download.kingtranslate.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain download.kingtranslate.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tel Aviv, Tel Aviv within Israel which resides on the RIPE Network Coordination Centre network.
Remove Malware from download.kingtranslate.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Tel Aviv, Israel (IL)

Create date:
Sunday, July 03, 2011

Expires date:
Sunday, July 03, 2016

Updated date:
Sunday, May 31, 2015

ASN:
AS6461 MFNX MFN - Metromedia Fiber Network

Root domain:

Scanner detections:
Detections  (78% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.KoyoteLab.CC, PUP.Installer.KoyoteLab.S, PUP.Installer.KoyoteLab.BB, PUP.Installer.KoyoteLab.FF
87.50%

Dr.Web
Adware.Downware.964, Adware.Searcher.2497, Adware.Downware.942
87.50%

Trend Micro House Call
TROJ_GEN.F47V0330, Suspicious_GEN.F47V0617, Suspicious_GEN.F47V0806, Suspicious_GEN.F47V1017
50.00%

G Data
Win32.Application.Searchsuite
37.50%

AVG
SearchSuite
37.50%

ESET NOD32
Win32/Toolbar.SearchSuite, Win32/KoyoteLab (variant)
25.00%

McAfee
Artemis!127DAD98329C, Artemis!DFD2B7379AA9
25.00%

Malwarebytes
PUP.Optional.Koyote.A
25.00%

McAfee Web Gateway
Artemis!127DAD98329C
25.00%

Bkav FE
W32.Clod39a.Trojan
12.50%

avast!
Win32:Adware-gen [Adw]
12.50%

IKARUS anti.virus
PUA.SearchSuite
12.50%

Fortinet FortiGate
Riskware/KoyoteLab
12.50%

Baidu Antivirus
Adware.Win32.SearchSuite
12.50%

VIPRE Antivirus
Threat.5224331
12.50%

The domain download.kingtranslate.com has been seen to resolve to the following IP address.

94.31.0.25.IPYX-076665-ZYO.above.net
February 16, 2014

File downloads found at URLs served by download.kingtranslate.com.

2 / 68      (inconclusive)
http://download.kingtranslate.com/KingTranslateSetup.exe  (kingtranslatesetup-r214-n-bc.exe)

0 / 68
http://download.kingtranslate.com/KingTranslateSetup.exe  (kingtranslatesetup-r211-n-bc.exe)

3 / 68      (PUP)
http://download.kingtranslate.com/KingTranslateSetup.exe  (kingtranslatesetup-r133-n-bf.exe)

11 / 68    (PUP)
http://download.kingtranslate.com/KingTranslateSetup.exe  (kingtranslatesetup-r211-n-bf.exe)

10 / 68    (PUP)

5 / 68      (PUP)
http://download.kingtranslate.com/KingTranslateSetup.exe  (kingtranslatesetup-r133-n-bc.exe)

2 / 68      (PUP)
http://download.kingtranslate.com/KingTranslateSetup.exe  (kingtranslatesetup-r211-n-bc.exe)

4 / 68      (PUP)
http://download.kingtranslate.com/KingTranslateSetup.exe  (8edcefcd13745592bb1ed49634dad2ad)

2 / 68      (PUP)
http://download.kingtranslate.com/KingTranslateSetup.exe  (kingtranslatesetup-r211-n-bi.exe)

The following 2 files have been seen to comunicate with download.kingtranslate.com in live environments.

URL:
http://download.kingtranslate.com/

Google Analytics:
UA-30208384

Title:
“Torch Web Browser - Your All in One Internet Browser”

Description:
“Get more from the web with Torch Browser. Learn more about this unique browser here.”

Web server:
Apache

Remove Malware from download.kingtranslate.com - Powered by Reason Core Security