The domain i1.installbox1.info is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
Domains By Proxy, LLC
Registrar:
GoDaddy.com, LLC
Server location:
Arizona, United States (US)
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
Scanner detections:
Detections (92% detected)
Scan engine
Details
Detections
Reason Heuristics
Unnamed.Threat.19, Unnamed.Threat.25, PUP.Optional.SubeoTech.R, Unnamed.Threat.50, PUP.Optional.SubeoTech.V, Adware.SInstaller.Q, PUP.PC Utilities.SubeoTech (M), Adware.Gadget.Installer (M), Adware.BetterSo.Installer (M)
72.00%
ESET NOD32
Win32/SProtector (variant), Win32/Adware.SpeedingUpMyPC (variant), Win32/InstalleRex, Win32/Toolbar.Alnaddy (variant), Win32/Toolbar.GadgetBox.C potentially unwanted (variant)
64.00%
MicroWorld eScan
Adware.Agent.NRJ, Adware.Generic.545897, Adware.Generic.551876, Win32/Adware.SpeedingUpMyPC.A, Trojan.Generic.KD.866500, Win32/SProtector.A, Win32/InstalleRex.H.Gen, Gen:Variant.Adware.BHO.Bprotector.1
60.00%
McAfee
Artemis!38F61D046E57, Artemis!2041AF161372, Artemis!0E73D05D7066, Artemis!1A6B07B7220F, RDN/Generic BackDoor!hk, Generic Downloader.x!gmq, Generic PUP
60.00%
Bkav FE
W32.Clod46e.Trojan, W32.Clod364.Trojan, W32.Clod005.Trojan, W32.Clod5ca.Trojan, HW32.FilDoer, W32.Clod33f.Trojan, W32.Clod7f1.Trojan, HW32.CDB
52.00%
Comodo Security
Application.Win32.SProtect.GT, Application.Win32.Bundledz.C, ApplicUnwnt, Application.Win32.InstalleRex.KG, Heur.Suspicious
52.00%
Rising Antivirus
PE:Trojan.InstallRex!1.9CB0, PE:Trojan.Win32.Generic.1462DD54!342023508, PE:PUF.SpeedingUpMyPC!1.9C66, PE:Trojan.Win32.Generic.14715E9A!342974106
52.00%
Malwarebytes
PUP.Optional.SProtect.A, PUP.Optional.OptimizePro.A, PUP.Optional.BetterSoft.A, Trojan.Agent.H, PUP.Optional.TSULoader.A
48.00%
Trend Micro House Call
TROJ_GEN.R0CBH0AHR13, ADW_SPROTECT, TROJ_GEN.F47V0501, TROJ_GEN.F47V0406, TROJ_GEN.R0CBH01G413, TROJ_SPNR.19D413, TROJ_GEN.F47V1127
44.00%
Dr.Web
Adware.BGuard.11, Adware.BGuard.12, Trojan.DownLoad3.17034, Adware.BGuard.9, Adware.Downware.448, Adware.Downware.851, Adware.Searcher.2436
44.00%
NANO AntiVirus
Riskware.Win32.Unwanted.bboiym, Trojan.Win32.Clack.ckpujc, Trojan.Win32.Kaidos.bjlsur, Trojan.Win32.Downware.btulkq, Trojan.Win32.Clack.burerr
44.00%
VIPRE Antivirus
Sprotector, Trojan.Win32.Generic
40.00%
Emsisoft Anti-Malware
Adware.Agent.NRJ, Adware.Generic.545897, Adware.Generic.551876, Adware.Win32.SpeedingUpMyPC.AMN, Trojan.Agent.AZPB, Trojan.Win32.SProtector.AMN
40.00%
Sophos
Generic PUA BD, BProtector, Generic PUA AE, Troj/Bdoor-BFO, Mal/Generic-S, Generic PUA GK
32.00%
avast!
NSIS:SProtector-A [PUP], Win32:InstalleRex-M [PUP]
28.00%
The domain i1.installbox1.info has been seen to resolve to the following 2 IP addresses.
ip-50-63-202-63.ip.secureserver.net
February 7, 2016
File downloads found at URLs served by i1.installbox1.info.
The following 9 files have been seen to comunicate with i1.installbox1.info in live environments.
URL:
http://i1.installbox1.info/
Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)
Statistics are for the previous month.
Related Domains