home

secure-ams.adnxs.com

AppNexus Inc

Domain Information

The domain secure-ams.adnxs.com registered by AppNexus Inc was initially registered in May of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
MARKMONITOR INC.

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Tuesday, May 27, 2008

Expires date:
Friday, May 27, 2016

Updated date:
Saturday, April 26, 2014

ASN:
AS29990 ASN-APPNEXUS - AppNexus, Inc

Root domain:
adnxs.com

Whois:
1 adnxs.com record

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Wilmaonline.c, PUP.Installer.Stepitapp.F, PUP.OUTBROWSE.I, PUP.Installer.Wilmaonline.b, PUP.OUTBROWSE.M, PUP.Optional.Installer.Y, PUP.Installer.OUTBROWSE.F, PUP.Installer.OUTBROWSE.K, PUP.Bundler.Outbrowse, PUP.Amonetize.Bundler, PUP.Brightcircle.Wilmaonline.Bundler (M), PUP.Outbrowse.Bundler (M), PUP.Adknowledge.Fileangels.Bundler (M), PUP.Brightcircle.Wilmaonl.Bundler (M), PUP.Outbrowse (M)
100.00%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize, not-a-virus:Downloader.Win32.Agent, not-a-virus:AdWare.Win32.OutBrowse, HEUR:Trojan-Downloader.Win32.Generic
48.84%

McAfee
Artemis!8A2ED863690C, Artemis!EC6559E3952C, Adware-OutBrowse, PUP-Amonetize, Adware-OutBrowse.a, Artemis!648647836FF7, Artemis!17FD46A07B73, Artemis!D3C491199326
44.19%

Dr.Web
Adware.Downware.2467, Adware.Downware.2081, Adware.Downware.6169, Adware.Downware.8379, Adware.Downware.8012, Adware.Downware.5822
41.86%

Malwarebytes
PUP.Optional.Amonetize.A, PUP.Optional.Outbrowse, PUP.Optional.OutBrowse
39.53%

VIPRE Antivirus
Conduit, Threat.4784459, OutBrowse, Threat.4150696, Threat.4823950, Amonetize
39.53%

G Data
Win32.Trojan.Agent.4P134N, Win32.Application.Outbrowse, Gen:Variant.Application.Bundler.Amonetize.12, Win32.Application.OutBrowse
39.53%

Sophos
Amonetize, OutBrowse Revenyou, Generic PUA KM, Generic PUA JN, Generic PUA PH
37.21%

Avira AntiVirus
ADWARE/Adware.Gen2, APPL/Downloader.Gen, APPL/Amonetize.htzw, APPL/OutBrowse.lwasp
37.21%

Agnitum Outpost
PUA.Amonetize, PUA.OutBrowse
34.88%

AVG
Generic, Generic_r, Win32/DH{gRKBE4EPICVXTg}
34.88%

Vba32 AntiVirus
Downloader.Agent, AdWare.OutBrowse, suspected of Trojan.Downloader.gen.h, Hoax.PornoAsset
27.91%

K7 AntiVirus
Unwanted-Program
27.91%

NANO AntiVirus
Riskware.Win32.Amonetize.cwefoi, Riskware.Nsis.Downware.dehadt, Riskware.Win32.Amonetize.ddtnan, Trojan.Win32.Generic.dbxkzp
23.26%

ESET NOD32
Win32/Amonetize.AJ (variant), Win32/OutBrowse.AI (variant), Win32/Amonetize.BN (variant), Win32/OutBrowse.AM, Win32/Amonetize.BM (variant)
20.93%

The domain secure-ams.adnxs.com has been seen to resolve to the following 164 IP addresses.

185.33.220.59
161.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 17, 2016

185.33.222.170
September 17, 2016

185.33.222.61
September 17, 2016

185.33.220.199
201.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 17, 2016

185.33.220.123
159.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 17, 2016

185.33.220.87
158.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 17, 2016

185.33.220.38
203.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 16, 2016

185.33.222.236
September 16, 2016

185.33.222.187
September 16, 2016

185.33.222.93
September 16, 2016

185.33.222.20
September 16, 2016

185.33.222.8
September 16, 2016

185.33.220.215
184.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 16, 2016

185.33.220.210
185.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 16, 2016

