torch-browser.ar.1800download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain torch-browser.ar.1800download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, February 6, 2015

Expires date:
Saturday, February 6, 2016

Updated date:
Thursday, April 16, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy
100.00%

K7 AntiVirus
Trojan
100.00%

Trend Micro House Call
Suspici.40242376
100.00%

Clam AntiVirus
Win.Trojan.Agent-855157
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Dr.Web
Adware.Downware.9759
100.00%

VIPRE Antivirus
Opencandy
100.00%

Sophos
OpenCandy
100.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
100.00%

G Data
Win32.Adware.OpenCandy
100.00%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
100.00%

McAfee
Artemis!C7A93E97B9B2
100.00%

Panda Antivirus
PUP/OpenCandy
100.00%

Fortinet FortiGate
Riskware/OpenCandy
100.00%

AVG
OpenCandy
100.00%

The domain torch-browser.ar.1800download.com has been seen to resolve to the following 2 IP addresses.

ec2-54-200-233-120.us-west-2.compute.amazonaws.com
July 1, 2015

ec2-52-10-34-223.us-west-2.compute.amazonaws.com
July 1, 2015

File downloads found at URLs served by torch-browser.ar.1800download.com.

URL:
http://torch-browser.ar.1800download.com/

Title:
“برنامج Torch Browser - تحميل Torch Browser الإصدار 36.0اللغة العربية في 1800Download.com”

Description:
“بإختصار Torch browser - برنامج متصفح الإنترنت الذى يوفر لك المزيد من الخصوصية والأمان عند تصفحك لمواقع الإنترنت المختلفة ,فهذا المتصفح يزيد من سرعة تحميل الملفات ويجعل إستخدام الإنترنت أكثر سهولة ويسر لسهولة الإنتقال من موقع لأخر من خلال هذا...”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.7.9 (PHP/5.5.9-1ubuntu4.5)

Facebook:
Likes:  1
Shares:  1

Statistics are for the previous month.