The domain dlp.123mediaplayer.com is registered by proxy through NAME.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
Whois Privacy Protection Service, Inc.
Server location:
Oregon, United States (US)
Create date:
Tuesday, September 25, 2012
Expires date:
Sunday, September 25, 2016
Updated date:
Wednesday, March 18, 2015
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.PaymentsInteractiveSL.E, PUP.Installer.tuguusl.G, PUP.LunacomInteractive.E, PUP.Installer.PaymentsInteractivesl.E, PUP.PaymentsInteractivesl.E, PUP.PaymentsInteractiveSL.Z, PUP.PaymentsInteractiveSL.Y, PUP.Tuguu.LunacomInteractive.Bundler (M), PUP.Tuguu.LunacomI.Bundler (M), PUP.Tuguu.Payments.Bundler (M), PUP.Tuguu (M)
100.00%
K7 AntiVirus
Unwanted-Program , Trojan
82.00%
Dr.Web
Adware.Downware.2630, Trojan.Packed.24553, Trojan.DownLoader9.24409, Trojan.DownLoader9.15042
82.00%
VIPRE Antivirus
DomaIQ, Trojan.Win32.Generic, Threat.4783235, Threat.4150696
82.00%
Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.BundleInstaller.A, PUP.OptionalBundleInstaller.A, PUP.Optional.Domalq, PUP.Optional.DomalQ
80.00%
avast!
Win32:Installer-AH [PUP], Win32:Installer-U [PUP], Win32:DomaIQ-T [PUP], Win32:DomaIQ-AP [PUP], Win32:PUP-gen [PUP], DomaIQ-CC [PUP]
80.00%
Panda Antivirus
PUP/MultiToolbar.A
80.00%
Sophos
DomainIQ pay-per install, Generic PUA HO, Generic PUA BA, Generic PUA IC, Generic PUA GM, PUA.DomainIQ pay-per install, PUA 'DomainIQ pay-per install'
78.00%
Avira AntiVirus
APPL/DomaIQ.Gen, APPL/DomaIQ.Gen7
78.00%
Agnitum Outpost
PUA.DomaIQ
78.00%
AVG
DomaIQ, Adware DomaIQ.AF, Adware Skodna.Bundle_r.Z, Adware DomaIQ.BK, Adware Skodna.Bundle_r.W, Adware DomaIQ.Gen, Adware DomaIQ.BM
76.00%
Kaspersky
not-a-virus:AdWare.MSIL.DomaIQ, not-a-virus:Downloader.NSIS.Agent, not-a-virus:HEUR:AdWare.MSIL.DomaIQ
74.00%
Comodo Security
Application.Win32.DomaIQ.PUP, Application.Win32.DomaIQ.KR, UnclassifiedMalware, Application.Win32.DomaIQ.PUS, Application.Win32.DomaIQ.~LKO
74.00%
MicroWorld eScan
Gen:Variant.Adware.Graftor.139070, Dropped:Adware.Generic.902505, Adware.Generic.947844, Adware.Generic.914442, Adware.Generic.901697
68.00%
Bitdefender
Gen:Variant.Adware.Graftor.139070, Dropped:Adware.Generic.902505, Adware.Generic.947844, Adware.Generic.914442, Adware.Generic.901697
68.00%
The domain dlp.123mediaplayer.com has been seen to resolve to the following 7 IP addresses.
ec2-54-213-51-216.us-west-2.compute.amazonaws.com
June 9, 2014
ec2-54-200-194-173.us-west-2.compute.amazonaws.com
December 18, 2013
File downloads found at URLs served by dlp.123mediaplayer.com.
Latest 30 of 147 download URLs