dls.nicdls.com

Only contact by email, all postal mail will be rejected  (Proxy Registrant)

Domain Information

The domain dls.nicdls.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
SOLUCIONES CORPORATIVAS IP, SL

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Wednesday, July 25, 2012

Expires date:
Tuesday, July 25, 2017

Updated date:
Friday, July 24, 2015

Root domain:

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.Awimba.W, PUP.TUGUUSL.X, PUP.Awimba.n, PUP.Awimba.z, PUP.Tuguu.Bundler (M), PUP.Tuguu.Awimba.Bundler (M), PUP.Tuguu.Payments.Bundler (M), PUP.Tuguu.LunacomI.Bundler (M), PUP.Tuguu (M)
100.00%

Avira AntiVirus
W32/Mabezat, APPL/DomaIQ.Gen, APPL/DomaIQ.Gen7
27.27%

avast!
Win32:DomaIQ-E [PUP], NSIS:DomaIQ-C [PUP], MSIL:DomaIQ-F [PUP], Win32:DomaIQ-AI [PUP], MSIL:DomaIQ-B [PUP], NSIS:DomaIQ-B [PUP]
25.00%

Sophos
DomainIQ pay-per install, Generic PUA CF, Generic PUA EG
25.00%

Dr.Web
Adware.W3i.29
25.00%

VIPRE Antivirus
DomaIQ
25.00%

ESET NOD32
Win32/DomaIQ, Win32/DomaIQ.E potentially unwanted
25.00%

McAfee
Artemis!58D2E6180621, Artemis!9D0F30416339, Artemis!3B0F82080806, Artemis!E7719D97AAB3, Artemis!EACAED58FD9D, Artemis!1CD8F2C8E629, Artemis!FC8DB175886A, Artemis!0854BD618ACC, Artemis!1BF8E697E652
22.73%

Fortinet FortiGate
Riskware/DomaIQ.C!tr, W32/Crypt.AALD!tr, W32/DomaIQ.C, Adware/DomaIQ.DT
22.73%

Malwarebytes
Adware.DomaIQ, PUP.FakeFlash.Domaiq
20.45%

Comodo Security
Application.Win32.Downloader.Agent.WA, ApplicUnwnt, UnclassifiedMalware
20.45%

AVG
MalSign.Skodna, Skodna.Bundle, AdInstaller.DomaIQ, Agent.L
20.45%

Trend Micro House Call
ADW_DOMA, TROJ_GE.43A281A2, ADW_DOMAIQ, TROJ_GEN.R0CBOH0IK13, TROJ_GE.9D9B8DEC, TROJ_GEN.R0CBB01FM13, TROJ_GEN.R0CBH07JO13
20.45%

K7 AntiVirus
Trojan , Unwanted-Program
18.18%

G Data
NSIS.Application.DomalQ, Adware.Downloadware.AK, Win32.Application.DomaIQ, Adware.Generic.586144, NSIS.Application.DomaIQ
18.18%

The domain dls.nicdls.com has been seen to resolve to the following 17 IP addresses.

unallocated.barefruit.co.uk
May 2, 2015

ec2-54-186-120-201.us-west-2.compute.amazonaws.com
July 7, 2014

May 31, 2014

May 7, 2014

May 1, 2014

May 1, 2014

May 1, 2014

April 30, 2014

April 30, 2014

April 11, 2014

ec2-54-186-7-75.us-west-2.compute.amazonaws.com
March 15, 2014

February 27, 2014

February 16, 2014

February 6, 2014

February 5, 2014

December 27, 2013

November 19, 2013

File downloads found at URLs served by dls.nicdls.com.

0 / 68

0 / 68

0 / 68

0 / 68

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://dls.nicdls.com/n.php  (letter chase typing tutor.exe)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

18 / 68    (Adware)
http://dls.nicdls.com/p/58/FlashPlayer/316/.../V.f4a452c8c5b771759aac484d5d3df8e3  (flashplayer_v.99923e090b6ece24489bb3d285f50443.exe)

21 / 68    (Adware)

23 / 68    (Adware)

1 / 68      (Adware)

17 / 68    (Adware)

21 / 68    (Adware)

1 / 68      (Adware)

23 / 68    (Adware)

20 / 68    (Adware)
http://dls.nicdls.com/p/84/FlashPlayer/202/.../transaction_id=102c45e9c3dde5dba20502357d2a6c  (flashplayer_transaction_id=102951fa803fcf4ef40e5cd2d1283d.exe)

1 / 68      (Adware)
http://dls.nicdls.com/p/84/FlashPlayer/202/.../transaction_id=10268e2842557b92a9d8da7262e0be  (flashplayer_transaction_id=102375bacaf880cd611dbf717bb438.exe)

1 / 68      (Adware)
http://dls.nicdls.com/p/84/FlashPlayer/202/.../transaction_id=1028bf71cd89aaec5ed2e30c84816c  (flashplayer_transaction_id=1028f0cdc8cecd133835efaa8cc76a.exe)

1 / 68      (Adware)
http://dls.nicdls.com/p/84/flash-player/202/.../transaction_id=1028bf71cd89aaec5ed2e30c84816c  (flash-player_transaction_id=102764fe153351b8e0e89ce921bcf7.exe)

19 / 68    (Adware)
http://dls.nicdls.com/p/84/FlashPlayer/202/.../transaction_id=102356ecfba8917c00c696fb3b77f0  (flashplayer_transaction_id=102d00337114bef25fc3ac363a5cb5.exe)

1 / 68      (Adware)

1 / 68      (Adware)

 
Latest 30 of 447 download URLs

The following 230 files have been seen to comunicate with dls.nicdls.com in live environments.

 
Latest 20 of 230 files