doncmling.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain doncmling.com is registered by proxy through ENOM, INC. and was originally registered in March of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Wilmington, Delaware within the United States which resides on the Black Lotus Communications network.
Registrar:
ENOM, INC.

Server location:
Delaware, United States (US)

Create date:
Saturday, March 22, 2014

Expires date:
Sunday, March 22, 2015

Updated date:
Saturday, March 22, 2014

ASN:
AS32421 BLCC - Black Lotus Communications

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PaymentsInteractiveSL.E, PUP.Tuguu, PUP.Tuguu.Payments.Bundler (M)
100.00%

Dr.Web
Trojan.DownLoader9.51748
60.00%

Microsoft Security Essentials
Threat.Undefined
60.00%

avast!
PUP-gen [PUP], Win32:DomaIQ-T [PUP]
60.00%

AVG
Adware DomaIQ.BW
60.00%

VIPRE Antivirus
Threat.4783235, DomaIQ, Threat.4150696
60.00%

Clam AntiVirus
Win.Adware.Domaiq-31, Win.Adware.Agent-10731
60.00%

MicroWorld eScan
Dropped:Adware.Bundler.Offer.A
60.00%

nProtect
Trojan-Clicker/W32.Lollipop.517656, Trojan-Clicker/W32.Lollipop.517512
60.00%

McAfee
CryptDomaIQ, Program.CryptDomaIQ
60.00%

Malwarebytes
PUP.Optional.DomalQ
60.00%

Zillya! Antivirus
Adware.DomaIQ.Win32.189
60.00%

K7 AntiVirus
Unwanted-Program , Trojan
60.00%

Agnitum Outpost
PUA.DomaIQ
60.00%

F-Prot
W32/DomaIQ.C.gen
60.00%

The domain doncmling.com has been seen to resolve to the following IP address.

July 10, 2014

File downloads found at URLs served by doncmling.com.

1 / 68      (Adware)
http://doncmling.com/.../Java.exe  (eb3215f4b62f1eff35ca11cc7dce474c)

1 / 68      (Adware)
http://doncmling.com/.../Java.exe  (e25ca76cec32697b168fb8ce6c57ce6a)

32 / 68    (Adware)
http://doncmling.com/.../Java.exe  (20f556114dfdecb85ee42c9cff2a4ea4)

32 / 68    (Adware)
http://doncmling.com/.../Java.exe  (b652b6905c20043ce6fee065087e21d2)

29 / 68    (Adware)
http://doncmling.com/.../Java.exe  (bfc77216d45cb74004890319608b15e9)

URL:
http://doncmling.com/

Google Analytics:
UA-69192

Title:
“doncmling.com - Registered at Namecheap.com”

Web server:
nginx (ASP.NET,ARR/2.5,ASP.NET) (Version: 4.0.30319)

30 of 36 related domains