The domain dl2.iq5download.com registered by Private Registration was initially registered in October of 2015 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tampa, Florida within the United States which resides on the Voodoo.com, Inc network.
Registrant:
Private Registration
Registrar:
DROPCATCH.COM 656 LLC
Server location:
Florida, United States (US)
Create date:
Thursday, October 8, 2015
Expires date:
Saturday, October 8, 2016
Updated date:
Thursday, October 8, 2015
ASN:
AS19867 VOODOO1 - Voodoo.com, Inc,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.InstallX.J, PUP.Installer.W3i.R, PUP.Installer.W3i.S, PUP.Installer.W3i.M, PUP.Installer.W3i.O, PUP.InstallX.W3i.Installer (M)
100.00%
Dr.Web
Adware.W3i.32, Adware.W3i.9, Adware.W3i.4
92.00%
Malwarebytes
PUP.Optional.InstallIQ, PUP.Optional.InstallIQ.A
84.00%
VIPRE Antivirus
InstallIQ Installer, Trojan.Win32.Generic, Threat.4150696
84.00%
Avira AntiVirus
APPL/InstallIQ.Gen5, Adware/InstallC.B.1, PUA/InstallIQ.Gen5
84.00%
McAfee
Artemis!81728D8CF5BF, Artemis!FBBB700F3F06, Artemis!772480DBD233, Artemis!DC8AFAFFA4ED, Artemis!A180F19D2FCE, Artemis!F008A5420B73, Artemis!4916FFDCD3FB, Artemis!A3BBE52BB79C
80.00%
Trend Micro House Call
TROJ_GEN.F47V0406, TROJ_GEN.F47V0404, TROJ_GEN.R00JH0ALJ13, TROJ_GEN.R047H0AJL13, TROJ_INSTALLIQ_0000000.TOMA, TROJ_GEN.RFFFH0AIF13
80.00%
ESET NOD32
Win32/InstallIQ (variant), Win32/InstallIQ.A potentially unwanted (variant)
76.00%
Rising Antivirus
PE:PUF.InstallIQ!1.9E4F, PE:Trojan.Win32.Generic.137215B6!326243766
76.00%
Comodo Security
Application.Win32.InstallIQ.B, UnclassifiedMalware, Application.Win32.InstallIQ.NTZK
72.00%
AVG
MalSign.Generic, AdInstaller.InstallQ, InstallIQ.R, Adware InstallIQ.R
68.00%
K7 AntiVirus
Unwanted-Program
64.00%
Fortinet FortiGate
Adware/InstallIQ, Riskware/InstallIQ
64.00%
Sophos
InstallQ, InstallIQ
60.00%
G Data
Win32.Trojan.Agent.SNXWO6, Win32.Trojan.Agent.826A5G, Win32.Application.InstallIQ
56.00%
The domain dl2.iq5download.com has been seen to resolve to the following 5 IP addresses.
192.64.147.242.voodoo.com
December 7, 2015
File downloads found at URLs served by dl2.iq5download.com.
The following 122 files have been seen to comunicate with dl2.iq5download.com in live environments.
URL:
http://dl2.iq5download.com/
Google Analytics:
UA-48689684
Web server:
Apache/2.2.3 (CentOS) (PHP/5.3.8)
Related Domains
30 of 618 related domains