37.252.163.184
float.2699.bm-impbus.prod.ams1.adnexus.net
August 14, 2016

37.252.163.72
float.2419.bm-impbus.prod.ams1.adnexus.net
August 14, 2016

37.252.162.241
float.2014.bm-impbus.prod.ams1.adnexus.net
August 14, 2016

37.252.162.221
float.1754.bm-impbus.prod.ams1.adnexus.net
August 14, 2016

37.252.162.95
July 15, 2016

37.252.162.33
float.1552.bm-impbus.prod.ams1.adnexus.net
July 15, 2016

37.252.163.222
float.2661.bm-impbus.prod.ams1.adnexus.net
July 15, 2016

37.252.162.187
float.2784.bm-impbus.prod.ams1.adnexus.net
June 28, 2016

37.252.163.235
float.2676.bm-impbus.prod.ams1.adnexus.net
June 28, 2016

37.252.163.229
float.2669.bm-impbus.prod.ams1.adnexus.net
June 28, 2016

37.252.163.83
float.2420.bm-impbus.prod.ams1.adnexus.net
June 28, 2016

37.252.163.75
float.2423.bm-impbus.prod.ams1.adnexus.net
June 28, 2016

37.252.163.105
float.2445.bm-impbus.prod.ams1.adnexus.net
June 25, 2016

37.252.163.87
float.2429.bm-impbus.prod.ams1.adnexus.net
June 25, 2016

37.252.162.200
June 25, 2016

37.252.163.107
float.2449.bm-impbus.prod.ams1.adnexus.net
June 19, 2016

 
Showing 30 of 164 IP Addresses

File downloads found at URLs served by secure-ams.adnxs.com.

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?8uSPZ8PWtz-ihA89pHmyPwAAAAAAAPA_ooQPPaR5sj_y5I9nw9a3Pwa1YE6zkAdTUGalCek6_W5o0_xTAAAAAKjrMgByBwAA_AcAAAIAAAAZOAIB2vgGAAAAAQBVU0QAVVNEACwB-gDpUwAAjsYAAgUAAQIAAJIAAyheoQAAAAA./cnd=!WAa2OQim04sCEJnwiAgY2vEbIAI./referrer=www.youtube.com/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3337128&clickid=UAT_ams1CNDMlc2Q3c7-bhACGIbqgvO0luSDUyIMODAuOC4yNDUuMTY0KAEw6KbznwU.  (installation.exe)

