home

www.dltourspackage.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
dltourspackage.com

Scanner detections:
Detections  (87% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.DarwenMa.Installer (M)
100.00%

The domain www.dltourspackage.com has been seen to resolve to the following 22 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 2, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 19, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 3, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
August 3, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 17, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 17, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 17, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 17, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 11, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 17, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 17, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 17, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 17, 2016

File downloads found at URLs served by www.dltourspackage.com.

0 / 68
http://www.dltourspackage.com/WVl6OTRQVGgzYzJKak0ycDJUQ1V5UW5SVWNEUTBRVzlPVlVWUFpEUjZVMnhvVVdFMmMyZFBTQ1V5UWpNMVRscFdUVEk0SlRORUptTTlSWHAwU1RWVWEzWXliekozU0VodkpUSkdRMlUyVEhKTFZVNWtkbGRNYjFwSFNDVXlSbHBoZUZWMVlXWjVjMVkzVjBsR1ZreEhkbGRTY2pOVlVIWjJOR05xZEc4eVJrZEtOSFF4V1RZMllWTlBNMlZRTm5FNFRuSmhhRGhXUXlVeVJtTjViV3BKVkU5Q01qZERkSEF3WkRGWVR5VXlRbmhSY3pBellUTkhjalpWVkV0dmNFcFdSaVprYjNkdWJHOWhaRUZ6UFdsVWRXNWxjeXRUWlhSMWNDNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ozZDNjdVpHOTNibXh2WVdSbWNtVmxOQzVqYjIwbE1rWnBkSFZ1WlhNbE1rWmtiM2R1Ykc5aFpDNXdhSEE9  (itunes setup.zip)

0 / 68
http://www.dltourspackage.com/WVl6OTRQVzg1TVRaSmFrOXdhbUpNUzJGM2JrMVZkVkZsSlRKQ1VFUldWVXMzZFhveVpEUm1TVFpWWWsweFJrNHpXU1V6UkNaalBVWjRkalZOUzJoMFVVWnBWakZpZVRkTGJYSmlkVGhLWkRSME1IRk5NMnRrYkRoM04zb2xNa0p6V0ZnNVJWSmtKVEpHY25SWmMxTmhUWFZhZDAxWlFXeExNMkpVUjJ0M2RWZG5KVEpDZUVkMVJrZ2xNa0p4YTBOSWNFVjFVWGhTWm1Wa1FXNU1PRlpKTkdFMVpEUnNOaVV5UmxWc1kyY3phVGhWZDJoQmRIcFBaSEZMY0RsdFRqRmlZaVprYjNkdWJHOWhaRUZ6UFVacGNtVm1iM2dyVTJWMGRYQXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHZDNkM0xtUnZkMjVzYjJGa1puSmxaVFF1WTI5dEpUSkdabWx5WldadmVDVXlSbVJ2ZDI1c2IyRmtMbkJvY0E9PQ==  (firefox setup.zip)

