home

track.cmllk2.info

CashMyLinks

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
eNom, Inc.

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
cmllk2.info

Whois:
3 cmllk2.info records

Google Safe Browsing:
malware

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SHLEMOONMEDIAINC.F, PUP.Installer.INSTALLDOTEXE.U, PUP.Installer.WARPINSTALL.y, PUP.Installer.WARPINSTALL.U, PUP.Installer.SecureInstall.P, PUP.Installer.FUSIONINSTALL.x, PUP.Installer.TINYINSTALLER.x, PUP.Installer.SystemApplet.DD, PUP.Installer.SafeDown.K, PUP.Installer.FileMonarch.P, PUP.Installer.WARPINSTALL.W, PUP.Adknowledge.FreeVirusSoft.Bundler (M), PUP.Adknowledge.TINYINSTALLER.Installer (M), PUP.SHLEMOONMEDIA (M), PUP.Adknowledge.INSTALLDOTEXE.Installer (M), PUP.Adknowledge.WARPINST.Bundler (M), PUP.InstallX.SecureIn.Installer (M), PUP.Adknowledge.FUSIONIN.Bundler (M), PUP.Adknowledge (M)
96.30%

AVG
AdPlugin, Generic_r, Adware Skodna.Generic.ASN, Adware Skodna.Generic.ARX, Adware AdPlugin, Adware AdPlugin.BIA, Skodna.Generic_r
44.44%

Malwarebytes
PUP.Optional.OptimumInstaller.A, PUP.Optional.SafeInstall.A, PUP.Optional.OptimunInstaller, PUP.Optional.InstallIQ.A
40.74%

VIPRE Antivirus
Trojan.Win32.Generic, InstallIQ Installer, Threat.4778314, Threat.4150696
40.74%

Dr.Web
Trojan.Packed.26508, Adware.Downware.2512, Trojan.Packed.25374, Trojan.Packed.26551, Trojan.Packed.27351, Adware.iBryte.493, Adware.Downware.10786
40.74%

Sophos
iBryte Optimum Installer, InstallQ, DomainIQ pay-per install, iBryte Premium Installer
37.04%

NANO AntiVirus
Trojan.Win32.IBryte.cwpxbb, Riskware.Win32.Searcher.csnymk, Trojan.Win32.Buzus.cwizqg, Riskware.Win32.IBryte.csnqdp, Riskware.Win32.IBryte.daxcft
37.04%

Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:Downloader.NSIS.Agent, not-a-virus:AdWare.Win32.iBryte
33.33%

Comodo Security
Application.Win32.IBryte.X, Application.Win32.Ibryte.EDF, Application.Win32.Adware.iBryte.BJ, TrojWare.Win32.IBryte.AE, Application.Win32.InstallIQ.B
33.33%

Avira AntiVirus
SPR/Dldr.Agent.bkfx.1, ADWARE/Adware.Gen7, Adware/iBryte.bxou, Adware/iBryte.bxop, Adware/iBryte.bxoq, APPL/InstallIQ.Gen4
29.63%

K7 AntiVirus
Unwanted-Program , Adware
29.63%

Vba32 AntiVirus
Downloader.Agent, SScope.Malware-Cryptor.iBryte, AdWare.iBryte, suspected of Trojan.Downloader.gen.h
25.93%

G Data
Win32.Application.PremiumInstaller, Gen:Variant.Application.Bundler.OptimumInstaller, Win32.Adware.IBryte, Application.Downloader.TM
25.93%

AhnLab V3 Security
PUP/Win32.IBryte, Trojan/Win32.Generic, PUP/Win32.Downloader, PUP/Win32.SafeInstaller
25.93%

avast!
Win32:IBryte-CV [PUP], Win32:IBryte-BY [PUP], Win32:PUP-gen [PUP], Win32:Adware-gen [Adw], Win32:IBryte-EF [PUP], Win32:Somoto-N [PUP]
22.22%

The domain track.cmllk2.info has been seen to resolve to the following 28 IP addresses.

