home

clkmon.com

INTANGO

Domain Information

The domain clkmon.com registered by INTANGO was initially registered in December of 2012 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Adair, Illinois within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
ENOM, INC.

Server location:
Illinois, United States (US)

Create date:
Sunday, December 9, 2012

Expires date:
Friday, December 9, 2016

Updated date:
Thursday, November 26, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Whois:
3 clkmon.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.AstroDeliveryFriedCookie.e, PUP.Tightrope.Bundler, PUP.FreeSoftware.e, Threat.Amonetize.Bundler, PUP.Outbrowse.ClickYes.Bundler (M), Threat.Win.Reputation.IMP, PUP.Air Software.Installe.Installer (M), PUP.Softpulse (M), PUP.DownloadAdmin.Bundler (M), PUP.Outbrowse (M), PUP.Vittalia (M), PUP.Tightrope (M), PUP.Air Software (M)
97.96%

Malwarebytes
PUP.Optional.Amonetize.A, PUP.Optional.FriedCookie, PUP.Optional.DownloadAdmin, PUP.Optional.BundleInstaller, PUP.Optional.InstallCore, PUP.Optional.OutBrowse
18.37%

Dr.Web
Adware.Downware.2467, Trojan.InstallCore.15, Adware.Downware.2220, Trojan.OutBrowse.6
18.37%

ESET NOD32
Win32/Amonetize.AJ (variant), Win32/InstallCore.RO (variant), Win32/DownloadAdmin (variant), Win32/InstallCore.RZ (variant)
18.37%

AVG
Generic_r, Potentially harmful program Downloader
18.37%

VIPRE Antivirus
InstallCore, DownloadAdmin, Trojan.Win32.Generic, Vittalia Installer, Amonetize, Threat.4784459
18.37%

Sophos
Amonetize, Generic PUA NP, Generic PUA FK, Generic PUA ML, Generic PUA DB, Generic PUA HA, OutBrowse
16.33%

Avira AntiVirus
ADWARE/Adware.Gen2, ADWARE/InstallCore.Gen7, ADWARE/InstallCore.Gen9
16.33%

Qihoo 360 Security
Win32/Virus.Adware.94c, HEUR/QVM42.0.Malware.Gen, Win32/Virus.Adware.f22, Win32/Trojan.Adware.37e
14.29%

Baidu Antivirus
Adware.Win32.Amonetize, Adware.Win32.InstallCore, PUA.Win32.OutBrowse
12.24%

Trend Micro House Call
Suspicious_GEN.F47V1120, Suspicious_GEN.F47V1122, TROJ_GEN.F0C2H00KM14, Suspicious_GEN.F47V1126, Suspicious_GEN.F47V1204
12.24%

Fortinet FortiGate
Riskware/InstallCore, Riskware/DownloadAdmin
10.20%

McAfee
Artemis!950E4FBCE159, Artemis!1A455B562FF2, Artemis!B4C52E5A26CA, Artemis!9F8DA35475A9, Adware-OutBrowse.c
10.20%

K7 AntiVirus
Unwanted-Program
10.20%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Downware
8.16%

The domain clkmon.com has been seen to resolve to the following 3 IP addresses.

108.168.157.203
108.168.157.203-static.reverse.softlayer.com
May 2, 2015

108.168.157.127
108.168.157.127-static.reverse.softlayer.com
August 1, 2014

108.168.157.82
108.168.157.82-static.reverse.softlayer.com
April 20, 2014

File downloads found at URLs served by clkmon.com.

1 / 68      (PUP)
http://clkmon.com/.../sa?cid=11021-200133803115000000&pid=11021&q=Pescador foi encontrado dentro de uma sucuri gigante ap?s desaparecer na beira d  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=NBALIVEPOP&pid=&q=stream  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=SUPER-CRSRDR-200118803117000000&pid=11021&q=UFJF – Universidade Federal de Juiz de Fora  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../banners?tid=NEMODIRECT&action=r  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=GBD5-1050058&pid=4082&q=chess,puzzles,Chess Puzzles,beginner,intermediate,advanced,smothered,mate,improv  (installer_java_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../banners?action=r&tid=APPSTARIFIC_DRKTLNK  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../banners?pid=15867&cid=SU1&action=r  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=GBD5-1049846&pid=4082&q=Taller De Pintura Para Preescolar - Ensayos - Creatividad1234  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=SUPER-CRSRDR-200141223918000000&pid=11021&q=18778764075  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=11021-200080523921000000&pid=11021&q=93  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=12060-1050125&q=Solicitud Empleo Banco Caribe, Bancos, Solicitudes de Empleo, Chiripas  (installer_java_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=KINOTEKA_1294_9&pid=&q=Luke Evans, Dominic Cooper, Sarah Gadon, dracula, drakula, vampir, untold, 2014  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=GBD5-3263570&pid=4082&q=Galactic Driver, Galactic Driver 2, Galactic Driver game  (installer_java_english.exe)

