» clk1005.com
Overview
Analysis
IPs Addresses (1)
Downloads (23)
Network (90)
Website Detail
Related Domains (11)

clk1005.com

INTANGO

Domain Information

The domain clk1005.com registered by INTANGO was initially registered in December of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.

Registrant:

INTANGO

Registrar:

ENOM, INC.

Server location:

Texas, United States (US)

Create date:

Monday, December 8, 2014

Expires date:

Thursday, December 8, 2016

Updated date:

Thursday, November 26, 2015

ASN:

AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Whois:

3 clk1005.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.CodeTechno, PUP.Tightrope.Bundler, PUP.InstallCore.Installer.Installer (M), PUP.Outbrowse.MARiMara.Bundler (M), PUP.DownloadAdmin.CodeTech.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.Outbrowse.TiKiTaKa.Bundler (M), PUP.Outbrowse.BESTAPP.Bundler (M), PUP.Outbrowse.BestApp.Bundler (M), PUP.Outbrowse.MAXTEK.Bundler (M), PUP.Outbrowse (M), PUP.ProfitServis (M), PUP.Air Software (M), PUP.DownloadAdmin (M), PUP.DownloadAdmin.Bundler (M)

100.00%

K7 AntiVirus

Unwanted-Program

16.00%

Clam AntiVirus

Win.Adware.Downloadadmin, Win.Adware.Installcore-651, Win.Trojan.Installcore-411

16.00%

NANO AntiVirus

Riskware.Win32.Downware.djahkt, Riskware.Win32.InstallCore.dnajwn, Riskware.Win32.InstallCore.dnazrt

16.00%

Comodo Security

Application.Win32.DownloadAdmin.ANGL, Application.Win32.FriedCookie.CIRK, Application.Win32.InstallCore.AKZ, Application.Win32.InstallCore.PK

16.00%

Dr.Web

Trojan.Vittalia.2, Trojan.Vittalia.14, Trojan.InstallCore.49, Trojan.InstallCore.15

16.00%

VIPRE Antivirus

Threat.4150696, Trojan.Win32.Generic

16.00%

Avira AntiVirus

ADWARE/Adware.Gen, PUA/InstallCore.II, ADWARE/InstallCore.Gen7, Adware/InstallCo.zlz

16.00%

G Data

Win32.Application.DownloadAdmin, Application.Bundler.KJ, Win32.Application.InstallCore.DI

16.00%

AVG

Generic

16.00%

McAfee

Artemis!F7A491205D20, Artemis!A6F8ECD1ACDB, Artemis!9BA457EE6E51, Artemis!AA44A3B04733, Trojan.Artemis!9254CE713DDB

14.00%

Sophos

DownloadAdmin, Install Core, PUA 'Install Core Click run software', PUA 'Install Core'

14.00%

Qihoo 360 Security

Win32/Virus.Downloader.d33, Win32/Virus.Adware.94c

14.00%

Malwarebytes

PUP.Optional.DownloadAdmin, PUP.Optional.InstallCore.C

12.00%

Agnitum Outpost

Riskware.Agent, PUA.InstallCore

12.00%

The domain clk1005.com has been seen to resolve to the following IP address.

173.192.117.80

173.192.117.80-static.reverse.softlayer.com

July 1, 2015

File downloads found at URLs served by clk1005.com.

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=Kino, Online Filme, Kinofilme kostenlos anschauen, Streams, Kinofilme, Moviestre (installer_adobe_flash_player_english.exe)

1 / 68 (PUP)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=watch movies online, watch free movies, free films, online movies, latest movies (installer_java_english.exe)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=Kino, Online Filme, Stream, Kinofilme, Moviestream, Onlineserien, Online-Serien, (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=After Earth Film online anschauen, After Earth runterladen, After Earth stream (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=download The Originals, watch The Originals, The Originals movie, The Originals (installation.exe)

1 / 68 (PUP)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=download Playing It Cool, watch Playing It Cool, Playing It Cool movie, Playing (installer_java_english.exe)

1 / 68 (PUP)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=movies, filme,cinema,kino,free movies, free online movies,stream,watch movies,st (installer_adobe_flash_player_english.exe)

1 / 68 (PUP)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=Interstellar film, download Interstellar, Interstellar runterladen, Interstellar (installer_java_english.exe)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=K4SPOP&pid= (Setup.exe)

1 / 68 (PUP)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=Der Lehrer film, download Der Lehrer, Der Lehrer runterladen, Der Lehrer online, (installer_java_english.exe)

27 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid= (niet bevestigd 850864.crdownload)

25 / 68 (Adware)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=Sandy Teeny Casting 4 film, download Sandy Teeny Casting 4, Sandy Teeny Casting (installer_adobe_flash_player_english.exe)

1 / 68 (PUP)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=download Sons of Anarchy, watch Sons of Anarchy, Sons of Anarchy movie, Sons of (installer_java_english.exe)

1 / 68 (PUP)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=Violetta Serie online anschauen, Violetta runterladen, Violetta stream (installer_adobe_flash_player_english.exe)

21 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=Supernatural Serie online anschauen, Supernatural runterladen, Supernatural stre (installer_java_english.exe)

21 / 68 (Adware)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=Rush Alles f?r den Sieg film, download Rush Alles f?r den Sieg, Rush Alles f (installer_java_english.exe)

17 / 68 (PUP)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=download Alexander And The Terrible Horrible No Good Very Bad Day, watch Alexand (non confirmé 202342.torchdownload)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=download The Equalizer, watch The Equalizer, The Equalizer movie, The Equalizer (installer_java_english.exe)

25 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=White Chicks Film online anschauen, White Chicks runterladen, White Chicks strea (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=Naruto: Shippuuden Serie online anschauen, Naruto: Shippuuden runterladen, Narut (installer_java_english.exe)

25 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=96 Hours - Taken 3 Film online anschauen, 96 Hours - Taken 3 runterladen, 96 Hou (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=KINOXPOPS&pid=&q=Pretty Little Liars (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1005.com/.../sa?cid=K4MPOP&pid=&q=download Fury, watch Fury, Fury movie, Fury online, Fury stream (installer_java_english.exe)

The following 90 files have been seen to comunicate with clk1005.com in live environments.

TCP » 173.192.117.80:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 173.192.117.80:80

stormwatchbrowser.exe

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

browser.exe (Browser)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 173.192.117.80:80

safeguardbrowser.exe

TCP » 173.192.117.80:80

crossbrowser.exe (CrossBrowser by The CrossBrowser Authors)

TCP » 173.192.117.80:80

apptrailers.exe

TCP » 173.192.117.80:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 173.192.117.80:80

kometa.exe (Kometa by Kometa Authors)

TCP » 173.192.117.80:80

bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 173.192.117.80:80

Smartbar.exe (Smartbar)

TCP » 173.192.117.80:80

swiftmediaconverterbrowser.exe

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

Latest 20 of 126 files

URL:

http://clk1005.com/

Title:

“Contact Us”

Web server:

nginx

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.