MALICIOUS ADs: download.fromdoctopdf.com risking with Adware.MyWebSearch White Plains, NEW YORK (UNITED STATES)

FOR WEBMASTERS

If you own a Website or a Blog and are affiliated with Google AdSense, in order to your own Reputation, should block the Domain download.fromdoctopdf.com in your AdSense Dashboard. The Site lets your Visitors download and install persistant ADWARE. See the following Report:

MALICIOUS ADs: Adware.MyWebSearch.15

MALICIOUS CONTENT & DOWNLOADS:

http://www.googleadservices.com/pagead/aclk?sa=L&ai=CZ5u950M9U8H1Goiu7Qbw7YDgCMWmg7oEza6d5Fmwtc3fUBABII7AlCNQq8iQnAZguwOgAbuLoeMDyAECqAMByAPBBKoEkwFP0INx3GRxGmf75YJHVfg23Y1q0faoAWwxpSI0eW2lAjrO4iGtdTPCH5e2qE0-OJYs2Nzy3PwLsVBURyZQBdBqSuU3c8rON3dh9vA-8VLjBuUDUefI0r3rD9eSIrC-NykRnoCC_TyV-EAoBCDuoqT7Gs-hxBakOM0ZIuWaQx0i1lofQlAkWFG6zz51lD0laNJkf-uIBgGgBgKAB6303hw&num=1&cid=5Gi0szH0G6npQc1zBwu_So85&sig=AOD64_1k0A5LtYUiNxfDGsHRhrPeLa_gQA&client=ca-pub-5585202032329389&adurl=http://download.fromdoctopdf.com/index.jhtml%3Fpartner%3DY6xdm010&nm=1&mb=2&bg=!A0S2nPCfVMrd2QIAAAA3UgAAABgqAOEAYGl_c7TMnCDOZeuOQ1tdwMlTc5AjqsfXe6qIrAw64KouboiusTyHanPQBv1xwPq5aJtvphicS2RfNGWeczY_j68aSMS7YgI5crzlya6a1oHsBSRE3bjLecUvRnaNGRi2UveY9oI91rKvISEK3gSPdHKAZ9We2D12U3d-N6nskV2jobsjRJYY1P0-R2Utrg-kJcArZtz9bURG1mslSipysYp8n3u3rGyh40WBX4gqJJkgGqYahbw9-wnY3eF4A2ooAG4_smQYaM9C0Iu5FwVm1Us5ddKk2NOcgoOoqeDV7KE

ANALYSIS VT:

• https://www.virustotal.com/de/url/09f26ddc5338a53ab3d8161f9694c23b876736809c779d59ccd0265bfac9d423/analysis/1396524292/

URL AFTER REDIRECT:

http://download.fromdoctopdf.com/index.jhtml?partner=Y6xdm010&gclid=CPOus7OaxL0CFaw-Mgod8FAA7A

• https://www.virustotal.com/de/url/f47d656744a326f0c31554124e28cfed59e6417e1f2f19a907478fb0aa437522/analysis/

IP:

http://74.113.233.180/

• https://www.virustotal.com/de/url/54b4d071b1897bce1af782c969f0510bd2744190d95d92e4bae7d9758a033bb3/analysis/1396460279/

• https://www.virustotal.com/de/ip-address/74.113.233.180/information/

Fwd/Rev DNS Match: NO

• http://www.senderbase.org/lookup/?search_string=74.113.233.180

SCREENSHOT AT URLQuery: https://urlquery.net/screenshot.php?id=1396456860485

CLICK TO DOWNLOAD & INSTALL:

Adware.MyWebSearch.15

• https://www.virustotal.com/de/file/3861f4259af68b4ba6ea7cdff84d9ce2deddcf4f5056685d00997d12fdcd4593/analysis/1396524664/