home

cld2r.com

PrivacyYes.com

Domain Information

The domain cld2r.com registered by PrivacyYes.com was initially registered in August of 2013 through KEY-SYSTEMS GMBH. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
KEY-SYSTEMS GMBH

Server location:
Dublin City, Ireland (IE)

Create date:
Friday, August 16, 2013

Expires date:
Sunday, August 16, 2015

Updated date:
Friday, July 11, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Whois:
2 cld2r.com records

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Amonetizeltd.h, PUP.Installer.PaymentsInteractiveSL.M, PUP.Installer.OUTBROWSE.K, PUP.Installer.ClovermediaSL.M, PUP.Installer.OUTBROWSE.F, PUP.Installer.PaymentsInteractiveSL.R, PUP.Installer.NanningweiwuTechnologycoltd.F, PUP.Installer.DigitalPluginSL.M, PUP.Installer.FileFalcon.F, PUP.Systweak.SUPERTUN.Installer.Meta (M), PUP.Installer.Outbrowse, PUP.Bundler.Outbrowse
97.56%

Dr.Web
Adware.Downware.1655, Trojan.Packed.26772, Adware.Downware.2081, Adware.Downware.4305, Adware.Downware.3587, Trojan.DownLoader11.5325, Program.Unwanted.79
95.12%

VIPRE Antivirus
Amonetize, Threat.4150696, Threat.4783235, Threat.4784459, Trojan.Win32.Generic, Threat.4371328, Threat.4783262, Threat.4778314
92.68%

Avira AntiVirus
ADWARE/Adware.Gen2, APPL/DomaIQ.Gen, APPL/Downloader.Gen, APPL/DomaIQ.beor, Adware/Strictor.55983, APPL/OutBrowse.lwasp
92.68%

AVG
MalSign.Generic, DomaIQ, Adware DomaIQ, Adware DomaIQ_r.K, Adware DomaIQ.EA, Adware DomaIQ.EC, Adware AdPlugin.VX
92.68%

McAfee
Adware-Amonetize!ABB4E18C0F6D, CryptDomaIQ, Adware-OutBrowse, Adware-DomaIQ!2DC5E3F74A27, PUP-FJS!A79A619DD500, PUP-FJP!3CA0638E7119
90.24%

G Data
Win32.Application.Amonetize, Application.Bundler.DomaIQ, Win32.Application.Outbrowse, Adware.DomaIQ.AR, Gen:Variant.Adware.Kazy.374465
90.24%

K7 AntiVirus
Unwanted-Program , Trojan
90.24%

Kaspersky
not-a-virus:AdWare.Win32.Lollipop, not-a-virus:AdWare.Win32.OutBrowse, not-a-virus:AdWare.MSIL.DomaIQ, not-a-virus:AdWare.Win32.DomaIQ
90.24%

Sophos
Generic PUA PH, OutBrowse Revenyou, DomainIQ pay-per install, Generic PUA PK, Square Network Installer, SoftPulse, PUA 'OutBrowse Revenyou'
90.24%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.BundleInstaller.A, PUP.Optional.OutBrowse, PUP.Optional.DomaIQ, PUP.Optional.Domalq
87.80%

nProtect
Trojan-Clicker/W32.Agent.490480, Trojan-Clicker/W32.OutBrowse.993712, Trojan-Clicker/W32.Agent.277888, Trojan-Clicker/W32.Agent.614528
85.37%

ESET NOD32
Win32/DomaIQ.BF potentially unwanted application, Win32/DomaIQ.BB potentially unwanted application, Win32/OutBrowse.V potentially unwanted application
82.93%

NANO AntiVirus
Riskware.Win32.DomaIQ.datbeq, Trojan.Win32.Generic.cthmwf, Riskware.Win32.Downware.dchfoa, Riskware.Win32.Lollipop.cyamlo
78.05%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.DomaIQ, PUP/Win32.OutBrowse, PUP/Win32.SoftPulse, PUP/Win32.IBryte
73.17%

The domain cld2r.com has been seen to resolve to the following 3 IP addresses.

54.194.150.74
ec2-54-194-150-74.eu-west-1.compute.amazonaws.com
August 17, 2014

162.13.169.123
April 11, 2014

54.194.139.2
ec2-54-194-139-2.eu-west-1.compute.amazonaws.com
April 11, 2014

File downloads found at URLs served by cld2r.com.

19 / 68    (Adware)
http://cld2r.com/?a=4672&c=62471&s1=rtuk&ckmguid=b452ffb6-ea2d-4f5f-b8d2-8cce10703d1d  (setup.exe)

1 / 68      (PUP)
http://cld2r.com/?a=4672&c=61974&s1=adnapp&ckmguid=240cf1d8-ddd5-4824-889d-3a7894b94779  (setup.exe)

19 / 68    (Adware)
http://cld2r.com/?a=4672&c=61974&s1=rt&ckmguid=24928f76-cd41-4310-91db-c46465e92ad3  (setup.exe)

19 / 68    (Adware)
http://cld2r.com/?a=4672&c=61974&s1=rt&ckmguid=9ac007d1-6318-4198-a515-82262138ce61  (setup.exe)

1 / 68      (PUP)
http://cld2r.com/?a=4672&c=62471&s2=hdyuk&ckmguid=ceb0c6cb-83a9-4c17-82c6-abe2530986a6  (setup.exe)