52.7.213.252
ec2-52-7-213-252.compute-1.amazonaws.com
August 19, 2016

52.5.14.12
ec2-52-5-14-12.compute-1.amazonaws.com
August 19, 2016

52.206.36.195
ec2-52-206-36-195.compute-1.amazonaws.com
August 19, 2016

52.205.218.105
ec2-52-205-218-105.compute-1.amazonaws.com
August 19, 2016

52.72.162.128
ec2-52-72-162-128.compute-1.amazonaws.com
June 3, 2016

52.5.57.82
ec2-52-5-57-82.compute-1.amazonaws.com
June 3, 2016

107.21.44.249
ec2-107-21-44-249.compute-1.amazonaws.com
April 2, 2016

52.72.118.27
ec2-52-72-118-27.compute-1.amazonaws.com
April 2, 2016

54.208.254.134
ec2-54-208-254-134.compute-1.amazonaws.com
February 12, 2016

52.73.156.129
ec2-52-73-156-129.compute-1.amazonaws.com
February 12, 2016

52.72.251.195
ec2-52-72-251-195.compute-1.amazonaws.com
February 10, 2016

52.72.181.246
ec2-52-72-181-246.compute-1.amazonaws.com
February 10, 2016

54.172.73.48
ec2-54-172-73-48.compute-1.amazonaws.com
January 28, 2016

52.20.106.232
ec2-52-20-106-232.compute-1.amazonaws.com
January 28, 2016

107.23.100.205
ec2-107-23-100-205.compute-1.amazonaws.com
July 12, 2015

54.173.193.7
ec2-54-173-193-7.compute-1.amazonaws.com
July 12, 2015

54.86.172.158
ec2-54-86-172-158.compute-1.amazonaws.com
July 12, 2015

54.241.186.17
ec2-54-241-186-17.us-west-1.compute.amazonaws.com
October 20, 2014

54.183.158.170
ec2-54-183-158-170.us-west-1.compute.amazonaws.com
October 20, 2014

54.183.42.248
ec2-54-183-42-248.us-west-1.compute.amazonaws.com
September 7, 2014

107.23.142.44
ec2-107-23-142-44.compute-1.amazonaws.com
May 15, 2014

107.21.52.90
ec2-107-21-52-90.compute-1.amazonaws.com
May 15, 2014

107.23.165.131
ec2-107-23-165-131.compute-1.amazonaws.com
May 15, 2014

54.241.149.139
ec2-54-241-149-139.us-west-1.compute.amazonaws.com
May 1, 2014

54.246.131.227
ec2-54-246-131-227.eu-west-1.compute.amazonaws.com
April 20, 2014

54.229.12.122
ec2-54-229-12-122.eu-west-1.compute.amazonaws.com
April 20, 2014

50.18.211.52
ec2-50-18-211-52.us-west-1.compute.amazonaws.com
February 24, 2014

54.246.131.211
ec2-54-246-131-211.eu-west-1.compute.amazonaws.com
January 6, 2014

File downloads found at URLs served by track.cmllk2.info.

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=Crack_recover_My_files_.rar&aff_sub4=http://jdxd012_03.kingfiles.net:182/d/.../Crack_recover_My_files_.rar  (crack-recover-my-files--rar.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=Nuts_January_24_2014.zip&aff_sub4=http://jdxd013_05.kingfiles.net:182/d/.../Nuts_January_24_2014.zip  (nuts-january-24-2014-zip.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=I.Like.a.Sexy.Girl.2014.HDRip.720p.Ganool.mkv&aff_sub4=http://jdxd010_01.kingfiles.net:182/d/.../I.Like.a.Sexy.Girl.2014.HDRip.720p.Ganool.mkv  ({blocked}.exe)

