The domain cnt1.express-files.com registered by Faglaro Enterprises Limited was initially registered in December of 2011 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the FDCservers.net network.
Registrant:
Faglaro Enterprises Limited
Registrar:
INTERNET DOMAIN SERVICE BS CORP
Server location:
Illinois, United States (US)
Create date:
Tuesday, December 6, 2011
Expires date:
Tuesday, December 6, 2016
Updated date:
Saturday, December 12, 2015
ASN:
AS6461 ABOVENET - Abovenet Communications, Inc,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
ESET NOD32
Win32/ExpressFiles (variant), Win32/ExpressFiles potentially unwanted (variant)
100.00%
Reason Heuristics
PUP.Installer.FaglaroEnterprisesLimited.J, PUP.Installer.FaglaroEnterprisesLimited., PUP.Installer.FaglaroEnterprisesLimited.?, PUP.Blisbury.FaglaroEnterprises.Bundler (M)
100.00%
VIPRE Antivirus
ExpressFiles Installer
83.33%
avast!
Win32:Expressfiles-A [PUP]
50.00%
G Data
Win32.Application.ExpressFiles
50.00%
Emsisoft Anti-Malware
Riskware.Win32.ExpressFiles
33.33%
Trend Micro House Call
TROJ_GEN.F47V1018, TROJ_GEN.F47V0808
33.33%
Bkav FE
W32.Clod52e.Trojan, W32.HfsAdware
33.33%
Comodo Security
Application.Win32.EDown.FTVP
16.67%
Dr.Web
Adware.Downware.10546
16.67%
McAfee
Artemis!809864701CCC
16.67%
Baidu Antivirus
Adware.Win32.Bbylon
16.67%
IKARUS anti.virus
PUA.ExpressFiles
16.67%
MicroWorld eScan
Win32/ExpressFiles
16.67%
Agnitum Outpost
Riskware.ExpressFiles
16.67%
The domain cnt1.express-files.com has been seen to resolve to the following 5 IP addresses.
199.195.196.180.static.midphase.com
February 28, 2016
server9.maserver.com
September 5, 2014
vaporize.fourtwenty.net
September 5, 2014
elephant19.iyashinobaba.net
September 5, 2014
File downloads found at URLs served by cnt1.express-files.com.
The following 19 files have been seen to comunicate with cnt1.express-files.com in live environments.
URL:
http://cnt1.express-files.com/
Title (9/5/2014):
“Free Event Planning Tools - Wedding Planning - Online Checklists Invites”
Title (12/1/2014):
“Easy Event Planning”
Web server:
nginx/1.2.1 (PHP/5.3.3-7+squeeze19)
Related Domains