home

torch-browser.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain torch-browser.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
2 joydownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy, Trojan.Renamer.DF
100.00%

AVG
Generic, OpenCandy, Worm/Delf.KHX
100.00%

McAfee
Adware-Opencandy, Artemis!A3089C95FE7F, Artemis!73565C4379A1, Artemis!4F9A01338703, Virus.W32/Gnamer
83.33%

Trend Micro House Call
Suspicious_GEN.F47V0716, Suspicious_GEN.F47V0730, TROJ_GEN.F47V0604, Suspicious_GEN.F47V1119, TROJ_AGENT_005249.TOMB
83.33%

VIPRE Antivirus
Opencandy, Trojan.Win32.Generic, Threat.4775899
83.33%

Sophos
Generic PUA GD, Generic PUA DE, OpenCandy, Virus 'W32/Renamer-K'
83.33%

G Data
Win32.Trojan.Agent.40465K, Win32.Adware.OpenCandy, Worm.Generic.377772
83.33%

ESET NOD32
Win32/JoyDownloader
83.33%

Reason Heuristics
PUP.Installer.InnovativeSystems.T
83.33%

Dr.Web
Adware.Downware.6712, Adware.OpenCandy.10, Adware.OpenCandy.55, Trojan.Inject1.28681
83.33%

Avira AntiVirus
APPL/Downloader.Gen, W32/Tapin
83.33%

IKARUS anti.virus
PUA.JoyDownloader, Virus.Win32.Renamer
83.33%

avast!
Win32:Malware-gen, Win32:Agent-AODJ [Trj]
66.67%

K7 AntiVirus
Adware , Unwanted-Program , Trojan
66.67%

Agnitum Outpost
Riskware.Agent
50.00%

The domain torch-browser.joydownload.com has been seen to resolve to the following 8 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
April 6, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
April 6, 2016

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
December 1, 2014

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
December 1, 2014

184.73.244.120
ec2-184-73-244-120.compute-1.amazonaws.com
September 22, 2014

107.22.254.230
ec2-107-22-254-230.compute-1.amazonaws.com
September 22, 2014

107.22.195.231
ec2-107-22-195-231.compute-1.amazonaws.com
September 10, 2014

23.23.108.120
ec2-23-23-108-120.compute-1.amazonaws.com
September 10, 2014

File downloads found at URLs served by torch-browser.joydownload.com.

19 / 68    (Adware)
http://torch-browser.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1HxDga5/ZtukktDyqsGMxwdkEP0XjerC/.../Qnn7uNKamCYyOPVRTsc3PnUx97v5SUUmzQS7lNdHGT6iX1nhqMPuxgRmNHDOqi5Qz9KQOnOiV0DPg7c=  (torchsetup-r89-n-bc.exe)

12 / 68    (Adware)
http://torch-browser.joydownload.com/get_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTutCkGrNM7Y9uk053f/oHp5iNEMJ1WjLKn3fHm9ykZZIGjPEe2tCuNun xyz4WXBQ b7UunThWv2y77zrXM7NHRjD1W88Yu1h0XRn3kAD1/hoVwqjnxGWmfSq5eysflNjcVY/.../VrDoD6KZz6MDYfzcr F 8ujUtKsdyoz0rzLaB3nT6hC91Wrc24SWup6sWCkW8qYrxRQoY1MHoxu6GtHBprnELplJ0YQmWkRFHhqNnuxgwvLDab jlMwIuRbzXrEAPPg7c=  (torchsetup-r89-n-bc.exe)

21 / 68    (Adware)
http://torch-browser.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymEB7wZ93Stuh152P0sD4tl49bb1XsK7H NWG7yEZTcWmNG O1TOx0g UxjYPfWx6avCX5D0zl/CT92K3M/JuH1iAe44c7wF9BXmTnU2pnn4Aj yHoXWGRSblOw4TrNT0VLP0gJFsFMqXlV2h0O8TNLAlh1fX2GX8veY6x2 4/HC/j5kjE3/VqDoC/csKqbnFO1IK3H M2wF4H5sv3ilLqKfMrw3PhQN1Wrc2/.../6s3FiCdjbbRAT5ZZZj1w6IHyWV8hk1S43sAaDn6yGFi79ojvhAUmNGCd4T4G1prZMni6R0XPg7c=  (torchsetup-r89-n-bc.exe)

21 / 68    (Adware)
http://torch-browser.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4coWK4fE9rm/8qHpwz8kFbk3jYqmqZi/p0l8bOGGPEfvDR/dkm9o1gIPdGk6Z9jKmERSkpi733ufa7dPam3EU4oc7wF9FXmTgU2Ahy4Rq7CC5UGCTUv8FnNXqbj0GY/o4LBIdc/.../4O h1ryfK19hSflCc5d5NXvGjqp78DZ3258db0AT4U M21n76D0RQczzEn3lIgGASeiDAv5sc sh1Zna2DP4WAV2djVNHKpR0TYg7c=  (torchsetup-r89-n-bc.exe)

12 / 68    (Adware)
http://torch-browser.joydownload.com/get_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTqtCly2cteQv I8/2TsqSt4yNEcbR6zerC/NXa20lNaOmqJCeLkErE90e85mJOPDE b/.../HDzy8gONye1nXZi8dMKpbnJb18C4FqounRcHssvvhhvyaaBn0HX4V5AardWwAHPquYPJw3gybPVJR44vOH0xu6GtHBprnELplJ0YQmWkRFHhqNnuxgwvLDab jlMwIuRbzXrEAPPg7c=  (torchsetup-r89-n-bc.exe)

