home

ad.reklaam00.reklaam.co

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain ad.reklaam00.reklaam.co is registered by proxy through GODADDY.COM, INC. and was originally registered in December of 2013. The hosted servers are located in Portland, Oregon within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, INC.

Server location:
Oregon, United States (US)

Create date:
Thursday, December 12, 2013

Expires date:
Sunday, December 11, 2016

Updated date:
Saturday, December 12, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
reklaam.co

Whois:
1 reklaam.co record

The domain ad.reklaam00.reklaam.co has been seen to resolve to the following 9 IP addresses.

54.244.91.154
ec2-54-244-91-154.us-west-2.compute.amazonaws.com
June 28, 2016

50.112.111.159
ec2-50-112-111-159.us-west-2.compute.amazonaws.com
June 28, 2016

54.244.118.191
ec2-54-244-118-191.us-west-2.compute.amazonaws.com
June 28, 2016

54.214.45.3
ec2-54-214-45-3.us-west-2.compute.amazonaws.com
May 20, 2016

50.112.104.211
ec2-50-112-104-211.us-west-2.compute.amazonaws.com
May 20, 2016

54.244.235.146
ec2-54-244-235-146.us-west-2.compute.amazonaws.com
May 20, 2016

54.214.38.104
ec2-54-214-38-104.us-west-2.compute.amazonaws.com
January 31, 2016

54.245.242.4
ec2-54-245-242-4.us-west-2.compute.amazonaws.com
January 31, 2016

54.214.44.146
ec2-54-214-44-146.us-west-2.compute.amazonaws.com
January 31, 2016

File downloads found at URLs served by ad.reklaam00.reklaam.co.

1 / 68      (PUP)
http://ad.reklaam00.reklaam.co/countAdReport.aspx?url=http://spdd.speedypc.revenuewire.net/speedypc-pro/download?keyword=.speedypc.com&adId=11799948&keywordId=21176996&ver=2.0.3.0&browser=CHROME 35&domain=d3d3LmZhcnNpMWhkLmNvbQ==&partnerId=reklaam&subId=49809&asd=//ad.reklaam00.reklaam.co&r=53b758abad8527.80908712  (speedypc pro installer_cc3a62a_.exe)

0 / 68
http://ad.reklaam00.reklaam.co/countAdReport.aspx?sdata=140bfa103ad17dc1e003e5cc484d387105fd4f0618bda1dae81fc2bab73e0b1733933d10603f80177658c3d0945a2da0729fca253295bf92eb648a235e2f97d7880d6abee6d1f8ff6cc8cd25d737c1160603c225bbaade2bffd04f9091d2b1302c0fc3ae250fe7b30576f297c4b0171c5a75a2f00540ce8f140d9079916a7d21394b947b2411d0b5fa14aeb83bac9b5808dd528f95973b7e87cdd6f9a599cda87558efea2677b174e2546d24ab388876e51179bd45167a0a2cdd908dd47a84108433cdd6a5fa8cba2dc3a07a84ada5d0967d49f869825c5e7d411119948b757a91df83e6d32fbb9d5dbf2c1323ff9730151ef1ff54673c398d44eb29598d673b6a4b14eeafa37af98265dec75b4c5d5ee77f15baca4131f902e34d3aa0056a2ac133a94eeba779f50e46da4fdc163ec8a7469ea6b0d12db3a4d68c8ed47cec8b70f0cd92c41c9c8b54ef0ee810eb1dba854437673dbcf6d1dc756ccdfb60120e318e2395ef74a0125cc71fcfd1151fde459287a65c9e97e51339ebd27bed682a97057beab61aa39a8ea7dab89525428f6b5adb0ca37c7266687cb7&ver=3&browser=CHROME 40&domain=c2ViLnNl&uid=CT7l1MHHj4Ofa0sEqmbN&uidts=1423039028&iQS=request_id=5501d607ec79c4.40897547&  (bingocabin_downloader.exe)

0 / 68
http://ad.reklaam00.reklaam.co/countAdReport.aspx?sdata=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&ver=3&browser=CHROME 40&domain=cGVyc29uZXIuZW5pcm8uc2U=&uid=yekmtV4ksrdAmyJfOePZ&uidts=1420568776&iQS  (bingocabin_downloader.exe)

The following 3 files have been seen to comunicate with ad.reklaam00.reklaam.co in live environments.

TCP » 54.214.44.146:80
browser.exe (Speed Browser by Smart Applications)

TCP » 54.214.44.146:80
GPlayer.exe (by Exent Technologies)

TCP » 54.244.235.146:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://ad.reklaam00.reklaam.co/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx (PHP/5.5.28)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.