www.adshost2.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.adshost2.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in United, Pennsylvania within the United States which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Pennsylvania, United States (US)

Create date:
Thursday, September 22, 2011

Expires date:
Thursday, September 22, 2016

Updated date:
Thursday, September 03, 2015

ASN:
AS47328 TRI-AS True Records Inc.

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaxigetLimited.G, PUP.New IT Limited.Maxiget (M), PUP.New IT Limited.Maxiget.Bundler (M), PUP.Catalina (M), Threat.Win.Reputation.IMP, PUP.New IT Limited (M)
97.92%

McAfee
Artemis!BB39D90B74D5, Artemis!BE3C0F483A31
6.25%

McAfee Web Gateway
Artemis!BB39D90B74D5, Artemis!BE3C0F483A31
6.25%

Trend Micro House Call
TROJ_GEN.F47V1115, TROJ_GEN.F47V1001
6.25%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
6.25%

NANO AntiVirus
Trojan.Win32.GetFaster.ctshtu, Trojan.Win32.Agent.cyhtxg
6.25%

Agnitum Outpost
PUA.Downloader, Riskware.Agent
6.25%

Comodo Security
Application.Win32.Graftor.KLK, Application.Win32.Delta.C
6.25%

Vba32 AntiVirus
Downloader.GetFaster.byi, suspected of Trojan.Downloader.gen.h
6.25%

AVG
MalSign.Generic, Trojan horse Agent4
6.25%

K7 AntiVirus
Unwanted-Program
6.25%

K7 Gateway Antivirus
Unwanted-Program
6.25%

Avira AntiVirus
Adware/Delta.H.17, Adware/Delta.F
6.25%

IKARUS anti.virus
AdWare.Delta
6.25%

ESET NOD32
Win32/Maxiget.B potentially unwanted application
6.25%

The domain www.adshost2.com has been seen to resolve to the following 6 IP addresses.

January 31, 2016

January 29, 2014

January 29, 2014

mail.eventers.me
January 29, 2014

68-233-228-234.static.hvvc.us
December 26, 2013

74-50-103-39.static.hvvc.us
December 26, 2013

File downloads found at URLs served by www.adshost2.com.

 
Latest 30 of 246 download URLs

The following 3 files have been seen to comunicate with www.adshost2.com in live environments.

URL:
http://www.adshost2.com/

Title:
“Login | Epom”

SSL certificate subject:
CN=www.adshost2.com, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
Apache-Coyote/1.1