2mdn.net: what it is, what it is used for and when to worry
2mdn.net is a domain that Google uses to deliver advertising files; it is not a virus and installs nothing. If ads, redirects or pop-ups follow you everywhere, the cause is a site or adware on your device, and the steps below tell you which.
Facts checked October 8, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Not sure what sends your browser to 2mdn.net? An automatic scan looks at the usual sources for you.
Do it yourself · free Remove 2mdn.net yourself 1 step, about 5 minutes, no software needed.
2mdn.net: summary
| Type | Advertising domain owned by Google, not malware; ads or pop-ups that use it can be a site's own or come from adware |
|---|---|
| Risk | Low for the domain, medium for what can sit around it: bad ads, scam pages and adware that injects ads |
| Symptoms | The name in a tab, firewall log or referral list; a tab titled s0.2mdn.net (1×1); ads on every site, a changed home page, redirects or pop-ups |
| How to get rid of it | Nothing to remove for the domain. If ads follow you everywhere: uninstall recent unknown programs, scan with Microsoft Defender (full and offline), reset the browser |
| Our check (6 October 2026) | Registry record, name servers and four address lookups from one location, plus a failed browser load of the bare name on 5 October; no page with ads was loaded, so one visit does not clear any ad |
| Running since | 2 May 2005 (domain registered, paid to 2 May 2027) |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 12 more facts
| First reported by us | 2 January 2021 |
|---|---|
| Installed on the PC | Nothing from the domain; a program, extension or app must be installed to inject ads |
| Detection | Microsoft Defender: nothing is installed by the domain, so there is no detection name to report; adware that injects ads has its own names |
| Distribution | Ads on websites; bundled free software, doubtful downloads and extensions for the adware |
| Evidence | The .net registry record, name lookups, Chrome's Masked Domain List, Wikipedia on DoubleClick, our 2021 report |
| Name | 2mdn.net |
| Domains | 2mdn.net |
| Ads shown as | Redirects through ad pages |
| Browsers | Chrome, Edge and Firefox |
| First seen | 2 January 2021 |
| Damage | Redirects to scam pages, fake updates and tech support scams |
| Facts checked | 6 October 2026 |
Facts checked on 5 and 6 October 2026 against the .net registry's RDAP record, name and address lookups and one plain request from one location, Chrome's Masked Domain List and the vendors' help pages; no page carrying ads was loaded, and no computer was examined.
What 2mdn.net is, and what it is used for
2mdn.net is not a program and not a virus. It is a domain that serves advertising files: pictures, scripts and video for ads that Google's advertising products place on other people's websites. Seeing the name in your browser, a firewall log or a blocker's list means a page you opened loaded an ad. Whether anything is installed on your computer is a separate question, and the test below shows how to tell.
- Owner
- Google. Chrome's published Masked Domain List names Google as the owner of 2mdn.net, and the domain's name servers are Google's (ns1 to ns4.google.com)
- Domain registered
- 2 May 2005, paid to 2 May 2027; the .net registry record carries delete, transfer and update locks and was last changed on 31 March 2026
- What it serves
- Ad creatives. A tutorial on HTML5 banners shows libraries loaded from 2mdn.net/ads/studio/, and a Google-ads study shows an ad image at s0.2mdn.net/simgad/; both are ad files, not web pages
- Link to DoubleClick
- DoubleClick was an ad-serving company that Google bought on 11 March 2008. Google renamed its DoubleClick products in July 2018, which is why guides, logs and blockers still say "DoubleClick"
- Who is responsible for an ad
- The advertiser who bought it and the website that shows it. The domain only delivers the file
So the old question "is 2mdn.net a virus" has the same answer in both directions. The domain is Google's advertising infrastructure and installs nothing. What can go wrong is what sits around it: an advertiser's bad ad, a pop-up from a site you were on, or adware on your own computer that opens or injects ads. Those are what the removal steps deal with.
