Domain Robot Ltd.
The domain installdownloads.com registered by Domain Robot Ltd. was initially registered in December of 2013 through INTERNETWORX LTD. & CO. KG. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
INTERNETWORX LTD. & CO. KG
Arizona, United States (US)
Friday, December 20, 2013
Tuesday, December 20, 2016
Monday, December 21, 2015
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US
Detections (100% detected)
PUP.ClosedJointStockCompany.l, PUP.ClosedJointStockCompany.c, PUP.ClosedJointStockCompany.N, PUP.ClosedJointStockCompany.t, PUP.ClosedJointStockCompany.Z, PUP.ClosedJointStockCompany.z, PUP.ClosedJointStockCompany.x, PUP.ClosedJointStockCompany.q
Trend Micro House Call
a variant of c52467324d66deff5b76e9a737fa7a7f9019d878
The domain installdownloads.com has been seen to resolve to the following 4 IP addresses.
March 27, 2014
March 27, 2014
File downloads found at URLs served by installdownloads.com.
Latest 30 of 325 download URLs
“installdownloads.com has been registered”
SSL certificate subject:
CN=sni46990.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB