The domain dls.nicdls.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
SOLUCIONES CORPORATIVAS IP, SL
Northern Ireland, United Kingdom (GB)
Wednesday, July 25, 2012
Tuesday, July 25, 2017
Friday, July 24, 2015
Detections (93% detected)
PUP.Awimba.z, PUP.Awimba.W, PUP.TUGUUSL.X, PUP.Awimba.V, Threat.Tuguu.Bundler, PUP.Bundler.Awimba, PUP.Awimba.Bundler (M), PUP.LunacomInteractive.Installer (M), PUP.Tuguu.Awimba.Bundler (M), PUP.Tuguu.tuguusl.Bundler (M)
NSIS:DomaIQ-B [PUP], MSIL:DomaIQ-F [PUP], Win32:DomaIQ-E [PUP], Win32:DomaIQ-AI [PUP], MSIL:DomaIQ-C [PUP], Win32:PUP-gen [PUP], DomaIQ-R [PUP]
Adware.W3i.29, Trojan.Damaged.1, Adware.W3i.37, Threat.Undefined, Adware.W3i.20
DomaIQ, Trojan.Win32.Generic, Threat.4783235
APPL/DomaIQ.Gen, SPR/Tool.Downloader.QI.236, TR/Trash.Gen, APPL/DomaIQ.Gen7, APPL/DomaIQ.A.221, PUA/DomaIQ.Gen, TR/Patched.Ren.Gen
Artemis!DD46D89EA314, Artemis!5F12D9812BF9, Artemis!58D2E6180621, Artemis!5A154BB36B88, Artemis!19C2A66A893E, Artemis!5E77C530FA9A, Artemis!60F150CFDCE9, Artemis!39B54287E8DB, Artemis!3363A098371D, Artemis!1CD8F2C8E629, Artemis!57AB8883A7BD, Artemis!2BE7F29EB174, Artemis!B81601F88BEE, Artemis!840F8EF2AA81
Generic PUA PB, DomainIQ pay-per install, Generic PUA CF, Generic PUA EG, Generic PUA KF (PUA)
Win32/DomaIQ, Win32/DomaIQ.C potentially unwanted
UnclassifiedMalware, Application.Win32.Downloader.Agent.WA, ApplicUnwnt, Application.Win32.DomaIQ.T
Adware/DomaIQ.DT, Riskware/DomaIQ.C!tr, W32/DomaIQ.C, Adware/DomaIQ.C, W32/Crypt.AALD!tr, W32/Amonetize_A.gen
McAfee Web Gateway
Heuristic.BehavesLike.Win32.Suspicious-PKR.G, Heuristic.BehavesLike.Win32.Suspicious-PKR.S, RDN/Generic PUP.x!bp3, Artemis!F0B91B3CD5CB
PUP.Optional.BundleInstaller.A, Adware.DomaIQ, PUP.FakeFlash.Domaiq
NSIS.Application.DomaIQ, Adware.Downloadware.AK, NSIS.Application.DomalQ, Win32.Application.DomaIQ, Win32.Application.DomalQ
Win32.DomaIQ, AdWare.Win32.InstallIQ, Win32.SuspectCrc, Trojan-Dropper, APPL, AdWare.DomaIQ, Application.Downloader.QI, PUA.DomaIQ
AdInstaller.DomaIQ, Skodna.Bundle, MalSign.Skodna, AdInject.SouthStar, Generic, Suspicion: unknown virus
The domain dls.nicdls.com has been seen to resolve to the following 17 IP addresses.
May 2, 2015
July 7, 2014
March 15, 2014
File downloads found at URLs served by dls.nicdls.com.
Latest 30 of 326 download URLs
The following 137 files have been seen to comunicate with dls.nicdls.com in live environments.