0 / 68
http://www.dltourspackage.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  (utorrent setup.zip)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=i7/gGBuuRbtpBjlhs1MMp6iecs922biH2F/cEWX4G34=&c=9lQZ2ZALLghVN63fdlOxcwHRqwIODx6lMlxJpvcVPV7cmJNBjmT5JTgF1rDN87QSBv3TEit5LTMZKTYeKSRBtgL48ZLdMNGoijyJCPVa hcCvWypJ8QJAhqPcLCaC vS&downloadAs=Wizard101 Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (67087bfd51383a454ee7fc506f4d6271)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=INirnQa iW9oXG3zeFWZ4zU2ltxcG0bNupBozgtFVDM=&c=vRn8Qsb4zJBUHadzfsvt5D J9dvne5pfPYoDxl5J/.../VnHkgLLXNXWK2HCWsBKWnPHULtlGfO8JC9y1DcyfmPimFdBLXZ52ShRAtZdRQjFvlNmU5Lma&downloadAs=iTunes Setup.exe  (9e151d94428a0f9f63505439f8d7101e)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=oDyu7nwsyf8CfyrZ8legPR42WmcWsMq 02Tefbqf2oU=&c=ANYC6K CV428DJrGqUpQX81OhzS5xEaD/ZM4jzxmWhQyg1aYH2qyDTNNxQZWmFuzy036erojOQnX/j2nDhxxEUHvzQO0Ws18Kyw9Y7AT5NWKjWPzQl8UyXmTv26rtErB&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (3aafab7551d493fd09f64fe894026568)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x= 3QVX80ZRvhtF0YAq d3TmCfhZFfYKyF7MHaqOoZAtA=&c=84 MilShSWW0KUZ4AtJM77ozyDG lrT3c6wZO3v6YoKr6tndCNKquBhTKiOBolyJLVLgzg9RjR/76KiQ515IJnQ4lOJAk5YDi2E5VofeFpcMjtJHxjoRmDq271ucZ2R1&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=H1qy/Jc3tnPgNjy4Zh0kduxDomRu1VlDSgU4vvdAMzU=&c=NZOPeJnHkaaxFZBibmYDdvIox18BPI9KInH5e1KaYbblKQ2lQueHnTgLC2gybzJ21vm48AlWYvK594kAS/lqVWna2xHBYqRZBd0pRQuNv/MV39eV8fkVZJAltVfXgkrL&downloadAs=WinRAR Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (7ce2d018025ba3adc16de71c1d18b9c6)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=MAjftOhLSmgcWV/kmgjH0eIGvhse92o6QT45H8jOXNU=&c=GRQ5IumQPkQxJ/Hk4fSJE/wf4YSgVgeYkb6fmsVn3y0g6W3cPLbuFEpCHciNEEIBdLKhK8TgrdjorllK2sovXy2yk/V6ODTjAEUvrJ9Lc2cExzqqq7b1xIAFg8zXMQFD&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=SqVRELp9b89mTPeAFH73Sicd UUC051HKlE4EsiHZ8c=&c=3IqI8rx8aeYruct2O1srI0w3qscJWpyKIUVo1TjExwYj08WuZbkfyfIoGf3EAe9VQGP/MHyk3skpPQfg3X/8XvXMc5geppw3w2RcTapej11ZjOyNXpJHR8PCHUwPpK0D&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (3aafab7551d493fd09f64fe894026568)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=GOZjOmE2SJqqRzSzFPf3na2ZLG12eclfklBeR4x/N3Q=&c=Z1CbEOGss9rbwvF0Um/Y1omxjT54AJ7GBfe grLo4g6jopkjwG5ktc379PvNnBzZRQDSCQuTvOQjgeFouYjXZrK2py9YvVEt1CiNFk1ez3/5Dp/APTzEgHJ8dFbUSZaS&downloadAs=Opera Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (c.exe)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=Wh70MQsdzFPFU5YmDuhD3zWicgHwys1QC1KhWuC6Eas=&c=1DCDeC9CpeE9zOw6oqX QGNIxO/daBSbxr6pnpkiK82LGsVY9mcHxv6zTr8lXhHSYhR7mNasFb5hV2hjFKRnhT50auDEbpf2ZW3kL6OjRo/7Drd6w4qONR4Xy2nWhbAJ&downloadAs=WinRAR Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (7ce2d018025ba3adc16de71c1d18b9c6)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=BNJDXw3YW4Jqv8CZT4sZhirCuMaGlKlVinW6MhsG0XE=&c=74mfT1d93MF2EcTGI35QAWRKbWDPEefWKLPgJG7wSgTJkKiO1naDtVwcWvZjwJE472Yx0d5nOz2CWjj4khWVvloN0JeRQvQApBm3Zwv RRVTmACMH/P2MF59W5LOWgRF&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (513c6c0e39afa76d9f7c94b31b6485d3)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=wpjUvDIXggd/LtZBq7b8z3kcX02 W v6nIogbxWw p8=&c=jMEfZgzgim60tzAnwLUu6bNyjj3ynIrZC0ve1XASwPZYWKshx8NLekj5zzWx7cJ4CszGY/KkcBmrZfcxhirLakgADkX10srr8g099sYkIGU7tLQXsH13rrHnKRjODTrC&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=QqB/cGssBV06Aqel5Zso9aHpDTCOk I6wzU4LEJKwDQ=&c=K6zUw1bexSb0Cf3fhRSGpKcsT1QGdAsqEGV2NrPj6c95rncBRzFSta1mT/xwd6n7l1tRpNlxBjKAnk8tFY43mQyEekBttBqToVPUyP29dWIKWekO6/9xhOkwbJ/tTSIc&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=uc5/CWLTt9GN6hqSihvAx3WxxpOpQGthRsoxlm53enE=&c=AIbWdrcMCe6BHZ T77yshvgl2A7u9FM1Hg b9lVTz9refdVaHc7dzVRAbcrfozR6ntajmoZKnHXHcFyRf5a2kYfUOMxiZZZAumgKsL5sGF 4IVn2CA4CAXzlL3JSVzQP&downloadAs=Opera Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (f3be92002637b335e540d63a9b7566b9)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=RueN1eOtiSOkhAFbp6JtO5sFrXgwldtzltCpgdfWR9E=&c=crzf0UNwhdhsHFd6N13q3J0Xg5 