Domain > www.1-1ads.com

More information on this domain is in AlienVault OTX

Files that talk to www.1-1ads.com

MD5	A/V
c1133e7d7c7a9991d05d5f1542cdfe76
6c193c02d390546750c42cd3cdc8586a	[W32.Clod03d.Trojan.8df7] [Trojan-Downloader/W32.Adload.64060] [trojandownloader.win32.filoskeed.a] [Heur.AdvML.B] [NSIS/TrojanDownloader.Adload.R] [not-a-virus:AdWare.Win32.AdLoad.stml] [Riskware.Win32.Adload.eeuwij] [Trojan.Win32.Z.Adload.64060.N[h]] [Virus.Application.Adload] [103!c] [Trojan.Vittalia.2108] [Adware.AdLoad.Win32.9988] [BehavesLike.Win32.Downloader.kh] [ADWARE/Adware.oofj] [Trojan[Downloader]/NSIS.Adload.r] [SoftwareBundler:Win32/Penzievs] [PUP.AdLoad/Variant] [Adware/Win32.AdLoad.N2057629888] [AdWare.AdLoad] [Nsis.Trojan-downloader.Adload.Woqb] [PUA.AdLoad!] [not-a-virus:AdWare.AdLoad] [Adware/Adload] [Downloader.NSIS.Y] [Trj/CI.A]
a53b8c0460b738f8c5d1c24e3a3b437f
df8d3f17c12ce1ff8b7235b1ca866e0f
8e1610feefe7c94885ca36e3a6bc26a0	[Trojan-Downloader/W32.Upatre.64064] [Heur.AdvML.B] [not-a-virus:AdWare.Win32.AdLoad.stpm] [Riskware.Win32.Adload.eeuxua] [Trojan.Vittalia.2108] [Adware.AdLoad.Win32.10190] [trojandownloader.win32.filoskeed.a] [BehavesLike.Win32.Downloader.kh] [ADWARE/Adware.ubod] [Trojan[Downloader]/NSIS.Adload.r] [SoftwareBundler:Win32/Penzievs] [PUP.AdLoad/Variant] [Adware/Win32.AdLoad.N2057618158] [AdWare.AdLoad] [NSIS/TrojanDownloader.Adload.R] [Nsis.Trojan-downloader.Adload.Ebgw] [PUA.AdLoad!] [not-a-virus:AdWare.AdLoad] [Adware/Adload] [AdLoad.AQ] [Trj/CI.A]
1de1fe7f262da680e1dc8524d7733066	[Heur.AdvML.B] [virus.win32.parite.b]
d79dd1c4c69e3ff6fd95deaca765251d	[virus.win32.parite.b] [Heur.AdvML.B]
3ff337123e1b850db327053b12dd4139
4180836ae3f2ca50aa027856b34b7bed	[Heur.AdvML.B] [virus.win32.parite.b] [ADWARE/InstMonster.aafps]
829a41e70d6e5537706337e2d0e59279
510b6519c8f1e5bf2ca97bb6502f2415	[Heur.AdvML.B] [pws.win32.hupigon.aaa]
1f2967b28982947c5e751d0c534a23e4	[Heur.AdvML.B] [pws.win32.hupigon.aaa]
f79540ef76bcfe0e247eb15e033a0aa2
d2533fb2980e51447eaf33ad866a7dd0
72034d4067e1e13f8f2fa6035fa75798
b524c18849941e3fd86c1034148e90d7	[PUP.Optional.InstallMonster] [Heur.AdvML.B] [Trojan.InstallMonster.1898] [virus.win32.parite.b]
4c29329446904dfa31779329763570ca	[PUP.Optional.InstallMonster] [virus.win32.parite.b] [Heur.AdvML.B] [Trojan.InstallMonster.1898]
435adbf4769ce828b9dd1bd0d14690fe
c54725780e920e048742a92648305ab4	[Trojan-Downloader/W32.Upatre.64065] [Adware.AdLoad.Win32.10004] [Virus.Application.Adload!c] [SAPE.Adload.28f] [NSIS/TrojanDownloader.Adload.R] [not-a-virus:AdWare.Win32.AdLoad.stpw] [Riskware.Win32.Adload.eeuxur] [BehavesLike.Win32.Downloader.kh] [ADWARE/Adware.qjep] [Trojan[Downloader]/NSIS.Adload.r] [SoftwareBundler:Win32/Penzievs] [PUP.AdLoad/Variant] [Adware/Win32.AdLoad.N2057640512] [AdWare.AdLoad] [Nsis.Trojan-downloader.Adload.Swuh] [PUA.AdLoad!] [not-a-virus:AdWare.AdLoad] [Adware/Adload] [Downloader.NSIS.Y] [Trj/CI.A]
8e549d28f400d83349e37a008ead9c74

