home

clk1008.com

INTANGO

Domain Information

The domain clk1008.com registered by INTANGO was initially registered in December of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Monday, December 8, 2014

Expires date:
Thursday, December 8, 2016

Updated date:
Thursday, November 26, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Whois:
2 clk1008.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Outbrowse.TikiTaka.Bundler (M), PUP.Outbrowse.Bundler
100.00%

The domain clk1008.com has been seen to resolve to the following IP address.

173.192.117.80
173.192.117.80-static.reverse.softlayer.com
December 5, 2015

File downloads found at URLs served by clk1008.com.

1 / 68      (Adware)
http://clk1008.com/adServe/adClick?ai=dxYyzVlXuV89dt6QTmptUq6RFFWPj2u S/nhgP6ZIIaUUMHdIyOwtvab1lx3xPHhNk7atT7fRDbI fytn2CEj8TVrluwk0Lbo95wYL0Y9gB Mv0rN9rGqzWHxKQpExFNHtaJ5Y51NbPgHoPQHXyCNbP10 PZxtMFCMkgwn7yDOkYH2PmEsunx5Bus9nsHjogeei3cEETEJJH4bUM/b8dmiRc53 OHl zckGqNN v2p0NLRLoYFczkOF4McevelHcHJpw9/fsq/.../&src=BANNER  (installer_java_english.exe)

1 / 68      (Adware)
http://clk1008.com/adServe/adClick?ai=08zHTxdapFUIOh3826OrBHOBQyb8mg6culIE4nVtnuznxvYxgedbaU4TdBdCLXowePmgOCOvgGdt aRHwfwUN4Ap2TZKl8/fajyExnATSiHR0XLqNFqX6e5Zg7xna1kONGCUKSHS26mpV5fmFjHXJBUTX DmAIXehfE15yz728krUKoUv4wzjA1YFd2rNK35DNgmGw kTpOBIpdY e/iTnmjiaTjb8NwdzGE R JFQceLbYGhMeJJNmHbK71aZ OxuF04WPABDIyrv12iya1E1XZxygFChf9koJDe6E5DWof4U=&ui=To5E/eRUmA8TKCFR0OWt9/.../&src=BANNER  (installation.exe)

The following 90 files have been seen to comunicate with clk1008.com in live environments.

TCP » 173.192.117.80:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 173.192.117.80:80
stormwatchbrowser.exe

TCP » 173.192.117.80:80
UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80
browser.exe (Browser)

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 173.192.117.80:80
safeguardbrowser.exe

TCP » 173.192.117.80:80
crossbrowser.exe (CrossBrowser by The CrossBrowser Authors)

TCP » 173.192.117.80:80
apptrailers.exe

TCP » 173.192.117.80:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 173.192.117.80:80
kometa.exe (Kometa by Kometa Authors)

TCP » 173.192.117.80:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80
UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80
UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80
autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 173.192.117.80:80
Smartbar.exe (Smartbar)

TCP » 173.192.117.80:80
swiftmediaconverterbrowser.exe

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 126 files

URL:
http://clk1008.com/

Title:
“Contact Us”

Web server:
nginx

clk1003.com

clk1004.com

clk1005.com

clk1006.com

clk1007.com

clk1009.com

clk1013.com

clk1014.com

clk1015.com

clkads.com

rdsa2012.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.