» clk1007.com
Overview
Analysis
IPs Addresses (1)
Downloads (17)
Network (90)
Website Detail
Related Domains (11)

clk1007.com

INTANGO

Domain Information

The domain clk1007.com registered by INTANGO was initially registered in December of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.

Registrant:

INTANGO

Registrar:

ENOM, INC.

Server location:

Texas, United States (US)

Create date:

Monday, December 8, 2014

Expires date:

Thursday, December 8, 2016

Updated date:

Thursday, November 26, 2015

ASN:

AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Whois:

3 clk1007.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Outbrowse.OtopiaSoft.Bundler (M), PUP.InstallCore.Installer.Installer (M), PUP.DownloadAdmin.CodeTechno.Installer (M), PUP.Outbrowse.BESTAPP.Bundler (M), PUP.Outbrowse.BestApp.Bundler (M), PUP.Outbrowse.StartPlaying.Bundler (M), PUP.Tightrope.Zoobam.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Outbrowse.StartPla.Bundler (M), PUP.Outbrowse.Salyutem.Bundler (M), PUP.DownloadAdmin.CodeTech.Installer (M), PUP.DownloadAdmin.Bundler.Meta (M)

100.00%

McAfee

Artemis!05D1B718C716, Artemis!DCB0758BA414

11.76%

K7 AntiVirus

Trojan , Unwanted-Program

11.76%

NANO AntiVirus

Riskware.Win32.InstallCore.dnajwn, Riskware.Win32.InstallCore.dnazrt

11.76%

Sophos

Install Core, PUA 'Install Core Click run software'

11.76%

Comodo Security

Application.Win32.FriedCookie.CIRK, Application.Win32.InstallCore.AKZ

11.76%

Dr.Web

Trojan.InstallCore.49, Trojan.InstallCore.15

11.76%

VIPRE Antivirus

Adware.InstallCore, Threat.4150696

11.76%

Avira AntiVirus

Adware/InstallCo.zlz, ADWARE/InstallCore.Gen7

11.76%

G Data

Win32.Application.InstallCore.DI

11.76%

Baidu Antivirus

Adware.Win32.InstallCore

11.76%

Fortinet FortiGate

Riskware/InstallCore, Riskware/FrieCook

11.76%

AVG

Generic

11.76%

Qihoo 360 Security

Win32/Virus.Adware.94c

11.76%

Bkav FE

W32.HfsAdware

11.76%

The domain clk1007.com has been seen to resolve to the following IP address.

173.192.117.80

173.192.117.80-static.reverse.softlayer.com

October 20, 2015

File downloads found at URLs served by clk1007.com.

1 / 68 (PUP)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=movies, theater, releases, watch, movie, online, free, films, latest, download (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1007.com/adServe/adClick?ai=e78pZMpPz6TWZEaZboedZEI/brpub/I0TxuPFGQT1j6rToP6AK95uhA4rHED7ys89j5hLLp8eQbr PZ7B46IHnvr4nvPsKvQNf6gmL4f0BkO/eeVVSadIKZ0S52V4xkCryhfzvPUmdssYvj6rhD6OKF2S imQJSmPVUPv/.../0wNyeaFzcQ3XV6bTU2wU1EaRWvtMhMaxw=&ui=1YuW55wARCbnujWcLGh2f1Y37AsT2Aewx0CywtgdH5ERuh9PEntIv4AbqktiF4W2&src=BANNER (unconfirmed 857431.torchdownload)

1 / 68 (Adware)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=Viooz, movie, streaming, online, Christmas, Cookie, Cutter, Watch (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=, watch movies, online movies (installation.exe)

1 / 68 (PUP)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=, watch movies, online movies (installer_java_english.exe)

1 / 68 (Adware)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=Viooz, movie, streaming, online, Christmas, Cookie, Cutter, Watch (installation.exe)

1 / 68 (Adware)

http://clk1007.com/adServe/adClick?ai=08zHTxdapFUPZbIUE/ApfGEtSSaLBlowynjQnlulsBLDkkPQjMbLZh6swA3X4iq4s0/.../ZTlyi8FYCSr5SxlDCt r3yyJc7BhC6ZyfFrY7DLqctLLd1mppskUFi8gq8XMaXbgKzPtaIOtdpkptkaTq0wFkAbk08TQ7ji LHROO7HD39 yr nvR4H3PoIdOmKt5bSpX86lMbOjD9jUeLLVw0VthOCJjYCk&ui=8xTBf0BcZTJQpPUW YMlpscaKRMNtL4xlA4kOHjhy4ZWD0 2Wfz3NQ3jX8ac6Ely&src=BANNER (installation.exe)

24 / 68 (Adware)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=movies, theater, releases, watch, movie, online, free, films, latest, download (installer_java_english.exe)