Whois

Property	Value
NameServer	NS46.DOMAINCONTROL.COM
Created	2012-07-20 00:00:00
Changed	2016-07-07 00:00:00
Expires	2017-07-20 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2024-09-27	204.11.56.48 (ClassC)
2025-01-31	208.91.197.46 (ClassC)
2025-11-28	143.198.147.204 (ClassC)
2025-12-27	159.203.106.187 (ClassC)
2026-03-04	192.241.246.124 (ClassC)

HTTP/1.1 200 OKDate: Fri, 22 Dec 2023 03:05:09 GMTServer: ApacheSet-Cookie: vsid926vr450759909233141859; expiresWed, 20-Dec-2028 03:05:09 GMT; Max-Age157680000; path/; domainwww.1-1ads.com; HttpOnlyX-

!DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01//EN http://www.w3.org/TR/html4/strict.dtd>html>head>link relpreconnect hrefhttps://delivery.consentmanager.net> link relpreconnect hrefhttps://cdn.consentmanager.net>                    script>window.cmp_stayiniframe  1; window.cmp_dontloadiniframe  true; if(!gdprAppliesGlobally in window){window.gdprAppliesGloballytrue}if(!(cmp_id in window)||window.cmp_id1){window.cmp_id0}if(!(cmp_cdid in window)){window.cmp_cdid21fdca2281833}if(!(cmp_params in window)){window.cmp_params}if(!(cmp_host in window)){window.cmp_hosta.delivery.consentmanager.net}if(!(cmp_cdn in window)){window.cmp_cdncdn.consentmanager.net}if(!(cmp_proto in window)){window.cmp_protohttps:}if(!(cmp_codesrc in window)){window.cmp_codesrc1}window.cmp_getsupportedLangsfunction(){var bDE,EN,FR,IT,NO,DA,FI,ES,PT,RO,BG,ET,EL,GA,HR,LV,LT,MT,NL,PL,SV,SK,SL,CS,HU,RU,SR,ZH,TR,UK,AR,BS;if(cmp_customlanguages in window){for(var a0;awindow.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguagesa.l.toUpperCase())}}return b};window.cmp_getRTLLangsfunction(){var aAR;if(cmp_customlanguages in window){for(var b0;bwindow.cmp_customlanguages.length;b++){if(r in window.cmp_customlanguagesb&&window.cmp_customlanguagesb.r){a.push(window.cmp_customlanguagesb.l)}}}return a};window.cmp_getlangfunction(j){if(typeof(j)!boolean){jtrue}if(j&&typeof(cmp_getlang.usedlang)string&&cmp_getlang.usedlang!){return cmp_getlang.usedlang}var gwindow.cmp_getsupportedLangs();var c;var flocation.hash;var elocation.search;var alanguages in navigator?navigator.languages:;if(f.indexOf(cmplang)!-1){c.push(f.substr(f.indexOf(cmplang)+8,2).toUpperCase())}else{if(e.indexOf(cmplang)!-1){c.push(e.substr(e.indexOf(cmplang)+8,2).toUpperCase())}else{if(cmp_setlang in window&&window.cmp_setlang!){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d0;da.length;d++){c.push(ad)}}}}}if(language in navigator){c.push(navigator.language)}if(userLanguage in navigator){c.push(navigator.userLanguage)}var h;for(var d0;dc.length;d++){var bcd.toUppe

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.1-1ads.com

Is this malicious?

Files that talk to www.1-1ads.com

Whois

DNS Resolutions

Port 80