home

sdkinterface.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain sdkinterface.com is registered by proxy through GODADDY.COM, LLC and was originally registered in November of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Thursday, November 12, 2015

Expires date:
Saturday, November 12, 2016

Updated date:
Thursday, November 12, 2015

ASN:
AS16265 FIBERRING LeaseWeb B.V.

Whois:
1 sdkinterface.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.ConvertAd (M), PUP.ConvertAd.EST, PUP.ClickMeIn.Installer.Meta (M), PUP.ConvertAd (M), PUP.ConvertAd.ET (M), Adware.Generic.AT (M)
100.00%

ESET NOD32
Win32/Adware.ConvertAd.ADJ application, Win32/Adware.ConvertAd.AEA application, Win32/Adware.ConvertAd.ABW application
95.35%

F-Secure
Variant.Adware.ConvertAd
25.58%

Norman
Trojan.GenericKD.3066542, Trojan.GenericKD.3086549, Gen:Variant.Adware.ConvertAd.69
6.98%

avast!
Win32:Adware-gen [Adw]
4.65%

MicroWorld eScan
Trojan.GenericKD.3065322
2.33%

nProtect
Trojan.GenericKD.3065322
2.33%

Malwarebytes
Adware.ConvertAd
2.33%

VIPRE Antivirus
Trojan.Win32.Generic
2.33%

Bitdefender
Trojan.GenericKD.3065322
2.33%

ESET NOD32
Win32/Adware.ConvertAd.ADJ (variant)
2.33%

Clam AntiVirus
Win.Trojan.Adload-4844
2.33%

Kaspersky
Trojan.NSIS.Inject
2.33%

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
2.33%

Lavasoft Ad-Aware
Trojan.GenericKD.3065322
2.33%

The domain sdkinterface.com has been seen to resolve to the following 11 IP addresses.

199.115.115.13
February 20, 2016

192.240.114.2
dl17.clickmein.com
February 20, 2016

108.59.9.195
February 20, 2016

95.211.210.34
February 20, 2016

95.211.189.17
hosted-by.leaseweb.com
February 20, 2016

95.211.189.16
February 20, 2016

50.7.184.162
dl19.clickmein.com
February 20, 2016

50.7.99.2
dl16.clickmein.com
February 20, 2016

50.7.86.58
February 20, 2016

216.227.128.186
dl21.clickmein.com
February 20, 2016

199.115.115.14
February 20, 2016

File downloads found at URLs served by sdkinterface.com.

3 / 68      (PUP)
http://sdkinterface.com/.../pixt.php?ch=IVER&sid=lgmjskfmsmrks  (clkm.exe)

3 / 68      (PUP)
http://sdkinterface.com/.../pixt.php?ch=BSFE&sid=qwertyuiop  (l7qu8f.exe)

2 / 68      (PUP)
http://sdkinterface.com/.../pixt.php?ch=BRLB&sid=hfjdjtnsktksm  (nst9f50.tmp)

2 / 68      (PUP)
http://sdkinterface.com/.../pixt.php?ch=brlb&sid=hfjdjtnsttwwer2  (vvdeze.exe)

The following 2337 files have been seen to comunicate with sdkinterface.com in live environments.

TCP » 50.7.184.162:80
qnsl1e89.tmp

TCP » 50.7.184.162:443
wdsrvwrapper.exe

TCP » 50.7.184.162:443
pro83c2.tmp

TCP » 216.227.128.186:443
wdsrvwrapper.exe

TCP » 216.227.128.186:80
qnsl1e89.tmp

TCP » 216.227.128.186:443
kns4956.tmp

TCP » 216.227.128.186:443
pro83c2.tmp

TCP » 216.227.128.186:80
WebNotifier.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 50.7.184.162:80
kns315e.tmp

TCP » 50.7.184.162:80
snsm528a.tmp

TCP » 216.227.128.186:80
kns71c8.tmp

TCP » 50.7.184.162:80
kns2d0e.tmp

TCP » 216.227.128.186:80
nspd4a0.tmp

TCP » 50.7.184.162:443
kns5b55.tmp

TCP » 50.7.184.162:443
knscc69.tmp

TCP » 216.227.128.186:80
kns4956.tmp

TCP » 50.7.184.162:80
nspd4a0.tmp

TCP » 50.7.184.162:80
kns7207.tmp

TCP » 50.7.184.162:443
knscfa1.tmp

TCP » 216.227.128.186:443
kns611f.tmp

 
Latest 20 of 2,901 files

URL:
http://sdkinterface.com/

Web server:
nginx/1.8.0

counter99.com

download-ap.com

download-servers.com

globalstorage1.com

livestatscounter.com

mobilitydata5.com

software-repository.com

desura.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.