10 / 68    (Adware)
http://torch-browser.joydownload.com/get_file/wUiS4WnYccXGwj 8XPavWwllklU1NSrDR1qhOL G8aZ28Cf2q3Us1oldMxKvPan3fHm6ykYNeiPVWby1E w9wr1gw8WVAAqT9iS7BkT9qj/7mf6SpNjSg2JZqtY6glVIRiL SX4pxYpsvHfoUSCTQb9W2oO dWRfdetwcF9MZu3lXTl1fsTccER 2PSmAC1mcof4w o9HGL5uFnFjr81UIC2M8irZWNb3cm0GPsv3BcW55qk1AzqZel/lSa0AsxP5YSxQHP78MjEiCd5bbdIBo4/.../CsXhBmhAT3joMQTGuiFAawqZnu1Ul8amDP 2AS18vRMnKsREHPg7c=  (torchsetup-r89-n-bc.exe)

12 / 68    (Adware)
http://torch-browser.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzY9bB8bx0vj3j8CotjJhbb1XsK7H4NWHqmQgNIGjPEeukEqdTnPsznKXIQ0nR4m3wBVuppSnslaCZ 8vT0mlIq4d22gFQXzWtDDRnlsEp ir6SGjaSr9W2p64YyUMK7MwJQoOMb38FXB9ctyKYgkpz6vlGDQkao6x2 s/.../44JDnzR1lZybWsyke2NPBN3CgTETPg7c=  (torchsetup-r89-n-bc.exe)

39 / 68    (Malware)
http://torch-browser.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymGxzyaNrUteh152b0sDErn8kFbk3lYqn O2G3g15bOHHMQr21E/Y9xrNyw8SVDgmD9GzyDkzl5zitgLbbqdPK1joV9cp3wEdJF3yhACwjy599q2noUSCTQrZOz8/zPHQNbLMgeUFTZr38FXB9e8TcQkRg3/mHR2JgOJiw2eQoUHTo4USa1Kp D9G3c8i8LCgIzcrkF gv3BcW55q71AzqZel/.../ounkFxtihAT0iJ8XSzGzRFK04M m1QRmNHDOqi5Qz9KQOnOiV0DPg7c=  (torchsetup-r89-n-bc.exe)

21 / 68    (Adware)
http://torch-browser.joydownload.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTqtCly2cteQv I8/2TsqSt4yNEcax6zerC/NXW20lZaMmeNG/usW780yas5nZKPDE b/SXqDkLlszi1if/D8ZrKmiBBpp8ixAwcACngSSx 18kv9DmvEiPAAulOw57rNjMGYLg6JhAHN6S0XHt/ctyaf1hi0PCtV2R5ao6x2 w2BHv 7RicxOI Rs36M5fsfXof1cW3D799w0gH5sv3j1vyfM4q1X/.../44JDnzR1lZybWsyke2NPBN3CgTETPg7c=  (torchsetup-r89-n-bc.exe)

12 / 68    (Adware)
http://torch-browser.joydownload.com/get_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1HxDga5/ZtukktDyqsGMxwdkEP0blerC/NXG20hAcIGjPEeitCrQlyPpqx8yPQVXF7SS7BkD9qnm9i/HQrsvT0mlPq4dm2gkXRn3kADx2ntFNoWmpAgDMBPkc1YXpPipZdethMU1HZr38FXB eMTcckJhzP21W2NnJJf5kuc0DWOo9gWNz6dxVtDiN4H7LWNXnMu F/tnxkkH5tH3jFO7ZKl/.../V91Wrc2 SWvusZmZnz4rJLxBT5Ziem0o8 igFwgm10jkiJoHASeiDAv5sc sh1Zna2DP4WAV2dnbN3GuRELUg7c=  (torchsetup-r89-n-bc.exe)

12 / 68    (Adware)
http://torch-browser.joydownload.com/get_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTytCk6rPInBvqA872b0sAwtiYhWThKjLfvhfXu13QpFYDCSTqHyCr50ybpq1obEUx6avCX9BlTwunO2jufa7dPam3EU4oc7wF9FXmTgU2Ahy4Rq7CC5UGCTUuUFnNXqdD0FYqszLQoEcKXxXGgqMI6XZE4wh/juEyIlf4fy2OUwDWL5uFjFjrsoFpn esOkfXBO1IK3HOkujUlMrsih3BG9LPZnnG sAsxX/.../44JDizR1zYS6Q7SgG1prZMni6QknPg7c=  (torchsetup-r89-n-bc.exe)

9 / 68      (Adware)
http://torch-browser.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzY9bB8bx0vj3j8CotjJhbb1XsK7H/NWH8mQBKOSCGHuO1H7c/yrxyz4WXBAaDpnasHk20snm1mfTTvNKbm2dBs8Np3wBQXzWtCD1/hqd2vHiiOTbdBfxBis/oKmkaOuoselBaIaS0XHh1apGNNBBhhqbuAGF8JtGtlq4nBSqwsFDd2Lt D9G3cci8bmNXnMu7F/.../rAAfhoZjkww4lLHmHsmkez5qKZGCjHEvcg7c=  (torchsetup-r89-n-bc.exe)

The following file have been seen to comunicate with torch-browser.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

URL:
http://torch-browser.joydownload.com/

Title:
“Torch Browser - Download Torch Browser 33 in english on JoyDownload”

Description:
“Torch browser is a secure and multifunctional web browser that provides a high-quality performance and saves your time - Download Torch Browser latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Likes:  15
Shares:  101
Comments:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.