0 / 68
https://secure-ams.adnxs.com/click?RvhFI8UT0D-fukrDpivLPw4tsp3vp-o_n7pKw6Yryz9G-EUjxRPQP-SVSOGBcQgVc2RMke5NqjuHrH9TAAAAACjxKADIAQAAdgIAAAIAAABopLwAOVoGAAAAAQBVU0QAVVNEACwB-gB93wAAN3kAAQUAAQIAAIgA8ifK9AAAAAA./cnd=!vAYqQAj7iLkBEOjI8gUYubQZIAE./referrer=http://www.lpmxp2.com/7C3C627C76355557655779592E61766CF5118596B7340C2043642E9F0A19CBF5CC2D5C5A0C2FFE51D919B59897F935AE?tgu_src_lp_domain=www.mysoftpcdll.com/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5221&capp=FlashPlayer&ti1=ams1CPPIsYrpvZPVOxACGOSrooqesJyEFSIONzguMjAzLjE1Mi4xMDUoATCH2f6bBQ..&ti2=2683176&ti3=${APN}  (flashplayersetup__5221_i718676274_il8.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAANiIjDUbVzcYAprX_NOSOyt7ePRTAAAAACnuMgByBwAA_AcAAAIAAAAVOAIBF1EGAAAAAQBVU0QAVVNEAKAAWAIFcgAA9L8AAgUAAQIAAJQAphMoqAAAAAA./cnd=!7QWeOQjR1YsCEJXwiAgYl6IZIAI./referrer=https://www.youtube.com/clickenc=http://clickeu.tractionize.com/st?cipid=377000&ttype=1&crid=2347538&dast=Ym89MSZzbGlkPTAmc3ViaWQ9MTAwOCZzbz0xJmNpY21wPTk1NDc4JnB1YmlkPTk3MDAmY2lwaWQ9Mzc3MDAwJmNpc2lkPTcwQzNFMjIzQjgzNTM3MTkxNDc4MTkwOTg0JmNpcmlkPTcwQzNFMjIzQjgzNTM3MjA5ODcxMDI2MjUmY2l1aWQ9LTI5ODI0MjU0Mjc2MjQ2NTQ5NTYmY3JpZD0yMzQ3NTM4JmV4Y2lkPTIyJm1tdD0tMSZjbnRyeT0xMDQ=&cmcv=${CMCV}&tgtf=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3337769&clickid=UAT_ams1CIK03ua_2uSdKxACGNiRsqyz49WbGCINOTUuMjMzLjE0NS44OSgBMPvw0Z8F  (download.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAF5wtI0wM8VCY9oFJGx9RwHPvOxTAAAAADSxMgByBwAA_AcAAAIAAAD7NwIB2vgGAAAAAQBVU0QAVVNEANgCWgDpUwAAJLcAAgUAAQIAAJIAbBUj5wAAAAA./cnd=!uQaBPQim04sCEPvviAgY2vEbIAI./referrer=www.youtube.com/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3322164&clickid=UAT_ams1COO0l6DCrd-jARACGN7g0e2I5sziQiILODkuODYuOTEuOTAoATDP-bKfBQ..  (download.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?uR6F61G4nj-FfNCzWfWZPwAAAAAAAPA_hXzQs1n1mT-4HoXrUbieP5kTe6zLDCFbMassddDQNzjrcddTAAAAACfZMQA_AQAA_AcAAAIAAABtWgABMPkGAAAAAQBVU0QAVVNEACwB-gA_VAAAcLoAAgUAAQIAAJIA2yWPPAAAAAA./cnd=!fwZ3PQjG45wCEO20gQgYsPIbIAA./referrer=https://paypalmanager.paypal.com/login.do/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1CLHWsqmHmvSbOBACGJmn7OO6mcOQWyINNzguMjUwLjUwLjE0NCgBMOvj3Z4F&ti2=3266855  (flashplayersetup__280_i1101328388_il34.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?n8PWtKdRvT8CPvP44bi2PwAAAAAAAPA_Aj7z-OG4tj-gw9a0p1G9P2_HVmgihAp4O1a1_59tpWINJvJTAAAAAFCxMgByBwAA_AcAAAIAAABtWgAB2vgGAAAAAQBVU0QAVVNEACwB-gDpUwAAIboAAgUAAQIAAJIAUygKAwAAAAA./cnd=!UwZiOQiKyZ0CEO20gQgY2vEbIAA./referrer=www.youtube.com/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1CLus1f3_s9vSYhACGO-O28KmhKGFeCINOTIuOTEuMTgyLjEzOCgBMI3MyJ8F&ti2=3322192  (flashplayersetup__280_i1190125370_il38.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?deYU1tM3uz_HGQ9x0P-2PwAAAAAAAPA_xxkPcdD_tj915hTW0ze7P2ZfD5_DuJtrxf3dlFraNFitTv9TAAAAAMwmNAA_AQAA_AcAAAIAAAAx7ekA3NUGAAAAAQBVU0QAVVNEACwB-gDR-wAASLgAAgUAAQIAAJAAzSlQ6AAAAAA./cnd=!SAYEOwjHtp0CELHapwcY3KsbIAA./referrer=www.tlscontact.com/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3417804&clickid=UAT_ams1CMX796apy7aaWBACGOa-vfi5mO7NayINOTAuMjEzLjI0My41NygBMK2d_Z8F  (installation.exe)

