» www.appiden.com
Overview
Analysis
IPs Addresses (2)
Downloads (4)
Network (3)
Website Detail
Related Domains (685)

www.appiden.com

Corp New Ventures Services

Domain Information

The domain www.appiden.com registered by Corp New Ventures Services was initially registered in September of 2015 through FREE DIVE DOMAINS, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Zurich, Zurich within Switzerland which resides on the RIPE Network Coordination Centre network.

Registrant:

Corp New Ventures Services

Registrar:

FREE DIVE DOMAINS, LLC

Server location:

Zurich, Switzerland (CH)

Create date:

Saturday, September 19, 2015

Expires date:

Monday, September 19, 2016

Updated date:

Tuesday, October 6, 2015

ASN:

AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc,VG

Root domain:

appiden.com

Whois:

1 appiden.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Performersoft.GiraffeTechSoftware.Bundler (M), PUP.Performersoft.GiraffeT.Bundler (M), PUP.Performersoft (M)

100.00%

Dr.Web

Adware.Downware.6211, Adware.Downware.8001

25.00%

ESET NOD32

Win32/InstallBrain.CH potentially unwanted application

25.00%

Malwarebytes

PUP.Optional.InstallBrain.A

25.00%

NANO AntiVirus

Riskware.Win32.Downware.cwmdeh

25.00%

Avira AntiVirus

APPL/InstallBrain.Gen

25.00%

G Data

Gen:Variant.Jaik.1231

25.00%

IKARUS anti.virus

Trojan.Win32.Spy

25.00%

AVG

Adware InstallBrain

25.00%

avast!

Adware-gen [Adw]

25.00%

Panda Antivirus

Trj/Genetic.gen

25.00%

VIPRE Antivirus

InstallBrain

25.00%

AhnLab V3 Security

PUP/Win32.InstallBrain

25.00%

Sophos

InstallBrain

25.00%

Comodo Security

Application.Win32.InstallBrain.BF

25.00%

The domain www.appiden.com has been seen to resolve to the following 2 IP addresses.

204.11.56.48

August 20, 2016

141.8.226.14

February 1, 2016

File downloads found at URLs served by www.appiden.com.

1 / 68 (Adware)

http://www.appiden.com/.../$g9gWa5A3ZV5okh4e?v=14&cid=4196&tid=0KdsMBHTGgy2FHJTON584e21pTcnrqWbuQpMGwOAljQcplok7Bc8AeDyzUl7KEkGq_EWL02OYbCy8MsUkPMcScLP9QqgQTGgZYiMlGthXJX8auQhml0X40v7ki9Vd8quG01796KUwy6YigSlWtyEdD8jzymdnOGiGFPr-KeIerKfge_sETWZ4DE-6ClBETQg0qJx3gxRtDdxOGkUTdIrvQHiybdgZbqC_cJJGQCAON7andOmmB-wADGM7ayENoYTzw1Woxb6-tPOeVLiKfWYYdAWy5jtywNuISni7oblNpWzxH0hvdM-V1Tp6-BAuN8ibaLEhp8bblPwcVnQ_GBtjfCmZX8SUAOFPlzyXojxw1Iy2g0UL-pCowlOIOcskPinEKV9KShX6N_hoSknNnHGG6W7ZTwA8zrS9XGYmraV&cert=gits&installer=uaci&resources=uacr&maker=pth&core=uacp&uninstaller=uacu (VideoPerformerSetup.exe)

1 / 68 (Adware)

http://www.appiden.com/.../$iPkCbJA3ZV40oQ8w?v=19&cid=4197&tid=GbQdd1v-yPKVqjL3-Zvt9sYTCoxnlx7o-u7JyrbdHiFcd6h6E0D0t2pupNzoT2-pcPU0l1KQ8l8ORTqrAoa6GF0UxR3Al_KNEeUwm8rMjLkx2rGzAtov6vnl5wRJiCZ0e0msSJhZ1XEF_eIU2lcAcshNtfYas8Wzhxv_1YhoceH2NQdP4tqJc8jPB80ciCmlWGWnicj2AauS8O01djXQyDMg5JLOdzC9T-Z7l5J3V1NzLKWbn-HcXgVAz4_17XpEa1XEh6dUgc5qTGbY_zoaR6dgwr0bCnXWeecswLlbDewlA4LzS4bD6D74bsr5xruwVAxxLgnij6HbNyREODnlCo8yi2LumuZzLlld83viS3nHiU7ItLyQK2ZMK9QTCllj7p0WKaPf2rAQsae8NBOKgPrkP3JGKQ&cert=gits&installer=uaci&resources=uacr&maker=pth&core=uacp&uninstaller=uacu (VideoPerformerSetup.exe)

1 / 68 (Adware)

http://www.appiden.com/.../$gsM3bpA3d1IiuRcV?v=40&cid=4301&tid=nym1COeN-tekneuWdxACGPLKr-L1moj3SyIPMTc3LjEwMC4yMDIuMjIzKAEwnNK5nwU.&cert=gits (VideoPerformerSetup.exe)

31 / 68 (Adware)

http://www.appiden.com/.../$tfYEYZA3ZV40qyYT?v=19&cid=4197&tid=oeTk06uw_n_pNrdkgZBPmBG4Ck-ihgZTVU0iYjj8iEgIFvdjUY7uD4E8AZhuRw0MECX5Th-KZa2muAjNw1vTq2jCnSL2aqU7KrB0E57VQFSU4fBwovZFXLzqxSBCQ5f0gll_06EwZ14WV7N5WaWs-JoveNOic5UR-lyUW8YH_sLIcdPTTHpM1xu4o7wq24JYQgA1sHuk31YZqliya0FH4-1U5RSSWxzJk49JGDqTcBP9-ITmcBII7E5I3ewbInVKdEnAr6-ZTGosjJ-mLvrF1Ef5OrVWefmVdN00qgF5midPEEawKzAi5AGuBYuo6oWkfWQi2mxkDanGgSxqPzt1mrGOvYiBI2Fu9yl2MpvOQFI2wnf5cu-sjyiFkaAy-sYMZej85zYvGtwC2NHTLGnGFA06FT4hVt25BBAa&cert=gits&installer=uaci&resources=uacr&maker=pth&core=uacp&uninstaller=uacu (VideoPerformerSetup.exe)

The following 3 files have been seen to comunicate with www.appiden.com in live environments.

TCP » 141.8.226.14:80

google-bookmarks.crx

TCP » 204.11.56.48:80

chrome.crx

TCP » 204.11.56.48:80

chrome.crx

URL:

http://www.appiden.com/

Google Analytics:

UA-2249740

Title:

“Appiden.com”

Description:

“Find Cash Advance, Debt Consolidation and more at Appiden.com. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Appiden.com is the site for Cash Advance.”

Web server:

Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)

Related Domains

30 of 685 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.