» clkads.com
Overview
Analysis
IPs Addresses (3)
Downloads (22)
Network (90)
Website Detail
Statistics
Related Domains (12)

clkads.com

INTANGO

Domain Information

The domain clkads.com registered by INTANGO was initially registered in January of 2010 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.

Registrant:

INTANGO

Registrar:

ENOM, INC.

Server location:

Texas, United States (US)

Create date:

Sunday, January 31, 2010

Expires date:

Tuesday, January 31, 2017

Updated date:

Saturday, January 16, 2016

ASN:

AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Whois:

2 clkads.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Tightrope.Bundler, PUP.FreeSoftware.e, PUP.Installer.CodeTechno, PUP.Tightrope.Sanflex.Bundler (M), PUP.Softpulse.PluginUpdate.Bundler (M), PUP.Air Software.DownloadManager.Bundler (M), PUP.Amonetize.ShetefSolutionsConsulting1998.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.InstallCore.RES (M), PUP.Outbrowse.StartNow.Bundler (M), PUP.Outbrowse.CLICKTOS.Bundler (M), PUP.DownloadAdmin.CodeTech.Installer (M), PUP.Softpulse (M), PUP.InstallCore.FC (M)

100.00%

Malwarebytes

PUP.Optional.DownloadAdmin, PUP.Optional.BundleInstaller, PUP.Optional.Statscom

8.00%

VIPRE Antivirus

Trojan.Win32.Generic, Vittalia Installer, DownloadAdmin, Threat.4783369

8.00%

AVG

Generic

8.00%

McAfee

Artemis!D8F8D939B4DB, Artemis!E7206930C7AA, Artemis!C4F8A62DDE9E

6.00%

K7 AntiVirus

Unwanted-Program

6.00%

Agnitum Outpost

Riskware.Agent

6.00%

Clam AntiVirus

Win.Adware.Downloadadmin

6.00%

NANO AntiVirus

Riskware.Win32.Downware.djahkt

6.00%

Dr.Web

Adware.Downware.2220, Trojan.Vittalia.2

6.00%

Sophos

Generic PUA EG, Generic PUA DJ, Generic PUA JG

6.00%

Avira AntiVirus

ADWARE/Adware.Gen

6.00%

AhnLab V3 Security

PUP/Win32.Downware

6.00%

G Data

Win32.Application.DownloadAdmin

6.00%

ESET NOD32

Win32/DownloadAdmin (variant), Win32/InstallCore.SC (variant)

6.00%

The domain clkads.com has been seen to resolve to the following 3 IP addresses.

173.192.117.80

173.192.117.80-static.reverse.softlayer.com

April 4, 2016

108.168.157.190

108.168.157.190-static.reverse.softlayer.com

June 18, 2015

108.168.157.82

108.168.157.82-static.reverse.softlayer.com

August 17, 2014

File downloads found at URLs served by clkads.com.

1 / 68 (Adware)

http://clkads.com/adServe/.../mYEmjwZeEyTo1Nv1KjZe8KLxbdyxUpTqzgDKNAYSMvaP1bjWdlXSgW7Ljrk JVYK2wrAPqwWcH55acyZHEPLwJ1SLb0JHqbDPvN4oUsJ cJqOR2K&ui=x1ZKWZiHinpi P22chjfwlY37AsT2Aew Hk1vXsUGLd sB1Ikojf8YL05aanzBEh&src=BANNER (player setup.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs75_0_CRW_PH&q=&q=video sharing camera phone video phone free upload (installer_java_english.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs95_0_CRW_BR&q=&q=video sharing camera phone video phone free upload (icreinstall_installer_java_english.exe)

1 / 68 (Adware)

http://clkads.com/.../rdr.html?pid=Mk1Stream2u&cid=S2UTOPB (player setup.exe)

1 / 68 (Adware)

http://clkads.com/adServe/adClick?ai=eEJYKz4rK8MQ/zRHU9UgI501jw5iDWhRMqY/SzlZUJVCS9QwTBR3CzrvX/oFb eiFxST F9CiNJK vOjF8WPkIqv2eV7VdndcEfHT/ZD8CknGoabLXJw344lKw8Cn/Dl8&ui=13HhRckUAxCEj/UzXgEpQvbWwvziNp/.../JGI&src=BANNER (player setup.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs67_0_CRW_TN&q=&q=video sharing camera phone video phone free upload (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs67_0_CRW_TN&q=&q=new latest movie Bollywood Film Indian 2013 update behind the scene Clip Promo stars shooting entertainment chennai express chenai officia... (installer_java_english.exe)

1 / 68 (Adware)

http://clkads.com/adServe/.../mmcilE9v3fOZ b7lxMvEBtq9LPGkiT2ikazWXyvMgJj49k0MT&ui=rRqlk3WWcHkyxV0vkEF7nFY37AsT2AewrU0BUEkFdhAf8dt6qvcmuF9bx9slghyB&src=BANNER (player setup.exe)

