The domain install.update95.com registered by China Capital Investment Limited was initially registered in May of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Incapsula Inc network.
Virginia, United States (US)
Friday, May 23, 2014
Monday, May 23, 2016
Monday, March 07, 2016
AS19551 INCAPSULA - Incapsula Inc,US
Detections (100% detected)
DownloadManager.AirSoftware.H, DownloadManager.AirSoftware.F, DownloadManager.Air Software, DownloadManager.Bundler.Air Software, PUP.Air Software.AirSoftware.Bundler (M), PUP.Air Software.AirSoftw.Bundler (M), PUP.Air Software (M)
K7 Gateway Antivirus
Adware , Unwanted-Program
Win32:Installer-L [PUP], PUP-gen [PUP], Win32:Adware-CAH [PUP]
AirInstaller, PUA 'AirInstaller'
Adware.Downware.963, Adware.Downware.897, Adware.Downware.1167, Trojan.SMSSend.4317, Adware.Downware.10718
Adware/Airinstall.J, ADWARE/Adware.Gen7, Adware/AirInst.1174
AdWare/AirAdInstaller.hm, AdWare/AirAdInstaller.w, AdWare/AirAdInstaller.an
Antiy Labs AVL
AhnLab V3 Security
Win32/AirAdInstaller.A potentially unwanted application
The domain install.update95.com has been seen to resolve to the following 6 IP addresses.
August 15, 2016
June 30, 2016
File downloads found at URLs served by install.update95.com.
The following 5 files have been seen to comunicate with install.update95.com in live environments.