download.expressdownload.net

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain download.expressdownload.net is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tel Aviv, Tel Aviv within Israel which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Tel Aviv, Israel (IL)

Create date:
Tuesday, October 08, 2013

Expires date:
Sunday, October 08, 2017

Updated date:
Wednesday, September 09, 2015

ASN:
AS6461 MFNX MFN - Metromedia Fiber Network

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.BandooMedia.V, PUP.Optional.Installer.W, PUP.Optional.Installer.V, PUP.Installer.BandooMedia.V, PUP.Installer.BandooMedia.W, PUP.Bandoo.Installer, Win32.Generic.BandooMedia.Installer.Meta, PUP.Bandoo.BandooMedia.Installer (M), PUP.ILivid.WebBar (M), PUP.Bandoo.BandooMe.Installer (M), PUP.Bandoo (M)
98.00%

Malwarebytes
PUP.Optional.Bandoo
34.00%

VIPRE Antivirus
Trojan.Win32.Generic, iLivid, Threat.5059975, Threat.4150696
32.00%

AVG
Generic, Adware Generic_r.VQ, Worm/Delf.KHX
28.00%

Baidu Antivirus
Adware.Win32.iLivid
28.00%

ESET NOD32
Win32/iLivid (variant)
26.00%

Dr.Web
Adware.Bandoo.13, Adware.Bandoo.19, Adware.Bandoo.168, Adware.Bandoo.194, Trojan.Inject1.28681
24.00%

Avira AntiVirus
APPL/Downloader.Gen, APPL/Bandoo.lpqsa, Adware/SeaSuite.inze, PUA/iLivid.Gen
24.00%

Kaspersky
not-a-virus:WebToolbar.Win64.SearchSuite, not-a-virus:WebToolbar.Win32.SearchSuite, Virus.Win32.Renamer
18.00%

McAfee Web Gateway
Artemis!C242B5A5B592, Artemis!B6A829DFA975, Artemis!Trojan, BehavesLike.Win32.Downloader.tc, BehavesLike.Win32.Multiplug.mh
18.00%

McAfee
Artemis!C242B5A5B592, Artemis!B6A829DFA975, Artemis!430BA1894F53, Artemis!F461DB6FE8FE, Artemis!D0475DE2AB77, Artemis!7EFD1599C665, Artemis!9386EDF85849
16.00%

IKARUS anti.virus
not-a-virus:Downloader.Win32.Agent, PUA.SearchSuite, PUA.iLivid
12.00%

Fortinet FortiGate
Riskware/Win64_SearchSuite, Riskware/SearchSuite, Riskware/ILivid
12.00%

ESET NOD32
Win32/iLivid.A potentially unwanted application, Win32/Toolbar.SearchSuite potentially unwanted application, Win32/Delf.NRJ worm
12.00%

Agnitum Outpost
PUA.Toolbar.SearchSuite
12.00%

The domain download.expressdownload.net has been seen to resolve to the following IP address.

94.31.0.27.IPYX-076665-ZYO.above.net
December 26, 2013

File downloads found at URLs served by download.expressdownload.net.

1 / 68      (PUP)

The following 9 files have been seen to comunicate with download.expressdownload.net in live environments.

URL:
http://download.expressdownload.net/

Google Analytics:
UA-30208384

Title:
“Torch Web Browser - Your All in One Internet Browser”

Description:
“Get more from the web with Torch Browser. Learn more about this unique browser here.”

Web server:
Apache

Facebook:
Shares:  1

Statistics are for the previous month.