1 / 68 (Adware)

http://clkads.com/adServe/adClick?ai=fMLVOUeNi CsYIi/ZWxF1YrxMi US6 uPZVtC5gizcfLs/w6bMONUXrb5hO0Af7DOu9f gVv56IX FJP4X0KI0kq86MXxY QizWQKXz6HlJr4iiQpmMVBntTEsiKly/OVeAp8eLL0D2M=&ui=zPaJ2/CA1uUybMg8W1s/.../01ICBMSadjGUebmdaEQekfJ7gpJMG9FTm&src=BANNER&bt=banner_10x10_9 (player setup.exe)

1 / 68 (PUP)

http://clkads.com/.../banners?tid=TB_DIRECT_PLAYER&action=r (installer_adobe_flash_player_english.exe)

16 / 68 (PUP)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs53_0_CRW_TN&q=&q=Quran Shia Shi3a Aaa102 Muhammad Sheikh Koran Ali (Religious Leader) Shia Islam (Religion) Transformers Pakistan Revenge Imam Prophet Ahmed Na... (Setup.exe)

1 / 68 (Adware)

http://clkads.com/adServe/adClick?ai=fMLVOUeNi BLu0AtLWbOe501jw5iDWhRi8qoWjnN4uEpaXGeMdBnrFYqv9I5AGe1M86h4A8TlYOm vm/mmcilE5dGphUroVH j8sfEFfgvQij2HajOd 4M1mgy0W4217a&ui=leBYg7/nzvbHh3O/.../1SEH2jVqYlwJHCusrS40EcAblTvPTOEmB&src=BANNER&bt=banner_468x60_39 (player setup.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs75_0_CRW_BR&q=&q=Um Truque Estranho (installer_java_english.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs67_0_CRW_CL&q=&q=Iniciar sesión en Twitter (installation.exe)

1 / 68 (Adware)

http://clkads.com/adServe/adClick?ai=fMLVOUeNi CWx4XLkMcMV rKmwVY923/vqdiXyIDbL7XlR5j8f0jvDrvX/.../zAD4ZMSKl4rXz&src=BANNER (player setup.exe)

1 / 68 (Adware)

http://clkads.com/adServe/.../QqR6gqlaaLYaIry8925TK2pkhU60 MNzaLU8Bbyl1j57 JOeaCKvKAISYiEOMbxC3ggaMpg==&ui=E7deH3tAzzzUzjv74mz7BlY37AsT2AewrU0BUEkFdhB3g6TUpjNStdZKbEmWG0IZ&src=BANNER&bt=banner_10x10_9 (player setup.exe)

1 / 68 (PUP)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs67_0_CRW_MX&q=&q=Google (installer_java_english.exe)

1 / 68 (Adware)

http://clkads.com/adServe/adClick?ai=eEJYKz4rK8MQ/zRHU9UgI501jw5iDWhRMqY/SzlZUJVCS9QwTBR3CzrvX/oFb eiFxST F9CiNJK vOjF8WPkIh zoKfTPfjme igOVtfCusApn4w/PGes4ZvxpidtE0D&ui=dsYXl11CU w2aJo99bIqjfbWwvziNp/.../vxjtFMtm1OrBQ&src=BANNER (player setup.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs53_0_CRW_IN&q=&q=love horoscope compatibility (installer_adobe_flash_player_english.exe)

1 / 68 (Adware)

http://clkads.com/.../banners?tid=LOSMPLDL&action=r (player setup.exe)

1 / 68 (Adware)

http://clkads.com/.../banners?tid=AWESOMEDIRECT&action=r (player setup.exe)

1 / 68 (Adware)

https://clkads.com/.../rdr.html?pid=3883&cid=rjs75_0_CRW_MX&q=&q=ricky martin (installer_java_english.exe)

The following 90 files have been seen to comunicate with clkads.com in live environments.

TCP » 173.192.117.80:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 173.192.117.80:80

stormwatchbrowser.exe

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

browser.exe (Browser)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 173.192.117.80:80

safeguardbrowser.exe

TCP » 173.192.117.80:80

crossbrowser.exe (CrossBrowser by The CrossBrowser Authors)

TCP » 173.192.117.80:80

apptrailers.exe

TCP » 173.192.117.80:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 173.192.117.80:80

kometa.exe (Kometa by Kometa Authors)

TCP » 173.192.117.80:80

bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80

autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 173.192.117.80:80

Smartbar.exe (Smartbar)

TCP » 173.192.117.80:80

swiftmediaconverterbrowser.exe

TCP » 173.192.117.80:80

UCBrowser.exe (UC Browser by UCWeb)

Latest 20 of 127 files

URL:

http://clkads.com/

Title:

“Contact Us”

SSL certificate subject:

CN=clkads.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)15, OU=GT12850833

SSL certificate issuer:

CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US

Web server:

nginx

Facebook:

Likes: 1

Shares: 24

Statistics above are for the previous month of October 2024.

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.