www.adshost2.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.adshost2.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in United, Pennsylvania within the United States which resides on the RIPE Network Coordination Centre network.
Remove Malware from www.adshost2.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Pennsylvania, United States (US)

Create date:
Thursday, September 22, 2011

Expires date:
Thursday, September 22, 2016

Updated date:
Thursday, September 03, 2015

ASN:
AS47328 TRI-AS True Records Inc.

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaxigetLimited.i, PUP.MaxigetLimited.G, PUP.Optional.Installer.BandooMedia.V, PUP.MaxigetLimited.L, PUP.MaxigetLimited.k, PUP.MaxigetLimited.T, PUP.New IT Limited, PUP.New IT Limited.Maxiget.Bundler (M), PUP.Catalina.CatalinaGroup (M), PUP.New IT Limited.Maxiget (M)
95.65%

Comodo Security
Application.Win32.Delta.C, Application.Win32.Maxiget.~A, Application.Win32.GetFaster.A, Application.Win32.NewIT.B
60.87%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Downloader.Agent
60.87%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
56.52%

Avira AntiVirus
Adware/Delta.F, Adware/Delta.C.1, Adware/Maxiget.B, Adware/Delta.H.17, Adware/Delta.E.6, Adware/Delta.H.4
52.17%

NANO AntiVirus
Riskware.Win32.Delta.dgbbuk, Trojan.Win32.Agent.cyhtxg, Riskware.Win32.Delta.cqrzlw, Trojan.Win32.Agent.cnaqlv, Riskware.Win32.Delta.derfzb
43.48%

AVG
MalSign.Generic, Trojan horse Agent4, Trojan horse Agent4.BGSR
39.13%

ESET NOD32
Win32/Maxiget.B potentially unwanted application, Win32/4Shared.I potentially unwanted application, Win32/4Shared.F potentially unwanted application
39.13%

Antiy Labs AVL
Trojan[:HEUR]/Win32.Unknown, Trojan/Win32.Tgenic
39.13%

IKARUS anti.virus
AdWare.Delta
34.78%

McAfee Web Gateway
Artemis!EBBC81F393EF, Artemis!37C02A565DB9, Heuristic.BehavesLike.Win32.Suspicious.H, BehavesLike.Win32.Downloader.tc, Artemis!BE3C0F483A31
34.78%

ESET NOD32
Win32/Maxiget (variant), Win32/Toolbar.SearchSuite
30.43%

Agnitum Outpost
Riskware.Agent, Trojan.Agent, PUA.4Shared
30.43%

K7 AntiVirus
Unwanted-Program , Backdoor
30.43%

McAfee
Artemis!EBBC81F393EF, Artemis!37C02A565DB9, PUP-FEP, Artemis!BE3C0F483A31
30.43%

The domain www.adshost2.com has been seen to resolve to the following 6 IP addresses.

January 31, 2016

January 29, 2014

January 29, 2014

mail.eventers.me
January 29, 2014

68-233-228-234.static.hvvc.us
December 26, 2013

74-50-103-39.static.hvvc.us
December 26, 2013

File downloads found at URLs served by www.adshost2.com.

 
Latest 30 of 36 download URLs

The following 3 files have been seen to comunicate with www.adshost2.com in live environments.

URL:
http://www.adshost2.com/

Title:
“Login | Epom”

SSL certificate subject:
CN=www.adshost2.com, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
Apache-Coyote/1.1

Remove Malware from www.adshost2.com - Powered by Reason Core Security