7 / 68      (Adware)
https://secure-ams.adnxs.com/click?zczMzMzM5D_NzMzMzMzkP7gehetRuK4_zczMzMzM5D_NzMzMzMzkP4cHl67onNc9MC0waOHeoG4rEUBUAAAAAPf7LwB2AgAAdgIAAAIAAABx_SkBJPwGAAAAAQBVU0QAVVNEANgCWgAhcQAAYs4AAgQAAQIAAJQAJzBaagAAAAA./cnd=!eAZLOgiEhMcCEPH6pwkYpPgbIAQ./referrer=http://www.mymaths.co.uk//clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=ams1CLDawMGW3LfQbhACGIeP3PSKnefrPSINODYuMTU0LjE1LjE1MSgBMKuigKIF&tag=3144695  (setup.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?5cWTS39zkD-9cosb0n-JPwAAAAAAAPA_vXKLG9J_iT_lxZNLf3OQP9aDt9nhpEZBoz1BxzdKWwV6AfZTAAAAAC7uMgByBwAA_AcAAAIAAAD7NwIBF1EGAAAAAQBVU0QAVVNEANgCWgDV-AAAcdgAAgUAAQIAAI4ASiZWEQAAAAA./cnd=!JQbwOgim04sCEPvviAgYl6IZIAI./referrer=https://www.youtube.com/clickenc=http://clickeu.tractionize.com/st?cipid=377000&ttype=1&crid=2347658&dast=Ym89MSZzbGlkPTAmc3ViaWQ9MTA0NiZzbz0xJmNpY21wPTk1NDc4JnB1YmlkPTk3MDAmY2lwaWQ9Mzc3MDAwJmNpc2lkPURDMTIyQUQ4N0Y2ODc0MDcxMjIxNTAzNjAwJmNpcmlkPURDMTIyQUQ4N0Y2ODc0MDgxNjUyMDg3NzIzJmNpdWlkPTI3NTk2MzkyNzg1MjU3OTc2MCZjcmlkPTIzNDc2NTgmZXhjaWQ9MjImbW10PS0xJmNudHJ5PTcz&cmcv=${CMCV}&tgtf=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3337774&clickid=UAT_ams1CKP7hLr8xtKtBRACGNaH3s2dnKmjQSIPMTA5LjIxNC4xNTkuMTU1KAEw-oLYnwU.  (installation.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?l0nZmsT_xj-iMjUrBdPBPwAAAAAAAPA_ojI1KwXTwT-XSdmaxP_GPyRQyYVpzGNB2J5flp_E5Gn3c-9TAAAAAEixMgByBwAA_AcAAAIAAAAZOAIB2vgGAAAAAQBVU0QAVVNEACwB-gDpUwAACNMAAgUAAQIAAJIAaCcDZwAAAAA./cnd=!bAb3OgjHtp0CEJnwiAgY2vEbIAA./referrer=www.youtube.com/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3322184&clickid=UAT_ams1CNi9_rL5k7HyaRACGKSgpa6YjfOxQSINODQuMTMuMTc0LjI1MSgBMPfnvZ8F  (download.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAALH510T4_UhIz-Bc_CTcFhYUOvZTAAAAAIeyMwB2AgAA_AcAAAIAAAAZOAIBLTwHAAAAAQBVU0QAVVNEACwB-gBlDAAADbcAAgUAAQIAAJQAxBTFQAAAAAA./cnd=!Mwb0OAim04sCEJnwiAgYrfgcIAI./referrer=https://www.youtube.com/watch/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3388039&clickid=UAT_ams1CM_B8-LPhLeLFhACGLHz36aEv7-kSCINNzguMjIzLjIzLjE1MSgBMJT02J8F  (installation.exe)

17 / 68    (PUP)
https://secure-ams.adnxs.com/click?GBvU_fNctT8EHM7uQw2yP-F6FK5H4eY_BBzO7kMNsj8YG9T981y1P-4qw-f3Ci0hYmnukxe54nHsh2RTAAAAABnkJwA_AQAAdgIAAAIAAACo68MATe8FAAAAAQBVU0QAVVNEACADuAG2wwAActkAAQUAAQIAAI4AYinpEQAAAAA./cnd=!fgYwPQjKo-kBEKjXjwYYzd4XIAA./referrer=ediloisir.com/clickenc=http://.../direct-download.html?version=1.1.7.40&ci=6147&capp=MediaPlayer&ti1=ams1COLSuZ_5oq7xcRACGO7VjL7-3sKWISIMODMuMTU5LjI2LjM3KAEw7I-SmwU.&ti2=PMZ&ti3=2614297  (mediaplayer__6147_i626454684_il52.exe)

