The domain mmtrkms.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in November of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Virginia, United States (US)
Create date:
Wednesday, November 20, 2013
Expires date:
Sunday, November 20, 2016
Updated date:
Monday, October 26, 2015
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US
Scanner detections:
Detections (98% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.SecureDownload.J, PUP.InstallCore.Bundler (M), PUP.SubtrendingMediaSolutions.Installer (M), PUP.Outbrowse.Bundler (M), PUP.NewMedia.NMH.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.InstallCore.AC (M), PUP.Outbrowse (M), PUP.NewMedia.NMH (M)
96.00%
avast!
Downloader-WDK [PUP], Win32:PUP-gen [PUP], Win32:OutBrowse-G [PUP]
8.00%
Malwarebytes
PUP.Optional.InstallCore, PUP.Optional.DownLoadAdmin
6.00%
VIPRE Antivirus
Threat.4150696, Threat.4784459
6.00%
ESET NOD32
Win32/DownloadAdmin.N potentially unwanted application, Win32/OutBrowse.W potentially unwanted application, Win32/OutBrowse.AC potentially unwanted application
6.00%
ESET NOD32
Win32/InstallCore.ACZ potentially unwanted (variant)
4.00%
Fortinet FortiGate
Riskware/InstallCore
4.00%
McAfee
Program.DownloadAdmin, Program.Adware-OutBrowse
4.00%
F-Secure
Gen:Variant.Symmi.37960
2.00%
Microsoft Security Essentials
Threat.Undefined
2.00%
F-Secure
Riskware.Application.Bundler.PO
2.00%
Dr.Web
Trojan.Vittalia.487
2.00%
Emsisoft Anti-Malware
Application.Bundler.PO
2.00%
Lavasoft Ad-Aware
Application.Bundler.PO
2.00%
Clam AntiVirus
Win.Trojan.Downloadadmin-174
2.00%
The domain mmtrkms.com has been seen to resolve to the following 47 IP addresses.
ec2-52-202-234-75.compute-1.amazonaws.com
September 3, 2016
ec2-54-85-107-224.compute-1.amazonaws.com
September 3, 2016
ec2-54-87-58-141.compute-1.amazonaws.com
August 26, 2016
ec2-52-72-138-194.compute-1.amazonaws.com
August 26, 2016
ec2-52-2-85-80.compute-1.amazonaws.com
August 22, 2016
ec2-52-203-188-227.compute-1.amazonaws.com
August 22, 2016
ec2-52-204-140-191.compute-1.amazonaws.com
August 17, 2016
ec2-52-3-85-44.compute-1.amazonaws.com
August 17, 2016
ec2-54-236-123-241.compute-1.amazonaws.com
August 14, 2016
ec2-52-204-213-80.compute-1.amazonaws.com
August 14, 2016
ec2-54-86-240-108.compute-1.amazonaws.com
August 13, 2016
ec2-52-202-210-144.compute-1.amazonaws.com
August 13, 2016
ec2-54-164-32-30.compute-1.amazonaws.com
August 7, 2016
ec2-52-203-45-162.compute-1.amazonaws.com
August 7, 2016
ec2-52-200-98-6.compute-1.amazonaws.com
July 17, 2016
ec2-54-210-33-56.compute-1.amazonaws.com
July 17, 2016
ec2-52-21-30-31.compute-1.amazonaws.com
July 11, 2016
ec2-52-202-230-55.compute-1.amazonaws.com
July 11, 2016
ec2-52-203-76-115.compute-1.amazonaws.com
June 27, 2016
ec2-52-202-150-246.compute-1.amazonaws.com
June 27, 2016
ec2-54-84-26-40.compute-1.amazonaws.com
June 19, 2016
ec2-54-210-47-92.compute-1.amazonaws.com
June 19, 2016
ec2-52-202-120-141.compute-1.amazonaws.com
June 2, 2016
ec2-52-200-194-25.compute-1.amazonaws.com
June 2, 2016
ec2-54-210-26-119.compute-1.amazonaws.com
May 16, 2016
ec2-52-201-145-33.compute-1.amazonaws.com
May 16, 2016
ec2-54-174-26-236.compute-1.amazonaws.com
May 15, 2016
ec2-54-209-151-196.compute-1.amazonaws.com
May 15, 2016
ec2-52-86-224-192.compute-1.amazonaws.com
April 20, 2016
ec2-52-22-126-237.compute-1.amazonaws.com
April 20, 2016
Showing 30 of 47 IP Addresses
File downloads found at URLs served by mmtrkms.com.
The following 4 files have been seen to comunicate with mmtrkms.com in live environments.
Network:
Amazon Web Services (AWS), running an EC2 instance
SSL certificate subject:
CN=pixeltrack66.com, OU=COMODO SSL Unified Communications, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB