dlp.123mediaplayer.com

Whois Privacy Protection Service, Inc.  (Proxy Registrant)

Domain Information

The domain dlp.123mediaplayer.com is registered by proxy through NAME.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
NAME.COM, INC.

Server location:
Oregon, United States (US)

Create date:
Tuesday, September 25, 2012

Expires date:
Sunday, September 25, 2016

Updated date:
Wednesday, March 18, 2015

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PaymentsInteractiveSL.E, PUP.Installer.tuguusl.G, PUP.LunacomInteractive.E, PUP.Installer.PaymentsInteractivesl.E, PUP.PaymentsInteractivesl.E, PUP.PaymentsInteractiveSL.Z, PUP.PaymentsInteractiveSL.Y, PUP.Tuguu.LunacomInteractive.Bundler (M), PUP.Tuguu.LunacomI.Bundler (M), PUP.Tuguu.Payments.Bundler (M), PUP.Tuguu (M)
100.00%

K7 AntiVirus
Unwanted-Program , Trojan
82.00%

K7 Gateway Antivirus
Unwanted-Program , Trojan
82.00%

Dr.Web
Adware.Downware.2630, Trojan.Packed.24553, Trojan.DownLoader9.24409, Trojan.DownLoader9.15042
82.00%

VIPRE Antivirus
DomaIQ, Trojan.Win32.Generic, Threat.4783235, Threat.4150696
82.00%

Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.BundleInstaller.A, PUP.OptionalBundleInstaller.A, PUP.Optional.Domalq, PUP.Optional.DomalQ
80.00%

avast!
Win32:Installer-AH [PUP], Win32:Installer-U [PUP], Win32:DomaIQ-T [PUP], Win32:DomaIQ-AP [PUP], Win32:PUP-gen [PUP], DomaIQ-CC [PUP]
80.00%

Panda Antivirus
PUP/MultiToolbar.A
80.00%

Sophos
DomainIQ pay-per install, Generic PUA HO, Generic PUA BA, Generic PUA IC, Generic PUA GM, PUA.DomainIQ pay-per install, PUA 'DomainIQ pay-per install'
78.00%

Avira AntiVirus
APPL/DomaIQ.Gen, APPL/DomaIQ.Gen7
78.00%

Agnitum Outpost
PUA.DomaIQ
78.00%

AVG
DomaIQ, Adware DomaIQ.AF, Adware Skodna.Bundle_r.Z, Adware DomaIQ.BK, Adware Skodna.Bundle_r.W, Adware DomaIQ.Gen, Adware DomaIQ.BM
76.00%

Kaspersky
not-a-virus:AdWare.MSIL.DomaIQ, not-a-virus:Downloader.NSIS.Agent, not-a-virus:HEUR:AdWare.MSIL.DomaIQ
74.00%

Comodo Security
Application.Win32.DomaIQ.PUP, Application.Win32.DomaIQ.KR, UnclassifiedMalware, Application.Win32.DomaIQ.PUS, Application.Win32.DomaIQ.~LKO
74.00%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud), VIRUS_UNKNOWN
74.00%

The domain dlp.123mediaplayer.com has been seen to resolve to the following 7 IP addresses.

September 3, 2014

August 17, 2014

August 16, 2014

August 1, 2014

July 23, 2014

ec2-54-213-51-216.us-west-2.compute.amazonaws.com
June 9, 2014

ec2-54-200-194-173.us-west-2.compute.amazonaws.com
December 18, 2013

File downloads found at URLs served by dlp.123mediaplayer.com.

1 / 68      (Adware)
http://dlp.123mediaplayer.com/o.php  (flash player installation.exe)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

 
Latest 30 of 147 download URLs