1 / 68
http://cld2r.com/?a=4672&c=61974&s2=&ckmguid=f41762ff-c888-4125-9f3a-54a7a670e7de  (setup.exe)

19 / 68    (Adware)
http://cld2r.com/?a=4672&c=61974&s1=adnuk&ckmguid=03547e39-c3c5-405d-943c-328d7626d394  (setup.exe)

26 / 68    (Adware)
http://cld2r.com/?a=16438&c=61971&s1=&ckmguid=8ac0946b-49a3-4835-be1a-546ec07c3ea6  (setup.exe)

26 / 68    (Adware)
http://cld2r.com/?a=16438&c=61971&s1=&ckmguid=2dcad089-92a4-468e-b051-8119223b8b27  (setup.exe)

38 / 68    (Adware)
http://cld2r.com/?a=16438&c=61971&s1=&ckmguid=0ff57d66-7ed1-4784-a746-327dee23038b  (setup.exe)

0 / 68
http://cld2r.com/?a=14321&c=61972&s1=ANADE&ckmguid=83dd2d28-014f-4d28-ba66-05e4a2e1263e  (setup.exe)

0 / 68
http://cld2r.com/?a=14321&c=61972&s1=ANADE&ckmguid=32f7a247-a07a-4ecf-b615-a5a4daf7f12e  (setup.exe)

14 / 68    (Adware)
http://cld2r.com/?a=4672&c=60869&s1=rt&ckmguid=6edaecfb-7bae-4635-ba5f-e421dde15dbe  (flashplayersetup__6352_i369720378_il223.exe)

28 / 68    (Adware)
http://cld2r.com/?a=15693&c=63240&s1=sb5&ckmguid=7640cb40-3b35-40ec-81b5-604af4af4948  (player setup.exe)

30 / 68    (Adware)
http://cld2r.com/?a=13409&c=61974&s1=APP-UK&ckmguid=b5975b6d-cda0-4d62-8866-e18588f4b63b  (setup.exe)

25 / 68    (Adware)
http://cld2r.com/?a=13516&c=63285&s1=Viruk&ckmguid=0b387beb-6f15-4b05-b2fa-a47ee82a4ba2  (setup.exe)

25 / 68    (Adware)
http://cld2r.com/?a=13516&c=63285&s1=Lemuk&ckmguid=e754e2f4-198a-4e1a-86b7-07922092313e  (setup.exe)

30 / 68    (Adware)
http://cld2r.com/?a=15693&c=63237&s1=sb6&ckmguid=b130440e-954c-436e-8ae8-2a917152e363  (player setup.exe)

24 / 68    (Adware)
http://cld2r.com/?a=11453&c=61975&s1=&s2=112&ckmguid=92b92e58-469e-4f23-a0e5-2b9ce0b438f0  (setup.exe)

2 / 68      (PUP)
http://cld2r.com/?a=11453&c=61975&s1=&s2=112&ckmguid=227edcfb-d5d3-4525-b15f-547f6cdd3d7f  (setup.exe)

19 / 68    (Adware)
http://cld2r.com/?a=11453&c=63282&s1=&s2=112&ckmguid=b3b919c5-4826-47e1-b4f6-973c823985e2  (setup.exe)

14 / 68    (Adware)
http://cld2r.com/?a=4672&c=60869&s1=rt&ckmguid=9799d89a-66ba-4505-82e7-68dc5f01e6be  (flashplayersetup__6352_i369720378_il223.exe)

14 / 68    (Adware)
http://cld2r.com/?a=4672&c=60869&s1=rt&ckmguid=31bdbcc9-5b97-4761-9c0b-432a99d25a46  (flashplayersetup__6352_i369720378_il223.exe)

29 / 68    (Adware)
http://cld2r.com/?a=15693&c=63240&s1=sb5&ckmguid=172670a1-1f32-4afd-9cca-ec6efc2f9794  (player setup.exe)

22 / 68    (Adware)
http://cld2r.com/?a=11453&c=61975&s1=&s2=112&ckmguid=012d1f35-4f78-4222-941c-7ccc16980627  (setup.exe)

34 / 68    (Adware)
http://cld2r.com/?a=15693&c=63237&s1=sb5&ckmguid=1603f3b5-9f07-4e04-9006-e86919108f0d  (player setup.exe)

20 / 68    (Adware)
http://cld2r.com/?a=4672&c=62472&s2=leapp&ckmguid=39860f55-2912-44cf-85a0-431c7a432f2c  (setup.exe)

20 / 68    (Adware)
http://cld2r.com/?a=13516&c=61975&s1=Rekca&ckmguid=2e148782-a1de-4fd2-ad85-1d8776f36644  (setup.exe)

20 / 68    (Adware)
http://cld2r.com/?a=11453&c=63282&s1=&s2=112&ckmguid=9fe26580-5240-4b18-bafb-b6f870b6de28  (setup.exe)

20 / 68    (Adware)
http://cld2r.com/?a=11453&c=63282&s1=&s2=112&ckmguid=d9493984-9844-497e-86bb-90a77469a4fe  (setup.exe)

 
Latest 30 of 226 download URLs

URL:
http://cld2r.com/

Title:
“Have Sex Tonight”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=cldlr.com, OU=Domain Control Validated

SSL certificate issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc."

Web server:
nginx/1.6.0 (PHP/5.3.3)

Quantcast US:
Rank:  66,600

Statistics above are for the previous month of October 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.