One thing you will find online and should treat with care: a 2019 thread in the Google Analytics community says Google Support told the poster that 2mdn.net is not a Google domain, while another user in the thread answered that Google owns it. Community posts are not verified. The registry record, the Google name servers and Chrome's list all point to Google, and we found no Google page that states it in plain words, so we say "owned by Google according to the registry and Chrome's list".
2mdm, 2mdn and other spellings of the Google ad domain, on a PC or a phone
2mdm is almost certainly a typing slip for 2mdn, the Google advertising domain 2mdn.net, because the letters m and n sit side by side on the keyboard.
We found no reliable source for a separate service, file or domain called 2mdm. Treating it as the same name is our reading, so look at the exact spelling in the address bar, tab title or log line before you decide anything.
To check any name like this, read the full address from right to left. Real Google ad files come from 2mdn.net or its subdomains, such as s0.2mdn.net. A lookalike with one letter changed or another ending is a different domain with a different owner. Look up its registration record, and if it appears while no site is open, scan the computer with Microsoft Defender.
On an iPhone or Android phone, 2mdn.net or a misspelling of it usually shows up as a browser tab, a pop-up or an ad inside an app. The domain itself installs nothing on the phone. If ads open on their own outside the app you are using, remove the app you installed most recently, then clear the browser history and website data, as the phone section above describes.
Is 2mdn.net dangerous?
What we checked on 6 October 2026
2mdn.net is not one website, and a plain page request cannot show what a program on your computer does to your browser. We looked at the registry record, the name servers and four addresses from one location on one day, and we did not load a news site to count its ads. On 5 October our browser test of the bare name could not load it at all.
2mdn.net and three of its addresses · one location in Lithuania · 5 and 6 October 2026
- Registration2mdn.net has been registered since 2 May 2005 through MarkMonitor, expires on 2 May 2027, and has all six registry lock statuses set (client and server delete, transfer, update prohibited).
- Name serversThe four name servers are ns1.google.com to ns4.google.com, and the zone's contact is dns-admin@google.com.
- The bare name2mdn.net answers the name lookup but has no address record, and www.2mdn.net has none either. On 5 October our Chromium test failed with ERR_NAME_NOT_RESOLVED. There was no page to redirect us, pop up or ask for notifications, and no cause to look further on this name: the ad files live on subdomains.
- s0.2mdn.netResolved to Google LLC addresses (the 142.251.98 range is registered to Google in the ARIN database). A plain request for the home path returned HTTP 404 with the content type image/gif, which fits an address meant for image files, not pages.
- ad.doubleclick.netResolved to the same two Google addresses as s0.2mdn.net on 6 October, so the two names are served from the same place.
- What we did not testWe did not load a page that carries ads, did not follow an ad to its advertiser and did not look at any computer. Ads change with the visitor's country, device, time and history, so one visit would not show what you are shown.
Google's ad infrastructure on this one visit The domain itself showed nothing wrong on this one visit, which says little about the ads that use it: those come from advertisers and from whatever else runs in your browser. A quiet test does not clear an ad, a pop-up or a program.
2mdn.net over the years
2 May 2005
The domain is registered
The .net registry record gives this as the registration date. DoubleClick, the ad-serving company that used the name, was sold to private-equity firms that year.
11 March 2008
Google completes the DoubleClick purchase
Google agreed to buy DoubleClick for 3.1 billion US dollars in April 2007; the EU approved the deal on 11 March 2008 and Google closed it that day. In November 2007, shortly after the announcement, a malicious website had tricked several well-known websites into serving ads that tried to sell users malware. This is the earliest example we found of a bad ad passing through the network.
20 September 2017
A computer-repair blog tells readers it is not malware
SystemTek wrote that s0.2mdn.net and 2mdn.net are used for Google ads, that the site is not malware, and that it shows up in proxy and firewall logs because most sites host Google ads. It also warned about sites that rank for the name and offer removal tools, which is worth remembering.
