ip.installpack.net
WHOISGUARD, INC. (Proxy Registrant)
Domain Information
The domain ip.installpack.net is registered by proxy through ENOM, INC. and was originally registered in July of 2015. Currently this domain has been known to host various forms of malware. The hosted servers are located in Gunzenhausen, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrant:
WHOISGUARD, INC.
Server location:
Bayern, Germany (DE)
Create date:
Friday, July 3, 2015
Expires date:
Monday, July 3, 2017
Updated date:
Friday, July 3, 2015
ASN:
AS24940 HETZNER-AS Hetzner Online AG,DE
Scanner detections:
Malware distribution (100% detected)
Scan engine
Details
Detections
Reason Heuristics
(M), Adware.Downloader.Alexande.Installer.Meta (M)
100.00%
Rising Antivirus
JS:Trojan.DL-Generic/JS!1.A4A8 [F]
6.67%
The domain ip.installpack.net has been seen to resolve to the following 3 IP addresses.
85-10-200-21.clients.your-server.de
April 22, 2016
static.85-10-196-94.clients.your-server.de
April 22, 2016
static.158.40.63.178.clients.your-server.de
April 22, 2016
File downloads found at URLs served by ip.installpack.net.
The following 7 files have been seen to comunicate with ip.installpack.net in live environments.
URL:
http://ip.installpack.net/
Related Domains