Deceiving domain - 1337x.to

1337x.to is a torrent website that contains music, video, app, and other downloads. While its initial service can be questionable, there are multiple secondary activities that this domain may be involved to, including potentially dangerous advertising and regular browser's redirects to suspicious websites. 

Usually, this domain emerges as a default start page and search provider right after the installation of other freeware. It is promoted as a plug-in-based torrent website and distributed as an additional application along with freeware. After installation, a potential victim is exposed to altered search results, get a considerably bigger about of commercial advertisements, and even see direct links to pornographic content. 

Although the domain does not force-download other malware while visiting it, the content that it displays can reroute to potentially dangerous websites. According to its Terms of Service, the developers refuse to take any responsibility if the user ends up visiting irrelevant websites while using their services. 

Domain name	1337x.to
Classification	Browser hijacker, Potentially Unwanted Program
Activities	The app injects itself onto the system without authorization, produces intrusive advertisements on the web browser, and initiates redirects to the affiliate sources
Detection rate	Low. According to VirusTotal, none of the AV engines are capable of detecting this suspicious app

 

1337x.to violations

ACR-104: The website replaces start page, search engine, and new tab without authorization