24 July 2018
DoubleClick products are renamed
Wikipedia dates the rename of the DoubleClick products to 24 July 2018; DoubleClick Bid Manager became Display & Video 360. The old name lives on in logs and blocker lists.
2 January 2021
Our report is published
We published "2mdn.net" for readers who saw the name in the address bar or after a redirect and feared adware.
A browser window at 2mdn.net with an empty page, an illustration from our January 2021 report, not a screenshot of an infection. 31 March 2026
The registry record is updated
The registry shows the record last changed on 31 March 2026. We do not know what changed.
Signs that adware is behind the ads
The old report listed these as the other features you may notice. Any one of them alone can have another cause; several together are worth acting on.
What adware changes on a computer
- Changed home page or new tab page
- New extensions, bookmarks or toolbars
- Redirects to questionable sites
- Banners injected on sites you use often
- Pop-up windows and ads that fill the screen
- Locally stored data from the program
These match the list in our 2021 report. We did not test any particular program for this guide.
What can actually go wrong
The old report said the domain is not malicious but can use up your time online, and that adware around it collects data. Here are the risks with a level, from most to least serious.
- High
A scam page behind an ad or redirect
Fake alerts, fake updates and prize pages come from advertisers or from adware, not from the domain. The earliest case we found of a bad ad through DoubleClick was reported in November 2007. If a page tells you to call a number or install a tool, close it.
- Medium
Adware that collects what you do
Our 2021 report said adware watches your browsing and uses it to choose related content, usually through cookies, and that the data can be shared with third parties. We could not verify what any particular program collects.
- Medium
More unwanted programs
A program that injects ads often comes with others from the same installer, and ads for cheap software can lead to more of it.
- Low
Personalised ads from the ad network itself
Ads served from Google's domains can be chosen by your history. Our 2021 report said advertisers may claim cookies improve your experience while affecting your privacy. You can change this in Google's ad settings (see the section after the removal steps).
- Low
Time wasted and cluttered pages
The most common case. Our report noted that even a harmless ad domain can use a good deal of your time online.
What our 2021 report said adware can collect
- IP addresses
- Geolocation
- Most viewed sites
- Commonly searched items
- Browser history
The list is from the old report; we have not confirmed it for any named program.
How 2mdn.net got into your browser
| Route | What you would see | How to check |
|---|---|---|
| Free software with extras | Ads on every site, a changed search engine or home page, a program you cannot remember installing | Settings > Apps > Installed apps, sorted by install date |
| Downloads from file-sharing and doubtful sites | The same, often with a fake update prompt | Check the Downloads folder and the installed-apps list for the day it began |
| A browser extension | Ads and deals boxes added to pages you open | chrome://extensions, edge://extensions, about:addons, Safari Settings > Extensions |
| A phone app | Pop-ups and redirects in the browser or outside it | Phone Settings > Apps, newest first |
Our 2021 report said that people now get everything online, including operating systems, software and apps, and that file-sharing services and doubtful download sites put a computer at risk because freeware providers pack their products with potentially unwanted programs. The Default or Recommended setup accepts the extras for you; Advanced or Custom lists them so you can untick them.
The report also said adware can use legitimate services such as an ad network: the developers do not ask the site owner, they place ads for profit and promote deals, offers and coupons. That is the part that concerns you. A program that calls ad domains on its own can make 2mdn.net show up in your logs without the domain doing anything wrong, which is why the fix is the program, not the domain.