a9B6uzmYkNIHwSr0alRykoHcULDTS/wzhmBC ls3PH2SClQgovCbjlfhWUzxiPOU4htgIWUo4wfuwF5KkJvuyhx40X LHPc9H7Rgr&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.dltourspackage.com/.../YpmMcn Qa5O2esTTLzEowBAYhngT1Mf7zjjZTKt6B UXiIBZeV76hZYdkiy31qvmF5BL5mwwSC&downloadAs=uTorrent.exe  (f6f9afc66c38266d8dab7d4e4cd87398)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=e5isS2fn4YaO8y0zIPoPIc9p6P /m9OdUI7bQpJ/SkE=&c=g5gD8ubHC3GEh6TnBtW4LnwFYSAOe b8qI/Vl8maWPBJerr7UCETXXp6UPE/.../oyf&downloadAs=AdwCleaner Setup.exe  (ece1f74ea52254ff5061b83e54f54457)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=KPu2e19HoTixfq/76ima5FTlRwj2ea3iV9Sv /0BS1E=&c=ehZ2CdjyWGMX6XKxbMjkBQaA DNO0L8oO6UGFfYSEM N9c1VZX8IjfimFyCnZ2cjsg7dazOlFdnvpoyu8nfkTKUSZ8TMdhUl Xmk4w1QsYCaVJ/IVFI mfsF97KAdj8A&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (google_chrome_setup.exe)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=j3nQzkBgm MF3Pls2MpbJ6fKfqqwk6/qlIVFKN5lHZ8=&c=liaNxmUwtutwU93iXfDCN0CQ9Rbc57X2pLAUWKuGC1dLrEBVQJAbN5irHjw43uQaKE8pWtArQgYeNtqUadCHyWLqZVDfx38Ir4oXCBjr8hhgMCkKVoeR96MKmFxSqs68&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (bluestacks_app_player_setup.exe)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=A sJERCCzWSO6jHTEAyxOXoRdT0ZsBVgJ6x4EUpsvxA=&c=UhbcnUsBYl2 LAdT1sdLaSistSORAcOKldKF1y1F0T0TVzUB9qC6UoHMXRe3TEjRnr/RvGfun3U2tEwGGZasFmi2M24guiPqkNDGppWsi3s2lL8tkh3z XEO05znc6aM&downloadAs=Virtual DJ Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php  (2e304c14093970ca34aeb05152f2e118)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=0KEPbBUAVsA1aTokgE6MI4hJKSkkTEOiQUpc0lgzBhY=&c=X2Cldj9PntBW hAbQn6YN32AYLQI77rWQo8kwSqYIfw0YeM8xQKCkZGRlTaXPIfaLk5KhADJlrTeN0tnShyIS MbE7dY8q5oAvNObyrYVYhI58V0mpFn7j9Yvn662lh0&downloadAs=iTunes Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (itunes_setup.exe)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=K4aoAm8y/Es2O8Qa5SeXIS6/TLKfnRXHXZcOLSFTNe0=&c=3emWw/uA8jdakJCv9h9aRiKN/TczC7OsP//llXjWM72DwezJR1 mDKi2fXg5J0SfR8XSc3VijjxPYdr5KL8nl96OVapBknVfSaLq8qL6LcrST6 ydi0VACqyXMn gq Y&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (google_chrome_setup.exe)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=7EZq/G7S11cRUJMIQxg4K9wiMVA692BEfLoHX1oF Wc=&c=vxjqbGaz5NAwd1VDJ5GDSMnAgfL0DWwAN8eLMTVcyXGKn8R6KlbLObyMBq/5oEewjlEOMAZ2GA9cSJqM2Me1iwu4rYnYMBTHZSR 4ccWZC5HQe1tF9EDx3nhrFASalNS&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (google_chrome_setup.exe)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=rmmNajwLqX2sSh/S4cyWK2GSPdWqj6Iswb4TO6QqnX0=&c=/t qXXqmt9YYEbivtWGm8BHNmz/TKx60DVS0f5scsdn9ZOpUcfE4jyyi7MFDpfeZihJTunyVP5hQ E9eLxP5JhDUelFMsp8rh5k0kELBhEwPS5DyNI7yV6Uh9zDafuwu&downloadAs=Safari Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (c0c68d20113b351cfd4cc5bd95755175)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=yb9 Eiu2Yf7ltCsjt3sqvaNa2Cl0aCsxgPerJOCmLyI=&c=kAzx0NTzxVbwEscsimmDu9YcB8TAOTbGw nF6aNr8U/6Y5FQCvPWBcVkT5JOf/.../mK5RRM8&downloadAs=iTunes Setup.exe  (9e151d94428a0f9f63505439f8d7101e)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=I40h5UGUeZJAZstM5rlsRxnVSF9lp8LQhL2Mwg9op1I=&c=i184zAD6lIZPlM2EWnMvw87eY58TLkA1MyVq1WVlbp/jiIFyaICNT5jf5fMd/P7D/.../j4741gYVpyZIKW9W7Ks3RevB0GW&downloadAs=Firefox Setup.exe  (37234aa1531d93e3a8f9d657e4730545)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=VlMX//9NxYdh849LCwGM0UAoksJdloAfHkSPySEFXig=&c=dO/FgYGHai6bSglhXZARjg2aKxDfmXCkYKTSrd5yKjbWS7xUwyU1cqjbAsn8R229FmZTW9xPNoEIbXYH6N5PVtpOkd/OopkOgkfTBiie8WzqiKgusRE/zdDsztnuxyHS&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (firefox_setup.exe)

1 / 68      (Adware)
http://www.dltourspackage.com/c?x=s0UqIZN1kPuRPGzVddVbuSCn0txh0FKIXeCVBOJv0mI=&c=bBDLcsKfhdGT/.../v80JY0L7PqkGwHqVGAL2zt JU Sa3tSE3v3snB4mOp&downloadAs=iTunes Setup.exe  (9e151d94428a0f9f63505439f8d7101e)

 
Latest 30 of 36 download URLs

The following 50 files have been seen to comunicate with www.dltourspackage.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.