3 / 68      (PUP)
http://track.cmllk2.info/aff_c?offer_id=10&aff_id=7400  (freedomdownload.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=13840&aff_sub=Autodesk Autocad 2014 SETUP  (autodesk-autocad-2014-setup.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=10&aff_id=7400  (freedomdownload.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1382&aff_sub=Last Version Hack Updated 2014  (last-version-hack-updated-2014.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=8454&aff_sub=Descargar Objetivo: tarta perfecta (Cocina (p.Aguilar)) de Alma Obregon (PDF) RapidShare&aff_sub2=588203-descargar-objetivo-tarta-perfecta-cocina-paguilar-de-alma-obregon-pdf-rapidshare  (descargar objetivo tarta perfecta cocina paguilar de alma obregon pdf rapidshare.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=Arab_Sex_53.mp4&aff_sub4=  (arabsex53mp4.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=AKVIS.Coloriage.rar&aff_sub4=http://95.211.209.42:182/d/.../AKVIS.Coloriage.rar  (akvis-coloriage-rar.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=8454&aff_sub=Gordon Ramsay's Great British Pub Food&aff_sub2=399333-gordon-ramsays-great-british-pub-food  (gordon ramsay.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=8622&aff_sub=IDM6.18 Build 3 RePack by CekodoqPFT.rar&aff_sub4=http://192.96.204.204:182/d/.../IDM6.18 Build 3 RePack by CekodoqPFT.rar  (idm6-18-build-3-repack-by-cekodoqpft-rar.exe)

1 / 68      (Adware)
http://track.cmllk2.info/SHuo  (fraps-3599-cracked.exe)

26 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=10&aff_id=4360  (freedomdownload.exe)

29 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=2934&aff_sub=gameofthrones-tvplayer  (gameofthrones-tvplayer.exe)

29 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=RM2014.E03.rmvb&aff_sub4=http://jdxd013_05.kingfiles.net:182/d/.../RM2014.E03.rmvb  (rm2014-e03-rmvb.exe)

9 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=10&aff_id=1000&aff_sub=drivers  (freedomdownload_d6067092.exe)

17 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1414&aff_sub=Check-Mail  (check-mail.exe)

15 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=10&aff_id=15176  (freedomdownload.exe)

31 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=News.Magazine-2014-06-05.rmvb&aff_sub4=http://jdxd013_04.kingfiles.net:182/d/.../News.Magazine-2014-06-05.rmvb  (news-magazine-2014-06-05-rmvb.exe)

24 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=13840&aff_sub=Microsoft Office 2013-Professional Plus ACTIVATOR CRACK  (microsoft-office-2013-professional-plus-activator-crack.exe)

16 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=13840&aff_sub=Microsoft Office 2013-Professional Plus ACTIVATOR CRACK  (microsoft-office-2013-professional-plus-activator-crack.exe)

15 / 68    (Adware)
http://track.cmllk2.info/aff_c?offer_id=10&aff_id=6876  (freedomdownload.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=mbam_2.00.0.0503.rar&aff_sub4=http://jdxd009_01.kingfiles.net:182/d/.../mbam_2.00.0.0503.rar  (mbam-2-00-0-0503-rar.exe)

22 / 68    (Adware)
http://track.cmllk2.info/.../64bit ENGLISH Crack  (microsoft-windows-7-ultimate-32bit-64bit-english---crack.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=mbam_2.00.0.0503.rar&aff_sub4=http://jdxd009_01.kingfiles.net:182/d/.../mbam_2.00.0.0503.rar  (mbam-2-00-0-0503-rar.exe)

1 / 68      (Adware)
http://track.cmllk2.info/aff_c?offer_id=30&aff_id=1326&aff_sub=29.flv&aff_sub4=http://5.39.70.98/files/0/.../29.flv  (29flv.exe)

The following 6 files have been seen to comunicate with track.cmllk2.info in live environments.

TCP » 107.21.52.90:80
Speedchecker.exe (Speedchecker by Optimal Software s.r.o)

TCP » 107.21.52.90:80
vxhost.exe

TCP » 107.23.142.44:80
TheWorld.exe (TheWorld by TheWorld.CN)

TCP » 54.183.158.170:80
38ee02.exe (Calls And by Of Has)

TCP » 54.246.131.227:80
icedragon.exe (IceDragon by COMODO Security Solutions)

TCP » 54.86.172.158:80
myradiobox.exe (youtubePlaylist)

URL:
http://track.cmllk2.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.7.9

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.