Check your browser and PC
2mdn.net addresses you may see
The addresses below are Google's ad addresses. Seeing one in a tab title, a blocker's log or a firewall means a page loaded an ad file, not that something is installed.
| Address | What we saw | What it means for you |
|---|---|---|
2mdn.net | Name resolves, no address, no page | Not a website; the bare name appears in referral lists and old reports |
s0.2mdn.net | Resolved to Google; HTTP 404 with image/gif | The address people ask about most; it hands out ad images, such as the one-pixel image behind a tab titled "s0.2mdn.net (1×1)" |
s1.2mdn.net, s2.2mdn.net | Both resolved to Google | Numbered siblings of s0; we did not look at what they serve |
Xs0.2mdn.net | Does not resolve | Our 2021 report listed this "variant", but we found no address, so it looks like a typing slip rather than a real name |
ad.doubleclick.net | Resolved to the same two Google addresses as s0 | A DoubleClick address, not a subdomain of 2mdn.net as the old report said; it is used for ad serving and shows up in the same logs |
Our 2021 report on the s0 variant showed three Chrome windows like this and said that occasionally seeing the address does not mean you are infected. That stands: a tab that opens by itself and shows an empty page can be an ad asset opened by a pop-up. The next section tells you which case you are in.
Normal ad traffic or adware on your computer?
The old report was right that the name on its own means nothing bad, and that hunting for a virus then finds nothing. Use this table before you uninstall anything.
| What you see | Most likely | What to do |
|---|---|---|
| 2mdn.net or s0.2mdn.net in your website's referral list, a firewall log or a blocker's report | Ads on pages you or your visitors opened | Nothing is installed. Website owners can exclude the referral in their analytics; a log entry is not a symptom |
| A tab titled s0.2mdn.net (1×1) or an empty page at the name opens by itself | A pop-up or ad asset opened by the site you were on, or by adware | Close it. If it keeps happening on sites that never did this, follow the removal steps below |
| Ads, banners or pop-ups on every site, including ones that never had ads | An extension or program injecting ads | Follow the removal plan and the browser steps |
| Your home page, new tab page or search engine changed, new toolbars or bookmarks you did not add | A browser hijacker, usually bundled with other software | Reset the browser, then check the search engine |
| Redirects to deals, coupons or sites you did not ask for | A site's own redirect, or adware | Test on a second browser or device; if only one browser does it, reset that browser |
| A fake alert, a phone number, or a download you did not start | A scam page | Close the browser, never call, follow the "If you clicked" steps |
How to remove 2mdn.net
How to stop the 2mdn.net redirects
Work in this order and test a few links after each step, so you know which one was the cause.
Which browser shows the ads?
Set another search engine
Open Settings > Search engine, click Change next to the search engine used in the address bar and pick the one you want. Then open Manage search engines and site search and delete any entry you did not add.
Remove extensions you do not recognise
Paste
chrome://extensionsinto the address bar and click Remove on anything you did not install yourself, especially "search" or PDF helpers added recently.Full procedure with screenshots: Remove a browser extension
Clear the site data
Press Ctrl + Shift + Delete, choose All time, tick Cookies and other site data and Cached images and files, and click Delete data.
Reset Chrome
Open Settings > Reset settings > Restore settings to their original defaults and confirm with Reset settings. This resets the start page, search engine and pinned tabs and turns off extensions; bookmarks and saved passwords stay.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Set another search engine
Open Settings > Privacy, search, and services > Address bar and search and choose the search engine used in the address bar. Check Manage search engines for entries you did not add.
Remove extensions you do not recognise
Paste
edge://extensionsinto the address bar and click Remove under anything you did not install yourself.Full procedure with screenshots: Remove a browser extension
Clear the site data
Open Settings > Privacy, search, and services > Delete browsing data > Choose what to clear, set All time, tick Cookies and other site data and Cached images and files, and click Clear now.
Reset Edge
Open Settings > Reset settings > Restore settings to their default values and confirm with Reset. Extensions are turned off and the start page goes back to default; favourites, history and saved passwords stay.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Set another search engine
Open Settings > Search and pick another engine under Default Search Engine. Under Search Shortcuts, remove any entry you did not add.
