liversal.net

PROTECTSERVICE, LTD.

Domain Information

The domain liversal.net registered by PROTECTSERVICE, LTD. was initially registered in July of 2014 through EVOPLUS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
EVOPLUS LTD

Server location:
Dublin City, Ireland (IE)

Create date:
Wednesday, July 30, 2014

Expires date:
Saturday, July 30, 2016

Updated date:
Friday, January 30, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
Unnamed.Threat.46, PUP.OlehAlek (M), Threat.Win.Reputation.IMP, PUP (M)
56.10%

avast!
Win32:Wpakill [PUP], Win32:Agent-AYLT [PUP], Win32:MultiPlug-JU [PUP], Win32:FakeDownload-G [PUP]
43.90%

AVG
HackTool, Adware Generic5.BVXY, Adware Generic_r.VD, Adware Generic5.BQRP, Adware Generic5.BRYU, Adware Generic_r.WW, Adware Generic5.CLID, Adware Generic5.CKPK
41.46%

ESET NOD32
Win32/Adware.MultiPlug.JX application, Win32/AdWare.MultiPlug.CT application, Win32/Adware.MultiPlug.DP application, Win32/Adware.MultiPlug.DM application
39.02%

Microsoft Security Essentials
HackTool:Win32/Wpakill.B, Threat.Undefined, BrowserModifier:Win32/Diplugem
34.15%

Norman
Suspicious_Gen2.KFAML, Gen:Variant.Adware.MPlug.10, Gen:Variant.Adware.MPlug.16, Trojan.Agent.BFLN, Adware.MultiPlug.CW
34.15%

Emsisoft Anti-Malware
Gen:Variant.Adware.MPlug.10, Gen:Variant.Adware.MPlug.16, Trojan.Agent.BFLN, Adware.MultiPlug.CW, Application.Agent.FZ, Adware.Agent.OZI
34.15%

Kaspersky
not-a-virus:RiskTool.Win32.WatKill, not-a-virus:AdWare.Win32.MultiPlug, not-a-virus:HEUR:AdWare.Win32.MultiPlug
26.83%

Dr.Web
Tool.Siggen.6228, Trojan.Crossrider.36840, Trojan.Packed.24060
26.83%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.5180739, Threat.5085665
21.95%

McAfee
Artemis!BFACF78644CA, Program.MultiPlug-FQV, Program.MultiPlug-FPF, Program.MultiPlug-FRO, Program.MultiPlug-FSS
17.07%

F-Secure
Variant.Adware.MPlug, Variant.Razy.7303
7.32%

Bkav FE
W32.Clod181.Trojan
2.44%

MicroWorld eScan
Application.Hacktool.RemoveWAT.A
2.44%

Malwarebytes
HackTool.Wpakill
2.44%

The domain liversal.net has been seen to resolve to the following 9 IP addresses.

ec2-54-72-9-115.eu-west-1.compute.amazonaws.com
August 2, 2016

ec2-52-27-166-51.us-west-2.compute.amazonaws.com
August 17, 2015

ec2-52-24-161-49.us-west-2.compute.amazonaws.com
June 26, 2015

ec2-54-69-104-255.us-west-2.compute.amazonaws.com
May 3, 2015

ec2-54-68-145-207.us-west-2.compute.amazonaws.com
December 15, 2014

ec2-54-68-171-13.us-west-2.compute.amazonaws.com
November 29, 2014

ec2-54-148-67-213.us-west-2.compute.amazonaws.com
November 29, 2014

ec2-54-68-142-187.us-west-2.compute.amazonaws.com
September 10, 2014

ec2-54-68-85-18.us-west-2.compute.amazonaws.com
September 10, 2014

File downloads found at URLs served by liversal.net.

1 / 68      (Adware)

 
Latest 30 of 252 download URLs

The following 256 files have been seen to comunicate with liversal.net in live environments.

 
Latest 20 of 271 files

URL:
http://liversal.net/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
ngx_openresty (PHP/5.4.37)

Facebook:
Shares:  5

Statistics above are for the previous month of March 2024.