1 / 68      (PUP)
https://secure-ams.adnxs.com/click?U7YLAjEzbD9TtgsCMTNsP5huEoPAysE_U7YLAjEzbD9TtgsCMTNsP2cg_4m89Uwg8NrtDtGFxEJTACBUAAAAAPj7LwB2AgAAdgIAAAIAAAAbgxMBJPwGAAAAAQBVU0QAVVNEACwB-gAlcQAA4ecAAgQAAQIAAJQAtSGLLAAAAAA./cnd=!QAYtOgit17cCEJuGzggYpPgbIAQ./referrer=http://foros.descargasteocraticas.org//clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=ams1CPC1t_eQuqHiQhACGOfA_M_It72mICIMODguMTUuMTI0LjIzKAEw04CAoQU.&lplink=http://www.yac.mx/download/.../down.php?pt=broe  (yet_another_cleaner_broe.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAHsUrkfheqQ_AAAAAAAAAAAAAAAAAAAAAHCZI0x-UFkaTvhPnI451XwMzctTAAAAAK_-JQDaBgAA_AcAAAIAAAAZOAIBxlkFAAAAAQBVU0QAVVNEACwB-gBKmQAAStgAAgUAAQIAAI4AiBdY_wAAAAA./cnd=!LQbpOgjR1YsCEJnwiAgYxrMVIAI./referrer=https://www.youtube.com/clickenc=http://clickeu.tractionize.com/st?cipid=166010&ttype=1&crid=1418678&dast=Ym89MSZzbGlkPTAmc3ViaWQ9MTA0NiZzbz0xJmNpY21wPTExNDYxOCZwdWJpZD0xNzAwJmNpcGlkPTE2NjAxMCZjaXNpZD03RjlEMTUxRDQ2MTA5Njg1NTE5NTk4MzAzODQmY2lyaWQ9N0Y5RDE1MUQ0NjEwOTY4NTY0ODgxMDgzODYmY2l1aWQ9LTY4MDk2MjM0MjI0ODY1MTI3OTcmY3JpZD0xNDE4Njc4JmV4Y2lkPTIyJm1tdD0tMSZjbnRyeT0xMDQ=&cmcv=${CMCV}&tgtf=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=2490031&clickid=UAT_ams1CM7wv-Lpsc7qfBACGPCyjuHkj9SsGiIMNzkuMTYuMTMzLjQ2KAEwjJqvngU.  (setup.exe)

14 / 68    (Adware)
https://secure-ams.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAKjGSzeJQeQ_AAAAAAAAAAAAAAAAAAAAAEtImm2WORktZ7xoUcbcly8H0ARUAAAAAIeiMgAWCgAArwcAAAIAAADvWuIAfNEGAAAAAQBVU0QAVVNEACwB-gAXjgAAesQAAgUAAQIAAJQAMheW0AAAAAA./cnd=!BQe4RAjc_esBEO-1iQcY_KIbIAI./referrer=bing.com/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=ams1COf4oovlmPfLLxACGMuQ6ezmss6MLSIMNDEuMzYuMTUzLjM4KAEwh6CToAU.&ti2=SBZ&ti3=3318407  (flashplayer__6741_i1250751702_il6.exe)

1 / 68      (Malware)
https://secure-ams.adnxs.com/click?iNZ2pOvq0T_gopVG5UfOP0oMAiuHFuk_4KKVRuVHzj-I1nak6-rRP3IkzwH4VXY6a2AnmVlmvwxe8oBTAAAAACjxKADIAQAAdgIAAAIAAABopLwAOVoGAAAAAQBVU0QAVVNEACwB-gB93wAA5NYAAQUAAQIAAIgAViq4swAAAAA./cnd=!vAYqQAj7iLkBEOjI8gUYubQZIAE./referrer=http://search.babylon.com/?as=12/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5221&capp=FlashPlayer&ti1=ams1COvAncmZy9nfDBACGPLIvI6Av5W7OiINODIuMTIzLjI4LjE4NigBMN7kg5wF&ti2=2683176&ti3=${APN}  (flashplayersetup__5221_i723876204_il8.exe)