Remove add-ons you do not recognise
Paste
about:addonsinto the address bar, open Extensions, and choose Remove from the three-dot menu of anything you did not install yourself.Full procedure with screenshots: Remove a browser extension
Clear cookies and site data
Open Settings > Privacy & Security > Cookies and Site Data > Clear Data, tick both boxes and click Clear.
Refresh Firefox
Open the menu > Help > More troubleshooting information and click Refresh Firefox. Add-ons and custom settings are removed and the home page goes back to default; bookmarks, history and passwords stay.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Set the homepage and search engine you want
Open Safari > Settings > General, type your own address in the Homepage field (for example
google.com), then click another tab of the Settings window, such as Passwords or Privacy, and go back to General to check that it stuck (the old report did this to stop Safari undoing the change; we could not confirm that it is still needed). Then open Search and choose a Search engine you recognise.Switch the extensions off, then on again one by one
In Safari > Settings > Extensions, untick every extension and see whether the redirects stop. If they do, tick them one at a time until they return: the last one is the culprit. Select it and click Uninstall.
Clear the site data
In Safari > Settings > Privacy > Manage Website Data, remove the site's data, or use History > Clear History > all history. To empty the cache as well, turn on Show features for web developers in Settings > Advanced and choose Develop > Empty Caches.
Look for a profile you did not install
Open System Settings > General > Device Management (on macOS 12 and earlier: System Preferences > Profiles). A profile left behind by an adware app can keep a search provider in place after the app is gone. Select a profile you do not recognise and click the minus (-) button to remove it. Then use Finder > Applications and System Settings > General > Login Items & Extensions to remove unknown apps and items. Then use Go > Go to Folder to check
/Library/LaunchAgents,~/Library/LaunchAgents,/Library/LaunchDaemonsand/Library/Application Supportfor folders with the same unknown names.
Then, whichever browser you use
Step 1: Scan the PC if you downloaded anything from the ads
If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.
In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
After removal: keep the ads from coming back
Pop-ups on an iPhone or Android phone
Our 2021 report said the activity also shows on iPhone, Android and other smartphones. A phone has no Windows-style "installed program" to remove, so the steps are about the browser and the apps.
- 1
Delete apps you did not choose
On an iPhone, touch and hold an app you do not recognise and choose Remove App. On Android open Settings > Apps, pick the app and tap Uninstall, or Disable when there is no Uninstall button (Google Play Help covers both). Menu names differ by phone maker.
- 2
Clear Safari's history and website data
On an iPhone open Settings, tap Apps, select Safari, scroll down and tap Clear History and Website Data, then confirm the time range and tap Clear History. On iOS 17 and earlier, Safari has its own entry directly in Settings. Apple's page says this does not change your AutoFill information.
- 3
Clear Chrome's data on Android
Open Chrome, tap the three dots, Settings > Privacy and security > Delete browsing data, choose All time, tick Cookies and site data and Cached images and files, and tap Delete data. We did not test this on a phone.
- 4
Erase the phone only as a last resort
Our 2021 report ended with Settings > General > Erase All Contents. On an iPhone that menu is now Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. It removes everything, so make a backup first (Apple's page walks through it). Try the steps above first, and do this only when pop-ups remain after them.
If the ads keep coming: remove what causes them
The old report said removal may need finding the real culprit, a potentially unwanted program, and ending it on the Windows or Mac machine. The steps below do that. Close any page that asks you to call a number or type your password first.
- 1
Close the browser, not the page
Press Ctrl + Shift + Esc to open Task Manager, select the browser and click End task. When you reopen it, choose not to restore the old tabs.
- 2
Uninstall what came with it
Open Settings > Apps > Installed apps in Windows 11 (Apps & features in Windows 10), sort by install date and uninstall anything installed on the day the ads began (Uninstall a program or app in Windows On uGetFix). Confirm the User Account Control prompt with Yes. On a Mac, drag unknown apps from Finder > Applications to the Bin, then check System Settings > General > Login Items & Extensions.
