dls.nicdls.com

Only contact by email, all postal mail will be rejected  (Proxy Registrant)

Domain Information

The domain dls.nicdls.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Remove Malware from dls.nicdls.com - Powered by Reason Core Security
Registrar:
SOLUCIONES CORPORATIVAS IP, SL

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Wednesday, July 25, 2012

Expires date:
Tuesday, July 25, 2017

Updated date:
Friday, July 24, 2015

Root domain:

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Awimba.z, PUP.Awimba.W, PUP.TUGUUSL.X, PUP.Awimba.V, Threat.Tuguu.Bundler, PUP.Bundler.Awimba, PUP.Awimba.Bundler (M), PUP.LunacomInteractive.Installer (M), PUP.Tuguu.Awimba.Bundler (M), PUP.Tuguu.tuguusl.Bundler (M)
94.59%

avast!
NSIS:DomaIQ-B [PUP], MSIL:DomaIQ-F [PUP], Win32:DomaIQ-E [PUP], Win32:DomaIQ-AI [PUP], MSIL:DomaIQ-C [PUP], Win32:PUP-gen [PUP], DomaIQ-R [PUP]
78.38%

Dr.Web
Adware.W3i.29, Trojan.Damaged.1, Adware.W3i.37, Threat.Undefined, Adware.W3i.20
78.38%

VIPRE Antivirus
DomaIQ, Trojan.Win32.Generic, Threat.4783235
78.38%

Avira AntiVirus
APPL/DomaIQ.Gen, SPR/Tool.Downloader.QI.236, TR/Trash.Gen, APPL/DomaIQ.Gen7, APPL/DomaIQ.A.221, PUA/DomaIQ.Gen, TR/Patched.Ren.Gen
75.68%

McAfee
Artemis!DD46D89EA314, Artemis!5F12D9812BF9, Artemis!58D2E6180621, Artemis!5A154BB36B88, Artemis!19C2A66A893E, Artemis!5E77C530FA9A, Artemis!60F150CFDCE9, Artemis!39B54287E8DB, Artemis!3363A098371D, Artemis!1CD8F2C8E629, Artemis!57AB8883A7BD, Artemis!2BE7F29EB174, Artemis!B81601F88BEE, Artemis!840F8EF2AA81
72.97%

Sophos
Generic PUA PB, DomainIQ pay-per install, Generic PUA CF, Generic PUA EG, Generic PUA KF (PUA)
72.97%

ESET NOD32
Win32/DomaIQ, Win32/DomaIQ.C potentially unwanted
72.97%

Comodo Security
UnclassifiedMalware, Application.Win32.Downloader.Agent.WA, ApplicUnwnt, Application.Win32.DomaIQ.T
70.27%

Fortinet FortiGate
Adware/DomaIQ.DT, Riskware/DomaIQ.C!tr, W32/DomaIQ.C, Adware/DomaIQ.C, W32/Crypt.AALD!tr, W32/Amonetize_A.gen
70.27%

McAfee Web Gateway
Heuristic.BehavesLike.Win32.Suspicious-PKR.G, Heuristic.BehavesLike.Win32.Suspicious-PKR.S, RDN/Generic PUP.x!bp3, Artemis!F0B91B3CD5CB
67.57%

Malwarebytes
PUP.Optional.BundleInstaller.A, Adware.DomaIQ, PUP.FakeFlash.Domaiq
64.86%

G Data
NSIS.Application.DomaIQ, Adware.Downloadware.AK, NSIS.Application.DomalQ, Win32.Application.DomaIQ, Win32.Application.DomalQ
64.86%

IKARUS anti.virus
Win32.DomaIQ, AdWare.Win32.InstallIQ, Win32.SuspectCrc, Trojan-Dropper, APPL, AdWare.DomaIQ, Application.Downloader.QI, PUA.DomaIQ
64.86%

AVG
AdInstaller.DomaIQ, Skodna.Bundle, MalSign.Skodna, AdInject.SouthStar, Generic, Suspicion: unknown virus
62.16%

The domain dls.nicdls.com has been seen to resolve to the following 17 IP addresses.

unallocated.barefruit.co.uk
May 2, 2015

ec2-54-186-120-201.us-west-2.compute.amazonaws.com
July 7, 2014

May 31, 2014

May 7, 2014

May 1, 2014

May 1, 2014

May 1, 2014

April 30, 2014

April 30, 2014

April 11, 2014

ec2-54-186-7-75.us-west-2.compute.amazonaws.com
March 15, 2014

February 27, 2014

February 16, 2014

February 6, 2014

February 5, 2014

December 27, 2013

November 19, 2013

File downloads found at URLs served by dls.nicdls.com.

1 / 68      (Adware)

1 / 68      (Adware)

23 / 68    (Adware)

37 / 68    (Adware)

26 / 68    (Adware)

1 / 68      (Adware)
http://dls.nicdls.com/n.php  (video convert master.exe)

1 / 68      (Adware)

23 / 68    (Adware)
http://dls.nicdls.com/p/84/FlashPlayer/202/.../transaction_id=102f8acfc21e3dd2f8c26455936952  (flashplayer_transaction_id=1028337f93f99effaeb82686ba5a12.exe)

30 / 68    (Adware)

30 / 68    (Adware)

33 / 68    (Adware)

26 / 68    (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

26 / 68    (Adware)

1 / 68      (Adware)

14 / 68    (PUP)

13 / 68    (Adware)

0 / 68
http://dls.nicdls.com/p/58/FlashPlayer/316/.../V.da451f898e3bb267040004cad4a8c7bd  (flashplayer_v.da451f898e3bb267040004cad4a8c7bd.exe)

0 / 68

19 / 68    (Adware)

19 / 68    (Adware)

23 / 68    (Adware)

17 / 68    (PUP)

26 / 68    (Adware)

26 / 68    (Adware)

35 / 68    (Adware)

36 / 68    (Adware)

15 / 68    (Adware)

16 / 68    (Adware)
http://dls.nicdls.com/p/84/FlashPlayer/202/.../transaction_id=1025e32d5fc84c54a5aa3b7480a4e8  (flashplayer_transaction_id=10239ae05b69f1200b3fae932dc67c.exe)

 
Latest 30 of 326 download URLs

The following 137 files have been seen to comunicate with dls.nicdls.com in live environments.

 
Latest 20 of 137 files

Remove Malware from dls.nicdls.com - Powered by Reason Core Security