The domain dl2.vic3installer.com registered by NATIVEX HOLDINGS, LLC was initially registered in January of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Limelight Networks, Inc. network.
Registrant:
NATIVEX HOLDINGS, LLC
Server location:
Virginia, United States (US)
Create date:
Wednesday, January 15, 2014
Expires date:
Thursday, January 15, 2015
Updated date:
Wednesday, August 20, 2014
ASN:
AS22822 LLNW-AS Limelight Networks, INC. proxy AS object
Scanner detections:
Detections (95% detected)
Scan engine
Details
Detections
MicroWorld eScan
Gen:Variant.Application.Bundler.Graftor.155902
95.00%
Malwarebytes
PUP.Optional.SafeInstall.A
95.00%
VIPRE Antivirus
InstallIQ Installer, Threat.4783689
95.00%
K7 AntiVirus
Unwanted-Program , Adware
95.00%
Kaspersky
not-a-virus:Downloader.NSIS.Agent
95.00%
Bitdefender
Gen:Variant.Application.Bundler.Graftor.155902
95.00%
NANO AntiVirus
Riskware.Win32.Searcher.csnymk
95.00%
Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Graftor.155902
95.00%
Sophos
DomainIQ pay-per install, InstallQ
95.00%
Comodo Security
Application.Win32.InstallIQ.B
95.00%
F-Secure
Gen:Variant.Application.Bundler
95.00%
G Data
Gen:Variant.Application.Bundler.Graftor.155902
95.00%
IKARUS anti.virus
PUA.InstallIQ
95.00%
AVG
Generic_r, Adware Generic_r.NT
95.00%
Reason Heuristics
PUP.Installer.InstallX.H, PUP.Installer.InstallX.K, PUP.Installer.InstallX.E, PUP.Installer.InstallX.L, PUP.Installer.InstallX.J, PUP.InstallX.SafeInstall.Installer (M)
95.00%
The domain dl2.vic3installer.com has been seen to resolve to the following 2 IP addresses.
cdn-208-111-160-6.iad.llnw.net
September 30, 2014
cdn-208-111-161-254.iad.llnw.net
September 30, 2014
File downloads found at URLs served by dl2.vic3installer.com.
The following 85 files have been seen to comunicate with dl2.vic3installer.com in live environments.
URL:
http://dl2.vic3installer.com/
Title:
“Please Wait - You are being redirected.”
Web server:
Microsoft-IIS/7.5 (ASP.NET)