- 3
Scan, then scan offline
Open Windows Security > Virus & threat protection > Scan options, run a Full scan, then the Microsoft Defender Antivirus (offline scan), which finds programs that hide while Windows runs. A thorough scan is the best way to clear what the program left behind, as the old report said.
- 4
Reset the browser
Adware often changes the start page, search engine and extensions. Use the reset step for your browser above, then check the search engine once after a restart.
- 5
If you typed a password or paid
Change that password from a clean device and call your bank if you gave a card number or let someone connect to your computer.
Limit the personalised ads served from Google's domains
This changes which ads you see on sites that use Google's ad products. It does not remove the ads and it does not clean a computer that has adware.
- 1
Open My Ad Center
Go to
myadcenter.google.comwhile signed in to your Google Account. Google's help page "Customize your ads experience" explains the controls. - 2
Turn personalised ads off
Switch off ad personalisation, or use the topic and brand controls to see fewer ads you do not want. Do it in each browser profile and each account you use.
- 3
Use one content blocker if you want fewer ads
A content blocker from your browser's own store hides ads on the sites you open, and it can leave gaps where ads were. Keep one only: several at once slow pages and conflict. We did not test what blocking 2mdn.net does to any particular page.
How to keep it from happening again
Do
- Choose Custom or Advanced setup in installers, read the list and untick extra programs, extensions and pre-ticked search settings.
- Install programs from their makers' sites or the Microsoft Store, and extensions from your browser's own store. Update your software regularly.
- After installing free software, open the browser's search engine, home page and extensions pages once and check them.
- Keep Microsoft Defender SmartScreen on, or Chrome's Enhanced protection: both warn before known bad pages and downloads. Use the real provider of security software, so you do not pick up another unwanted program.
- Keep a current backup of your files (File History or OneDrive).
- On public networks, a VPN hides your IP address from the sites and ad networks you visit; it does not block ads or malware.
Don't
- Click through Default or Recommended setup without reading it.
- Download from file-sharing sites and doubtful download pages.
- Call a number shown in a browser alert, or enter your Windows or Microsoft password into it.
- Install a removal tool because a page about a domain name offered it; that is how people end up with the real adware.
Questions about 2mdn.net
What is 2mdn.net?
2mdn.net is a domain that Google uses to deliver advertising files, such as pictures, scripts and video for ads on other websites. The .net registry shows it registered on 2 May 2005, its name servers are Google's, and Chrome's Masked Domain List names Google as the owner.
It started with DoubleClick, the ad-serving company Google bought in March 2008, which is why logs and blockers still say "DoubleClick". The domain is not a website you visit, and our test of the bare name on 5 October 2026 found no address for it. Ad files come from names under it, such as s0.2mdn.net.
What is 2mdn.net used for?
2mdn.net is used to serve ad files: an ad image at s0.2mdn.net/simgad/ appears in a Google-ads study, and an HTML5 banner tutorial lists libraries loaded from 2mdn.net/ads/studio/.
When a page shows an ad built in Google's products, your browser may fetch the image or script from this domain, so the name appears in your network log, in a blocker's report or in a website's referral traffic. Fetching the file does not install anything on your computer.
Is 2mdn.net a virus or malware?
No, 2mdn.net is not a virus. It is part of Google's ad delivery and installs nothing; a repair blog wrote in 2017 that it is used for ads and is not malware, and our lookups on 6 October 2026 showed Google name servers and Google addresses. What can go wrong is around it:
- an advertiser's bad ad
- a pop-up from the site you are on
- adware already on your computer that opens or injects ads
A quiet check of the domain does not clear those, so look at the installed-apps list and your browser's extensions if ads follow you everywhere.
Who owns 2mdn.net?
Google owns 2mdn.net according to the evidence we could check:
- Chrome's published Masked Domain List names Google as owner
- the four name servers are ns1 to ns4.google.com
- the zone contact is dns-admin@google.com
The registrar is MarkMonitor, and the record is locked against deletion, transfer and updates. A 2019 Google Analytics community thread says Google Support told a poster it is not a Google domain, while another user replied that Google owns it. Community posts are unverified, and we found no Google page that states ownership in words.
