The domain download.expressdownload.net is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tel Aviv, Tel Aviv within Israel which resides on the RIPE Network Coordination Centre network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Tel Aviv, Israel (IL)
Create date:
Tuesday, October 8, 2013
Expires date:
Sunday, October 8, 2017
Updated date:
Wednesday, September 9, 2015
ASN:
AS6461 MFNX MFN - Metromedia Fiber Network
Google Safe Browsing:
unwanted
Scanner detections:
Detections (98% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Optional.Installer.BandooMedia.V, PUP.Optional.Installer.W, PUP.Optional.Installer.V, PUP.Installer.BandooMedia.V, PUP.Installer.BandooMedia.W, PUP.Bandoo.Installer, PUP.ILivid.WebBar (M), Win32.Generic.BandooMedia.Installer.Meta, PUP.Bandoo.BandooMedia.Installer (M), PUP.Bandoo.BandooMe.Installer (M), PUP.Bandoo (M)
98.00%
Malwarebytes
PUP.Optional.Bandoo
34.00%
VIPRE Antivirus
Trojan.Win32.Generic, iLivid, Threat.5059975, Threat.4150696
32.00%
AVG
Generic, Adware Generic_r.VQ, Worm/Delf.KHX
28.00%
Baidu Antivirus
Adware.Win32.iLivid
28.00%
ESET NOD32
Win32/iLivid (variant)
26.00%
Dr.Web
Adware.Bandoo.13, Adware.Bandoo.19, Adware.Bandoo.168, Adware.Bandoo.194, Trojan.Inject1.28681
24.00%
Avira AntiVirus
APPL/Downloader.Gen, APPL/Bandoo.lpqsa, Adware/SeaSuite.inze, PUA/iLivid.Gen
24.00%
Kaspersky
not-a-virus:WebToolbar.Win64.SearchSuite, not-a-virus:WebToolbar.Win32.SearchSuite, Virus.Win32.Renamer
18.00%
McAfee
Artemis!C242B5A5B592, Artemis!B6A829DFA975, Artemis!430BA1894F53, Artemis!F461DB6FE8FE, Artemis!D0475DE2AB77, Artemis!7EFD1599C665, Artemis!9386EDF85849
16.00%
IKARUS anti.virus
not-a-virus:Downloader.Win32.Agent, PUA.SearchSuite, PUA.iLivid
12.00%
Fortinet FortiGate
Riskware/Win64_SearchSuite, Riskware/SearchSuite, Riskware/ILivid
12.00%
ESET NOD32
Win32/iLivid.A potentially unwanted application, Win32/Toolbar.SearchSuite potentially unwanted application, Win32/Delf.NRJ worm
12.00%
Agnitum Outpost
PUA.Toolbar.SearchSuite
12.00%
avast!
Win32:Adware-BYC [PUP], Win32:Rootkit-gen [Rtk], Toolbar-U [PUP], Win32:Agent-AODJ [Trj]
10.00%
The domain download.expressdownload.net has been seen to resolve to the following IP address.
94.31.0.27.IPYX-076665-ZYO.above.net
December 26, 2013
File downloads found at URLs served by download.expressdownload.net.
The following 9 files have been seen to comunicate with download.expressdownload.net in live environments.
URL:
http://download.expressdownload.net/
Google Analytics:
UA-30208384
Title:
“Torch Web Browser - Your All in One Internet Browser”
Description:
“Get more from the web with Torch Browser. Learn more about this unique browser here.”
Statistics are for the previous month.
Related Domains