dl2.vid1installer.com

NATIVEX HOLDINGS, LLC

Domain Information

The domain dl2.vid1installer.com registered by NATIVEX HOLDINGS, LLC was initially registered in January of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Limelight Networks, Inc. network.
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Wednesday, January 15, 2014

Expires date:
Thursday, January 15, 2015

Updated date:
Wednesday, August 20, 2014

ASN:
AS22822 LLNW-AS Limelight Networks, INC. proxy AS object

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.InstallX.H, PUP.InstallX.SafeInst.Installer (M)
100.00%

McAfee
PUP-FPB
50.00%

Malwarebytes
PUP.Optional.SafeInstall.A
50.00%

VIPRE Antivirus
Threat.4783689
50.00%

K7 AntiVirus
Adware
50.00%

NANO AntiVirus
Riskware.Win32.Searcher.csnymk
50.00%

Kaspersky
not-a-virus:Downloader.NSIS.Agent
50.00%

Sophos
DomainIQ pay-per install
50.00%

Comodo Security
Application.Win32.InstallIQ.B
50.00%

Dr.Web
Adware.Downware.2512
50.00%

Baidu Antivirus
Hacktool.Win32.Downloader
50.00%

ESET NOD32
Win32/InstallIQ (variant)
50.00%

IKARUS anti.virus
PUA.InstallIQ
50.00%

AVG
Win32/Heur
50.00%

Panda Antivirus
Trj/Genetic.gen
50.00%

The domain dl2.vid1installer.com has been seen to resolve to the following 2 IP addresses.

cdn-208-111-160-6.iad.llnw.net
September 15, 2014

cdn-208-111-161-254.iad.llnw.net
September 15, 2014

File downloads found at URLs served by dl2.vid1installer.com.

1 / 68      (Adware)

23 / 68    (Adware)

The following 85 files have been seen to comunicate with dl2.vid1installer.com in live environments.

 
Latest 20 of 135 files

URL:
http://dl2.vid1installer.com/

Title:
“Please Wait - You are being redirected.”

Web server:
Microsoft-IIS/7.5 (ASP.NET)