dlp.updateplugins.com

Only contact by email, all postal mail will be rejected  (Proxy Registrant)

Domain Information

The domain dlp.updateplugins.com is registered by proxy through SOLUCIONES CORPORATIVAS IP,SLU and was originally registered in May of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
SOLUCIONES CORPORATIVAS IP,SLU

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Wednesday, May 29, 2013

Expires date:
Friday, May 29, 2015

Updated date:
Friday, May 9, 2014

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.Tuguu, PUP.Tuguu.Bundler (M), PUP.Tuguu.Awimba.Bundler (M)
100.00%

Emsisoft Anti-Malware
Application.Bundler.DomaIQ.Q
33.33%

ESET NOD32
Win32/DomaIQ.T potentially unwanted application
33.33%

VIPRE Antivirus
Threat.4783235
33.33%

F-Secure
Riskware.Application.Bundler.DomaIQ
33.33%

Lavasoft Ad-Aware
Application.Bundler.DomaIQ.Q
33.33%

Norman
Application.Bundler.DomaIQ.Q
33.33%

Sophos
PUA 'DomainIQ pay-per install'
33.33%

MicroWorld eScan
Application.Bundler.DomaIQ.Q
33.33%

nProtect
Trojan-Clicker/W32.DomaIQ.543080
33.33%

Malwarebytes
PUP.Adware.DomaIQ
33.33%

SUPERAntiSpyware
Trojan.Agent/Gen-DomainIQ
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

Agnitum Outpost
PUA.DomaIQ
33.33%

Bitdefender
Application.Bundler.DomaIQ.Q
33.33%

The domain dlp.updateplugins.com has been seen to resolve to the following IP address.

unallocated.barefruit.co.uk
May 5, 2015

File downloads found at URLs served by dlp.updateplugins.com.

1 / 68      (Adware)

1 / 68      (Adware)

27 / 68    (Adware)

The following 230 files have been seen to comunicate with dlp.updateplugins.com in live environments.

 
Latest 20 of 230 files

URL:
http://dlp.updateplugins.com/

Web server:
nginx/1.0.15