trclk.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain trclk.com is registered by proxy through GODADDY.COM, LLC and was originally registered in April of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Monday, April 27, 2015

Expires date:
Wednesday, April 27, 2016

Updated date:
Thursday, June 4, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Amonetize.Installer.Meta (M), Adware.Amonetize.Meta (M)
80.00%

Dr.Web
infected with Trojan.Amonetize.4075, infected with Trojan.Amonetize.9899
20.00%

ESET NOD32
Win32/Amonetize.FU potentially unwanted application, Win32/Amonetize.JP potentially unwanted application
20.00%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize, not-a-virus:Downloader.Win32.Agent
20.00%

Malwarebytes
PUP.Optional.Amonetize
20.00%

VIPRE Antivirus
Amonetize
20.00%

NANO AntiVirus
Trojan.Win32.Amonetize.dtqgef, Trojan.Win32.Agent.dxmgor
20.00%

Sophos
Generic PUA JN (PUA), Generic PUA GP (PUA)
20.00%

G Data
Gen:Application.Imonetize, Win32.Trojan.Agent.OYCEK0
20.00%

Vba32 AntiVirus
AdWare.Amonetize, Signed-Downware.Amonetize
20.00%

Panda Antivirus
PUP/Amonetize, Generic Suspicious
20.00%

IKARUS anti.virus
PUA.Amonetize, not-a-virus:AdWare.Amonetize
20.00%

Fortinet FortiGate
Riskware/Amonetize, Riskware/Agent
20.00%

AVG
BundleApp, Generic
20.00%

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen, Win32/Virus.Downloader.911
20.00%

The domain trclk.com has been seen to resolve to the following 4 IP addresses.

ip-50-63-202-48.ip.secureserver.net
June 2, 2016

ip-184-168-221-40.ip.secureserver.net
December 23, 2015

ec2-52-27-144-71.us-west-2.compute.amazonaws.com
October 15, 2015

ec2-52-26-11-185.us-west-2.compute.amazonaws.com
June 26, 2015

File downloads found at URLs served by trclk.com.

1 / 68      (PUP)
http://trclk.com/.../?q=  (setup__6666_i1551793616_il32871.exe.zip)

1 / 68      (PUP)
http://trclk.com/.../?q=  (setup__6666_i1551794585_il32871.exe.zip)

1 / 68      (PUP)
http://trclk.com/.../?q=  (setup__6666_i1551796276_il32871.exe.zip)

1 / 68      (PUP)
http://trclk.com/.../?q=  (--q=__6666_i1553475942_il20016.exe.zip)

1 / 68      (PUP)
http://trclk.com/.../?q=  (--q=__6666_i1553476166_il20016.exe.zip)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)
http://trclk.com/.../?q=  (setup__6666_i1551830967_il11020.exe.zip)

The following 109 files have been seen to comunicate with trclk.com in live environments.

 
Latest 20 of 123 files

June 26, 2015

URL:
http://trclk.com/

Title:
“Google”

Description:
“Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for.”

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)