1 / 68 (Adware)

http://clk1007.com/adServe/adClick?ai=dxYyzVlXuV/aJFiGAKU5GNcHBe6x5dP0sBdEAn7mBCQPvPD9pSRsFudT9/rqdGoQs0/qbKYlfMaQ wRR/HA97EnQda93LGDuvzqPK3OGiEb9PnB2V8hoiBZttEtdEAJR6 ec nm7FspSVAeHAjKc4Q3X yopZmYqLwYKBVCZPaDdkESHuWmHEvil1j57 JOeaHZ0arRDOefBeozk76DC0qo1fruqqhWhD8E3Y Nqt4wzPcSuX8o2898DTXhZxJodP/F6uQs65NfTJyVsgoSZYXhh6882KmwS0tOSNRt4gSgf0=&ui=FvXlmQnxxYjGyKWwuW2GAPbWwvziNp/.../SH9 ZF2PNJnFF&src=BANNER (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1007.com/.../adClick?ai=dxYyzVlXuV-45yyPx0S8mWEtSSaLBlowynjQnlulsBLDkkPQjMbLZh6swA3X4iq4s0_qbKYlfMa9fdGiJiIMar8CZEot1VbqanrEvRXFT4TLMFRxr5LhAov00JKKLmJfxj_t1sg8amUPKPO9hr4Tdof18T9CpHqCqVpothoivLz3blMramSFTh6BFXEiArZaDvSwKO4ccdFe-BOqbzIkuSopUZtUCoWOa8ZWCdT76Vzv_6u6SowjBNOFjwAQyMq77cSU16MApLsEGe_3UARvB-BOg95DE3Zymjt6HVen4JjjthVB3VeMDLNeDUMcWY3JfPOFzbmlPYgwnsaDh09bhqktzMzDPhO409l5jNiiAlo&ui=6gV592GZGmDeY7m_DXSdrVY37AsT2AewWsS4PDlNkswNUGpDDgsysQ6VyMUHYPR5&src=BANNER (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clk1007.com/adServe/adClick?ai=rzP1JV4jgJV/rDKrl/9Swsd416ALnTKZLQPKLf5v2FXKeNCeW6WwEuWQ8tZIKBpvR3cD71MdG4gt e3jipE CYK/u5RGuC89Nf6blEZlGJBTPtMEAS7J5yzLw6fNJCBprW9m1B/fGRInJxOjJMYUV1Tpi toRo3IjeE7dAUM9JIbhWKr/SOQBntTPOoeAPE5WDpr5v5pnIpRPb93zmfm 5cZPXYp81jEybHQWA ujRh9/.../Vfaqo&src=BANNER&bt=banner_728x90_72 (installation.exe)

1 / 68 (Adware)

http://clk1007.com/adServe/adClick?ai=08zHTxdapFU KC9D3ukAfOUF U2K fVGfF9CzMwhocI/xu6Z1M/.../AJHj2bNaqZZJCxAdeOqU=&src=BANNER (installation.exe)

1 / 68 (Adware)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=get on up (installation.exe)

1 / 68 (Adware)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=online, movie, movies, film, cinema, streaming, trailers, free movies, full movi (installation.exe)

23 / 68 (Adware)

http://clk1007.com/adServe/adClick?ai=dxYyzVlXuV9 ADYF6l6wJ2EtSSaLBlowynjQnlulsBLDkkPQjMbLZh6swA3X4iq4s0/qbKYlfMa9 fdGiJiIMar8CZEot1Vbq6rjclI1pa5CZtKAYyjyVpW2GaCBt4hfgx0oTN77rwNfaXDzNXcGQXgyC RGoG1O2pOu9f gVv56IXFJP4X0KI0kq86MXxY Qi4t37WgFM8TLT SeEqkQWhgB/IN53ZHuIWy/.../12mUjgLJO6yoyU55TpFLlixqm680hbQAI&src=BANNER (installer_adobe_flash_player_english.exe)

1 / 68 (PUP)

http://clk1007.com/.../sa?cid=MK1VIOOZCOPOP&pid=&q=movie, streaming, Viooz, online, Holiday, Watch (installer_java_english.exe)

1 / 68 (Adware)

http://clk1007.com/adServe/adClick?ai=rzP1JV4jgJV/rDKrl/9Swsd416ALnTKZLQPKLf5v2FXKeNCeW6WwEuWQ8tZIKBpvR3cD71MdG4gt e3jipE CYK/u5RGuC89Nf6blEZlGJBTPtMEAS7J5yzLw6fNJCBprW9m1B/fGRInJxOjJMYUV1Tpi toRo3IjeE7dAUM9JIbhWKr/SOQBntTPOoeAPE5WDpr5v5pnIpRPb93zmfm 5cRRH/ljSmX0oDnMK zeWDZcOxMYGuazyh8lsSxjesq14/.../Y1Hiy1cMAlvYf LLa8dA==&ui=BZCZL3E4DrIJdRI5k bwtoBVNmK1S2tVmTIMbcPs0irp3vxiwoF0NyJ7jcGYgLgH&src=BANNER&bt=banner_728x90_86 (installation.exe)

The following 90 files have been seen to comunicate with clk1007.com in live environments.

TCP » 173.192.117.80:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 173.192.117.80:80

stormwatchbrowser.exe

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

browser.exe (Browser)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 173.192.117.80:80

safeguardbrowser.exe

TCP » 173.192.117.80:80

crossbrowser.exe (CrossBrowser by The CrossBrowser Authors)

TCP » 173.192.117.80:80

apptrailers.exe

TCP » 173.192.117.80:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 173.192.117.80:80

kometa.exe (Kometa by Kometa Authors)

TCP » 173.192.117.80:80

bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 173.192.117.80:80

Smartbar.exe (Smartbar)

TCP » 173.192.117.80:80

swiftmediaconverterbrowser.exe

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

Latest 20 of 126 files

URL:

http://clk1007.com/

Title:

“Contact Us”

Web server:

nginx

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.