i1.nicedataget.com

Corp New Ventures Services

Domain Information

The domain i1.nicedataget.com registered by Corp New Ventures Services was initially registered in May of 2015 through NAMEVOLCANO.COM LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Road Town, British Virgin Islands within VG which resides on the Confluence Networks Inc network.
Registrar:
NAMEVOLCANO.COM LLC

Server location:
British Virgin Islands, VG (VG)

Create date:
Saturday, May 16, 2015

Expires date:
Monday, May 16, 2016

Updated date:
Saturday, May 23, 2015

ASN:
AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc,VG

Root domain:

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Bkav FE
W32.Clod005.Trojan, HW32.Stranacty
66.67%

McAfee
Artemis!2041AF161372, Generic-FAOD!23912DF27A61
66.67%

Kaspersky
not-a-virus:HEUR:Downloader.Win32.AdLoad, Trojan.Win32.Agent
66.67%

Comodo Security
Application.Win32.Bundledz.C, Application.Win32.Preload.A
66.67%

AhnLab V3 Security
Adware/Win32.StartPage, Trojan/Win32.generic
66.67%

Vba32 AntiVirus
Downware.TSU, SScope.Malware-Cryptor.SProtector
66.67%

Fortinet FortiGate
Riskware/InstalleRex, W32/Agent.AEAIQ!tr
66.67%

MicroWorld eScan
Gen:Variant.Dropper.99, Trojan.GenericKD.1720404
66.67%

Bitdefender
Gen:Variant.Dropper.99, Trojan.GenericKD.1720404
66.67%

Lavasoft Ad-Aware
Gen:Variant.Dropper.99, Trojan.GenericKD.1720404
66.67%

Avira AntiVirus
TR/Graftor.woienwqm, TR/Crypt.ZPACK.82722
66.67%

Emsisoft Anti-Malware
Gen:Variant.Dropper.99, Trojan.GenericKD.1720404
66.67%

G Data
Gen:Variant.Dropper.99, Trojan.GenericKD.1720404
66.67%

Rising Antivirus
PE:Trojan.InstallRex!1.9CB0
33.33%

Malwarebytes
Trojan.SProtector
33.33%

The domain i1.nicedataget.com has been seen to resolve to the following IP address.

February 1, 2016

File downloads found at URLs served by i1.nicedataget.com.

6 / 68      (inconclusive)

8 / 68      (Adware)
http://i1.nicedataget.com/.../uninstaller.exe  (2041af161372f15b11295c48411ab2d2)

26 / 68    (PUP)

The following 2 files have been seen to comunicate with i1.nicedataget.com in live environments.

URL:
http://i1.nicedataget.com/

Web server:
Apache