installled.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain installled.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Tuesday, February 04, 2014

Expires date:
Thursday, February 04, 2016

Updated date:
Friday, March 20, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ClientConnect.N, PUP.Conduit.N, PUP.Installer.GOLDBARVENTURES.U
100.00%

Malwarebytes
PUP.Optional.Conduit
80.00%

VIPRE Antivirus
Conduit
80.00%

Trend Micro House Call
TROJ_GEN.F47V0402, TROJ_GEN.F47V0325, TROJ_GEN.F47V0413
60.00%

ESET NOD32
Win32/Wajam (variant)
60.00%

McAfee
Artemis!21ED90B8BC39, Artemis!8643ECCBE95F
40.00%

McAfee Web Gateway
Artemis!21ED90B8BC39, Artemis!8643ECCBE95F
40.00%

Dr.Web
Adware.Conduit.6
20.00%

Baidu Antivirus
Trojan.Win32.Wajam
20.00%

Fortinet FortiGate
Riskware/Wajam
20.00%

Panda Antivirus
PUP/Conduit.A
20.00%

The domain installled.com has been seen to resolve to the following 3 IP addresses.

ip-184-168-221-96.ip.secureserver.net
May 16, 2016

January 4, 2016

208.43.1.98-static.reverse.softlayer.com
April 4, 2014

File downloads found at URLs served by installled.com.

1 / 68      (Adware)
http://installled.com/.../downloadsp.php  (imagesearch_ui_setup.exe)

4 / 68      (Adware)

4 / 68      (Adware)

11 / 68    (PUP)

7 / 68      (Adware)

The following 113 files have been seen to comunicate with installled.com in live environments.

 
Latest 20 of 122 files

URL:
http://installled.com/

Title:
“installled.com”

Web server:
Apache

Facebook:
Likes:  1,347
Comments:  2

Statistics above are for the previous month of October 2017.