14 / 68    (Adware)
https://secure-ams.adnxs.com/click?zczMzMzM5D_NzMzMzMzkP3npJjEIrKw_zczMzMzM5D_NzMzMzMzkP9WgZDriA7U4gSxZfkkjkHFUVDNUAAAAAPf7LwB2AgAAdgIAAAIAAABx_SkBJPwGAAAAAQBVU0QAVVNEANgCWgAhcQAAYd4AAgQAAQIAAJQAWi5PwQAAAAA./cnd=!eAZLOgiEhMcCEPH6pwkYpPgbIAQ./referrer=http://webmail.tiscali.co.uk//clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=ams1CIHZ5PKX6YjIcRACGNXBktOj_MDaOCIMOTIuMTguMTUuMTc1KAEw1KjNoQU.&tag=3144695  (setup.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?laz1ECDK0j-WtYqXHMHPPwAAAAAAANA_lrWKlxzBzz-VrPUQIMrSP4aAWDnGAbQAKqqSJODF8QBUv-lTAAAAACjxKADIAQAA_AcAAAIAAAAMewABOVoGAAAAAQBVU0QAVVNEACwB-gBSUAAAceAAAgUAAQIAAJAAfiVCFAAAAAA./cnd=!0AUfNgiPx5YCEIz2gQgYubQZIAA./referrer=http://maternante.blog4ever.com//clickenc=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1CKrUyqSCvPF4EAIYhoHiyuO4gFoiDTg0LjEwMC4xMTAuMzcoATDU_qafBQ..&ti2=2683176  (flashplayersetup__280_i1158722291_il35.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?beaQ1ELJlD-Tp-7Cvc-SP7ByaJHtfOs_k6fuwr3Pkj9t5pDUQsmUP5umOtqLHQRe83ils3zqRCoXHUpTAAAAAIvcJQCTBwAAzgIAAAIAAAAjh4wAvfAFAAAAAQBVU0QAVVNEANgCWgAnUQAAcboAAgUCAQIAAI4AWCwj1QAAAAA./cnd=!wAX_MwilhaYBEKOOsgQYveEXIAI./referrer=https://media.jumpstart.com/DOUnity/yahoo-ads.html/clickenc=http://cnct.tlvmedia.com/ckl.php?s=1&c=ams1CPPxlZ3Lz7qiKhACGJvN6tG9sYeCXiINNDEuMzYuMTM1LjIzNSgBMJe6qJoF&mx=anx&t=adv191352&d=145258&r=http://mbttd.com/engine/.../c4c3VwcGx5X3BsYXRmb3JtX2FjY291bnRfaWQ9NDI1JnN1cHBseV9wbGF0Zm9ybV9pZD00OTEmbGluZV9pdGVtX2lkPTk4MDU?ext_click_id=$CLICKID$  (setup.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?I124tvJkiz8vSDXnCDuFPwAAAAAAAPA_L0g15wg7hT8kXbi28mSLP_79Xlk4oidCn22gopPNVSfEW9lTAAAAANvPMAByBwAA_AcAAAIAAAAZOAIB2vgGAAAAAQBVU0QAVVNEACwB-gBKCgAAmM4AAgUAAQIAAJQAxyN4BQAAAAA./cnd=!bAb3OgjHtp0CEJnwiAgY2vEbIAA./referrer=www.youtube.com/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3198939&clickid=UAT_ams1CJ_bgZW6svOqJxACGP77-8qFx-iTQiIMMi4xMjYuMTY3LjIwKAEwxLflngU.  (setup.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?WnjIwppphj9GXVu9pF6BPwAAAAAAAPA_Rl1bvaRegT9beMjCmmmGP8a-u1igEmxoyapXds7yShZiA-1TAAAAAEjWMQByBwAA_AcAAAIAAABoWgABF1EGAAAAAQBVU0QAVVNEANgCWgDV-AAAu9gAAgUAAQIAAI4AmCVYpgAAAAA./cnd=!ugWfNgiKyZ0CEOi0gQgYl6IZIAA./referrer=https://www.youtube.com/clickenc=http://clickeu.tractionize.com/st?cipid=377000&ttype=1&crid=2207628&dast=Ym89MSZzbGlkPTAmc3ViaWQ9MjA0MiZzbz0xJmNpY21wPTk1NDc4JnB1YmlkPTIwNDAmY2lwaWQ9Mzc3MDAwJmNpc2lkPUMyQ0ZFRTNGNDMxMTQ1NzEzMjk0MjkxNjAmY2lyaWQ9QzJDRkVFM0Y0MzExNDU3MjkyNDQ1NzYwMSZjaXVpZD0tODY0MDU1NjY2NDEzMjAyNDk0MiZjcmlkPTIyMDc2MjgmZXhjaWQ9MjImbW10PS0xJmNudHJ5PTcz&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1CMnV3rLn2bylFhACGMb97sWF1IS2aCIONzguMjM3LjE4MS4yMDIoATDihrSfBQ..&ti2=3266120  (flashplayersetup__280_i1171479194_il35.exe)

