The domain dls.nicdls.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrant:
Only contact by email, all postal mail will be rejected
Registrar:
SOLUCIONES CORPORATIVAS IP, SL
Server location:
Northern Ireland, United Kingdom (GB)
Create date:
Wednesday, July 25, 2012
Expires date:
Tuesday, July 25, 2017
Updated date:
Friday, July 24, 2015
Scanner detections:
Detections (92% detected)
Scan engine
Details
Detections
Reason Heuristics
(M), PUP.Awimba.W, PUP.TUGUUSL.X, PUP.Awimba.n, PUP.Awimba.z, PUP.Tuguu.Bundler (M), PUP.Tuguu.Awimba.Bundler (M), PUP.Tuguu.Payments.Bundler (M), PUP.Tuguu.LunacomI.Bundler (M), PUP.Tuguu (M)
100.00%
Avira AntiVirus
W32/Mabezat, APPL/DomaIQ.Gen, APPL/DomaIQ.Gen7
27.27%
avast!
Win32:DomaIQ-E [PUP], NSIS:DomaIQ-C [PUP], MSIL:DomaIQ-F [PUP], Win32:DomaIQ-AI [PUP], MSIL:DomaIQ-B [PUP], NSIS:DomaIQ-B [PUP]
25.00%
Sophos
DomainIQ pay-per install, Generic PUA CF, Generic PUA EG
25.00%
Dr.Web
Adware.W3i.29
25.00%
VIPRE Antivirus
DomaIQ
25.00%
ESET NOD32
Win32/DomaIQ, Win32/DomaIQ.E potentially unwanted
25.00%
McAfee
Artemis!58D2E6180621, Artemis!9D0F30416339, Artemis!3B0F82080806, Artemis!E7719D97AAB3, Artemis!EACAED58FD9D, Artemis!1CD8F2C8E629, Artemis!FC8DB175886A, Artemis!0854BD618ACC, Artemis!1BF8E697E652
22.73%
Fortinet FortiGate
Riskware/DomaIQ.C!tr, W32/Crypt.AALD!tr, W32/DomaIQ.C, Adware/DomaIQ.DT
22.73%
Malwarebytes
Adware.DomaIQ, PUP.FakeFlash.Domaiq
20.45%
Comodo Security
Application.Win32.Downloader.Agent.WA, ApplicUnwnt, UnclassifiedMalware
20.45%
AVG
MalSign.Skodna, Skodna.Bundle, AdInstaller.DomaIQ, Agent.L
20.45%
Trend Micro House Call
ADW_DOMA, TROJ_GE.43A281A2, ADW_DOMAIQ, TROJ_GEN.R0CBOH0IK13, TROJ_GE.9D9B8DEC, TROJ_GEN.R0CBB01FM13, TROJ_GEN.R0CBH07JO13
20.45%
K7 AntiVirus
Trojan , Unwanted-Program
18.18%
G Data
NSIS.Application.DomalQ, Adware.Downloadware.AK, Win32.Application.DomaIQ, Adware.Generic.586144, NSIS.Application.DomaIQ
18.18%
The domain dls.nicdls.com has been seen to resolve to the following 17 IP addresses.
unallocated.barefruit.co.uk
May 2, 2015
ec2-54-186-120-201.us-west-2.compute.amazonaws.com
July 7, 2014
ec2-54-186-7-75.us-west-2.compute.amazonaws.com
March 15, 2014
File downloads found at URLs served by dls.nicdls.com.
Latest 30 of 447 download URLs
The following 230 files have been seen to comunicate with dls.nicdls.com in live environments.