

Facebook:
Likes:  285
Shares:  511
Comments:  112

Statistics are for the previous month.