Why does 2mdn.net show up in my analytics referrals or firewall logs?
It shows up because most websites host Google ads, so browsers on your network fetch files from it all day. A computer-repair blog wrote in 2017 that the name will probably appear in the top sites in proxy and firewall logs next to other ad and tracking code.
In website analytics, it is a referral that comes from an ad load, not from a person who found your site through a link. Site owners can exclude the referral in their analytics settings. For a home user, a log entry is not a symptom and needs no cleaning.
What is s0.2mdn.net, and why did a tab with that name open?
s0.2mdn.net is one of several names under 2mdn.net that hand out ad images. On 6 October 2026 it resolved to Google LLC addresses and answered a plain request with 404 and the content type image/gif.
A tab titled "s0.2mdn.net (1×1)" holds a one-pixel image, which a pop-up or an ad on the page you were on can open. One such tab does not mean you are infected. If tabs like it open on sites that never did this, check the installed apps and your extensions, and follow the removal plan on this page.
Can I block 2mdn.net, and what happens if I do?
You can block it with a content blocker or at your router, but we did not test what that does. Because the domain delivers ad files, blocking it should leave gaps where ads were, and a page that waits for an ad to load may load slowly.
It also does not remove adware, because the program on your computer is the cause, not the domain. If you only want fewer personalised ads, change the settings in Google's My Ad Center instead. Use one blocker from your browser's own store; several together conflict and slow pages.
How do I tell normal ads from adware?
Normal ads appear on the sites that sell the space and disappear on a page that never had ads. Adware shows ads on every site, changes your home page, search engine or new tab page, adds extensions or toolbars you did not choose, and opens pop-ups from nowhere.
Open the site on another browser or device: if the ads are there too, they belong to the site, and nothing is installed on your computer. If they appear only in one browser, check its extensions, then reset it. The table in this guide lists the cases.
What should I do if ads and redirects keep coming on every site?
Treat it as adware on your computer, not as a problem with 2mdn.net. Close the browser with Task Manager, uninstall any program installed around the day the ads began (Settings > Apps > Installed apps, sorted by install date), then run a Microsoft Defender full scan and the offline scan, reset the browser and check the search engine.
On a Mac, remove unknown apps and login items. On a phone, delete apps you did not choose and clear browser data. If you typed a password or paid, change the password from a clean device and call your bank.
Will Fortect remove 2mdn.net?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For 2mdn.net, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Verisign RDAP: 2mdn.net registration record (read October 6, 2026)
- GoogleChrome/ip-protection: Masked Domain List (2mdn.net owner: Google) (read October 6, 2026)
- ARIN RDAP: 142.251.98.148 (Google LLC) (read October 6, 2026)
- Wikipedia: DoubleClick (read October 6, 2026)
- SystemTek: What is s0.2mdn.net, does this site host malware (20 September 2017) (read October 6, 2026)
- Google Analytics Community: Referral traffic from 2mdn.net (June 2019) (no longer online) (read October 6, 2026)
- Adalytics: On pre-bid bot detection and filtration (ad image at s0.2mdn.net/simgad/) (read October 6, 2026)
- DigiLakshya: How to create HTML5 banner ads (libraries at 2mdn.net/ads/studio/) (read October 6, 2026)
- Google My Ad Center Help: Customize your ads experience (no longer online) (read October 6, 2026)
- Apple Support: Delete your Safari history, cache, and cookies on iPhone (read October 6, 2026)
- Apple Support: How to factory reset your iPhone, iPad, or iPod touch (read October 6, 2026)
- Google Play Help: Delete, disable & manage unused apps on Android (no longer online) (read October 6, 2026)
- Microsoft Support: Virus and threat protection in the Windows Security app (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)