14 / 68    (PUP)
https://secure-ams.adnxs.com/click?iTB-Gvfm1T_iQdT5xy3SPwAAAAAAAPA_4kHU-cct0j-IMH4a9-bVP7ccJn5ELr98lLmTes0PuFQ_Rz9TAAAAAG7QJQA_AQAAdgIAAAIAAADoILIATe8FAAAAAQBVU0QAVVNEACADuAG0LAAAqbgAAQUCAQIAAI4AwiaEfQAAAAA./cnd=!8Aa8QQjK8KsBEOjByAUYzd4XIAE./referrer=http://display.pricora.com/deealV3/interstitiel/iframe.html?201445/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5221&capp=FlashPlayer&ti1=ams1CJTzztTX-YPcVBACGLe5mPHHyMvffCIMMi4xMS4yMjcuMjQ1KAEwv479mQU.&ti2=2478190&ti3=${APN}  (flashplayersetup__5561_i532371410_il12.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?N_QNCz95wz8i1Ii3IS--PwAAAAAAAPA_ItSItyEvvj839A0LP3nDPz7ijWSdCghzaEISG_uPjFmebfxTAAAAAKjrMgByBwAA_AcAAAIAAAAZOAIB2vgGAAAAAQBVU0QAVVNEACwB-gDpUwAA3-cAAgUAAQIAAJIADiMWdgAAAAA./cnd=!bAb3OgjHtp0CEJnwiAgY2vEbIAA./referrer=www.youtube.com/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3337128&clickid=UAT_ams1COiEydix_6PGWRACGL7Et6TW04KEcyINODIuMjYuMjUyLjIyNSgBMJ7b8Z8F  (installation.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?ITVsiWjAxz8tjgDv8RHEP8dLN4lBYOU_LY4A7_ERxD8iNWyJaMDHPz_RNkh9IYgVN9BpGbye-iO7WOhTAAAAALElMgDtCAAA_AcAAAIAAABoWgABmdUGAAAAAQBVU0QAVVNEANgCWgBpPwAAWr0AAgUAAQIAAJQAoyXK8gAAAAA./cnd=!WAYOPwje_6QCEOi0gQgYmasbIAA./referrer=www.youtube.com/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1CLegp8vB16f9IxACGL-i28HUr4jEFSINMTQ2LjUyLjc0LjIxMigBMLuxoZ8F&ti2=3286449  (flashplayersetup__280_i1153979126_il35.exe)

1 / 68      (Adware)
https://secure-ams.adnxs.com/click?LGcFPoNTpT8Fm5vHSQWiP1TjpZvEIOQ_BZubx0kFoj8rZwU-g1OlP6ZB_pPpMRsQN9BpGbye-iP8telTAAAAALElMgDtCAAA_AcAAAIAAABoWgABmdUGAAAAAQBVU0QAVVNEANgCWgBpPwAAzmoAAgUAAQIAAJQAbiUwqgAAAAA./cnd=!6AWyOAivyZcCEOi0gQgYmasbIAI./referrer=www.youtube.com/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1CLegp8vB16f9IxACGKaD-Z-ZvcyNECINMTQ2LjUyLjc0LjIxMigBMPzrpp8F&ti2=3286449  (flashplayersetup__280_i1158722291_il35.exe)

1 / 68      (Malware)
https://secure-ams.adnxs.com/click?s_FDODxshj9G9TIqLdGAP4lBYOXQIrs_RvUyKi3RgD-z8UM4PGyGP6aA4fTKu1NWAw6Ru1dm1SiWQI9TAAAAAITHJgDaBgAArwcAAAIAAABNodIAgP0FAAAAAQBVU0QAVVNEANgCWgAeewAA4r8AAQUAAQIAAI4A3Sf5gAAAAAA./cnd=!xwYjQQi_7tUBEM3CygYYgPsXIAI./referrer=https://vidzplay.com/registration/clickenc=http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=ams1CIOcxNz7ytnqKBACGKaBhqev-e6pViINODEuMjAzLjEwMy4zNigBMJaBvZwF&ti2=SBZ&ti3=2541444  (flashplayersetup__6145_i790733147_il292.exe)

20 / 68    (Adware)
https://secure-ams.adnxs.com/click?HZBFFRlC2z-JD7wnfgjXPwAAAAAAAPA_iQ-8J34I1z8dkEUVGULbP0yWgrV66TdyR0DicZjo7UClNvtTAAAAALrfMwA_AQAA_AcAAAIAAAAx7ekA3NUGAAAAAQBVU0QAVVNEACwB-gDxigAAWtgAAgUAAQIAAJQARSRZgwAAAAA./cnd=!vQZ8QQjq964CELHapwcY3KsbIAA./referrer=www.google.co.uk/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3399610&clickid=UAT_ams1CMeAiY-Hk_r2QBACGMysiqyrr_qbciINODcuMTE0LjI0LjEwNCgBMKXt7J8F  (installation.exe)