1 / 68      (Adware)
http://clkmon.com/adServe/.../ ESaD  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=SUPER-CRSRDR-200118804615000000&pid=11021&q=Disney Junior, Junior, Disney, Jake y Los Piratas del Pa?s de Nunca Jam?s, La Ca  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=11021-500217312721000000&pid=11021&q=webssearches  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=11021-200225512223000000&pid=11021&q=cvjnhtnm eybdth cnfhfz j,ofuf  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=GBD5-3263570&pid=4082&q=Windows Drivers, Windows XP Drivers, Windows Vista Drivers, Windows 7 Drivers, W  (installer_adobe_flash_player_english.exe)

1 / 68      (PUP)
http://clkmon.com/.../sa?cid=SUPER-CRSRDR-200124117915000000&pid=11021&q=Gebrauchtwagen, Neuwagen, Autos  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=SUPER-CRSRDR-200093406213000000&pid=11021&q=Inicio - Servicio de Rentas Internas del Ecuador  (installer_adobe_flash_player_english.exe)

1 / 68      (PUP)
http://clkmon.com/.../sa?cid=11021-200080512421000000&pid=11021&q=happy wheels, happywheels, game, full version, Jim Bonacci, totaljerkface, total  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=PINAYPOP&pid=&q=tambayan, pinoy tambayan, pinoytambayan, pinay tambayan, watch, live stream, pin  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../rdr.html?pid=Mk1Stream2u&cid=S2UTOPB  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=VID2MPPOPS&pid=&q=youtube, mp3, converter, video, conversion, download, free, online  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=11021-200217322223000000&pid=11021&q=????????????? ???????, ??????? ????????????? ???????, ??????? ???????, torrent,  (installer_adobe_flash_player_english.exe)

1 / 68      (PUP)
http://clkmon.com/.../rdr.html?pid=3883&cid=rjs67_0_CRW_AR&q=&q=Panico na Tv 2012 Pá Maluca MadPanda.TV  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=11021-200170018423000000&pid=11021&q=Laptop Notebook Telefoane Mobile Monitoare LCD Aparate Foto  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=SUPER-CRSRDR-200185908819000000&pid=11021&q=?????? ?????? | ??????? ?????  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=SUPER-CRSRDR-200193621020000000&pid=11021&q=???????????????????????, ???????????? Youtube, ????????????????????????, ??????  (player setup.exe)

1 / 68      (Adware)
http://clkmon.com/.../sa?cid=PINOYPOPAA&pid=&q=pinoy tv, pinoy tv online, pinoy tv show, pinoytv, pinoy network, filipino chann  (player setup.exe)

 
Latest 30 of 1,191 download URLs

The following 11 files have been seen to comunicate with clkmon.com in live environments.

TCP » 108.168.157.203:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.203:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.203:80
UCBrowser.exe (by UCWeb)

TCP » 108.168.157.203:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.203:80
wajaminternetenhancerapp.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 108.168.157.203:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 108.168.157.127:80
PastaLeadsService.exe (PastaLeadsService)

TCP » 108.168.157.127:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 108.168.157.127:80
OfferBoulevardW.exe (PennyBee)

TCP » 108.168.157.203:80
online-guardian-v2.0.9.exe

TCP » 108.168.157.82:80
Smartbar.exe (Smartbar)

November 1, 2014
www.clkmon.com

URL:
http://clkmon.com/

Title:
“Contact Us”

SSL certificate subject:
CN=clkmon.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)15, OU=GT24193224

SSL certificate issuer:
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US

Web server:
nginx

Facebook:
Likes:  6
Shares:  37
Comments:  3

Statistics above are for the previous month of April 2024.

clkads.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.