18 / 68    (Adware)
https://secure-ams.adnxs.com/click?3b6yepc8mD97FK5H4XqUPwAAAAAAAPA_HF3ea1cWlT_dTBbfkfSYPyvB4_CJ4RVMaVFaeMFVoB54Z-tTAAAAALLWMQDIAQAA_AcAAAIAAAAZOAIBkwgHAAAAAQBVU0QAVVNEACwB-gCggQAAxNcAAgUAAQIAAJIArCUS2gAAAAA./cnd=!xgUXOAjHtp0CEJnwiAgYk5EcIAA./referrer=https://www.youtube.com/clickenc=http://clickeu.tractionize.com/st?cipid=1694000&ttype=1&crid=2260798&dast=Ym89MSZzbGlkPTAmc3ViaWQ9MTAwNSZzbz0xJmNpY21wPTI5MjQyOCZwdWJpZD0xMDE3JmNpcGlkPTE2OTQwMDAmY2lzaWQ9NkVDRUFDNzVBQzI0OTcxMTA1MTgxMTU2NiZjaXJpZD02RUNFQUM3NUFDMjQ5NzIxMjgxMTUxMjMmY2l1aWQ9LTE0MzQzNTMwMTgzODU4NjY1MDImY3JpZD0yMjYwNzk4JmV4Y2lkPTIyJm1tdD0tMSZjbnRyeT0yMjY=&cmcv=${CMCV}&tgtf=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3266226&clickid=UAT_ams1COmi6cKXuJXQHhACGKuCj4efsfiKTCINODcuMTE0LjI4LjIyMCgBMPjOrZ8F  (setup.exe)

7 / 68      (Adware)
https://secure-ams.adnxs.com/click?wytz8YXYsD_DK3PxhdiwP-xRuB6F67E_wytz8YXYsD_DK3PxhdiwPyyboNx1_FhGLzbOndSCtx6ZlEZUAAAAAPj7LwB2AgAAdgIAAAIAAAB9_SkBJPwGAAAAAQBVU0QAVVNEACwB-gAlcQAAmc4AAgQAAQIAAJQAeCyEmwAAAAA./cnd=!1QaDPwjWg8cCEP36pwkYpPgbIAQ./referrer=http://download.cnet.com//clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=ams1CK_suO7J2uDbHhACGKy2guXdjr-sRiINMTc2LjI3LjE5OC4yMigBMJmpmqIF&tag=3144696  (setup.exe)

17 / 68    (Adware)
https://secure-ams.adnxs.com/click?ohck_WoRRj9AdecVwqVCPwAAAAAAAPA_QHXnFcKlQj-jFyT9ahFGPxiyrLa4w-dGHzzp0xlpr0BmKOFTAAAAAIrWMQDIAQAA_AcAAAIAAAD7NwIBkwgHAAAAAQBVU0QAVVNEANgCWgCggQAAQbgAAgUAAQIAAJIALiNEzAAAAAA./cnd=!EwahOgim04sCEPvviAgYk5EcIAI./referrer=https://www.youtube.com/watch?v=Yaf5atwSszI/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3266186&clickid=UAT_ams1CJ_4pJ-do9rXQBACGJjksrWL9_DzRiINODkuMjI2LjIxMy41MigBMObQhJ8F  (setup.exe)

 
Latest 30 of 58 download URLs

The following 201 files have been seen to comunicate with secure-ams.adnxs.com in live environments.

TCP » 185.33.220.199:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.199:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.215:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 185.33.220.59:443
jingling.exe

TCP » 185.33.220.38:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 185.33.220.210:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.210:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.59:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.59:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.215:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.59:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 185.33.220.59:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.59:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.59:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.59:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.38:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.59:443
apptrailers.exe

TCP » 185.33.220.38:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 185.33.220.215:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.59:80
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 465 files

URL:
http://secure-ams.adnxs.com/

Google Analytics:
UA-4057742

Title:
“error page for redirects from product”

SSL certificate subject:
CN=*.adnxs.com, O="AppNexus, Inc.", L=New York, S=New York, C=US

SSL certificate issuer:
CN=GeoTrust SSL CA - G3, O=GeoTrust Inc., C=US

Web server:
Apache/2.2.22 (Ubuntu)

aim4media.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.