» liversity.net
Overview
Analysis
IPs Addresses (9)
Downloads (162)
Network (256)
Website Detail

liversity.net

PROTECTSERVICE, LTD.

Domain Information

The domain liversity.net registered by PROTECTSERVICE, LTD. was initially registered in July of 2014 through EVOPLUS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.

Registrant:

PROTECTSERVICE, LTD.

Registrar:

EVOPLUS LTD

Server location:

Dublin City, Ireland (IE)

Create date:

Wednesday, July 30, 2014

Expires date:

Saturday, July 30, 2016

Updated date:

Friday, January 30, 2015

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:

3 liversity.net records

Scanner detections:

Detections (92% detected)

Scan engine

Details

Detections

Reason Heuristics

Threat.Win.Reputation.IMP, PUP.OlehAlek (M), PUP.Bundler (M), PUP.installCore.ICSSetup (M), PUP (M), Adware.Bundler (M)

58.70%

avast!

Win32:Agent-AYLT [PUP], Win32:FakeDownload-G [PUP], Win32:MultiPlug-ID [PUP], Win32:MultiPlug-ND [PUP]

41.30%

ESET NOD32

Win32/AdWare.MultiPlug.CT application, Win32/Adware.MultiPlug.DZ application, Win32/Adware.MultiPlug.JX application, Win32/Adware.MultiPlug.EP application

36.96%

Dr.Web

Trojan.WebPick.2901, Trojan.Crossrider.36840, Trojan.DownLoader11.38481, Trojan.Crossrider.37867, Trojan.DownLoader11.38490

32.61%

AVG

Adware Generic_r.VD, Adware Generic5.BVYA, Adware Generic_r.XD, Adware Generic_r.UH

26.09%

Norman

Gen:Variant.Adware.MPlug.15, Application.Bundler.IF, Gen:Variant.Adware.MPlug.10, Gen:Variant.Adware.MPlug.16, Gen:Variant.Adware.Graftor.174167

23.91%

Emsisoft Anti-Malware

Gen:Variant.Adware.MPlug.15, Application.Bundler.IF, Gen:Variant.Adware.MPlug.10, Gen:Variant.Adware.MPlug.16, Gen:Variant.Adware.Graftor.174167, Adware.Mplug.BY

21.74%

McAfee

Program.MultiPlug-FRO, Program.MultiPlug-FTA, Program.MultiPlug-FQV

15.22%

Kaspersky

not-a-virus:HEUR:AdWare.Win32.MultiPlug, not-a-virus:AdWare.Win32.MultiPlug

15.22%

Microsoft Security Essentials

Threat.Undefined

15.22%

VIPRE Antivirus

Threat.5085665, Threat.5180739

10.87%

F-Secure

Variant.Adware.MPlug, Variant.Sobrab.4

4.35%

The domain liversity.net has been seen to resolve to the following 9 IP addresses.

54.72.9.115

ec2-54-72-9-115.eu-west-1.compute.amazonaws.com

July 30, 2016

104.18.45.122

December 15, 2015

104.18.44.122

December 15, 2015

54.69.104.255

ec2-54-69-104-255.us-west-2.compute.amazonaws.com

May 2, 2015

54.68.145.207

ec2-54-68-145-207.us-west-2.compute.amazonaws.com

December 14, 2014

54.68.171.13

ec2-54-68-171-13.us-west-2.compute.amazonaws.com

November 29, 2014

54.148.67.213

ec2-54-148-67-213.us-west-2.compute.amazonaws.com

November 29, 2014

54.68.142.187

ec2-54-68-142-187.us-west-2.compute.amazonaws.com

September 22, 2014

54.68.85.18

ec2-54-68-85-18.us-west-2.compute.amazonaws.com

September 22, 2014

File downloads found at URLs served by liversity.net.

3 / 68 (PUP)

http://liversity.net/v21063?product_name=04 Farol das estrelas.mp3&filesize=&product_title=04 Farol das estrelas.mp3&installer_file_name=04 Farol das estrelas.mp3&product_file_name=04 Farol das estrelas.mp3&product_download_url=http://.../download.php?codmusica=21821871&d=true&dd=true (04 farol das estrelas.mp3.exe)

1 / 68 (Malware)

http://liversity.net/v3500?product_name=Astucia Crew Part. Haikaiss - Direto do Nada.mp3&file size=&product_title=Astucia Crew Part. Haikaiss - Direto do Nada.mp3&installer_file_name=Astucia Crew Part. Haikaiss - Direto do Nada.mp3&product_file_name=Astucia Crew Part. Haikaiss - Direto do Nada.mp3&product_download_url=http://srv79.vidtomp3.com/download/.../Astucia Crew Part. Haikaiss - Direto do Nada.mp3 (astucia crew part. haikaiss - direto do nada.mp3.exe)

0 / 68

http://liversity.net/v20059?product_name=JAHKOY_Closer_p_FKJ.mp4&file_size=&product_title=JAHKOY - Closer (p. FKJ)&installer_file_name=JAHKOY_Closer_p_FKJ.mp4&product_file_name=JAHKOY_Closer_p_FKJ.mp4&product_download_url=http://youtubemp4s.com/downloads/.../1000098?h=FlUs1d4ntaZylGX0WRc2TQ&e=1415477565 (jahkoy_closer_p_fkj.mp4.exe)

0 / 68

http://liversity.net/v20000?product_name=_Freedom_OTAKU__HS-DxD_01.mp4&filesize=60 MB&product_title=_Freedom_OTAKU__HS-DxD_01.mp4&installer_file_name=_Freedom_OTAKU__HS-DxD_01.mp4&reffer=http://www.firedrive.com/.../8308A82C24D15596 (_freedom_otaku__hs-dxd_01.mp4.exe)

1 / 68 (Adware)

http://liversity.net/v2612?product_name=Google Chrome 36.0.1985&filesize=875 KB&product_title=Descargar Google Chrome&installer_file_name=google-chrome&product_file_name=appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid;={5AC9D352-9E10-BA78-B558-8DFC99BE6513}&lang=es&browser=3&usagestats=0&appname=Google Chrom&reffer=https://dl.google.com/tag/.../appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid;={5AC9D352-9E10-BA78-B558-8DFC99BE6513}&lang=es&browser=3&usagestats=0&appname=Google Chrom&Locale=ES (google-chrome.exe)

2 / 68 (PUP)

http://liversity.net/v20059?product_name=Counting_Crows_Accidentally_In_Love_MUSIC_VIDEO_featuring_Disney.mp4&file_size=&product_title=Counting Crows - Accidentally In Love MUSIC VIDEO featuring Disney&installer_file_name=Counting_Crows_Accidentally_In_Love_MUSIC_VIDEO_featuring_Disney.mp4&product_file_name=Counting_Crows_Accidentally_In_Love_MUSIC_VIDEO_featuring_Disney.mp4&product_download_url=http://youtubemp4s.com/downloads/36/.../Counting_Crows_Accidentally_In_Love_MUSIC_VIDEO_featuring_Disney.mp4?h=oJxoSKrrknYx2-rxa7EMPQ&e=1417037411 (counting_crows_accidentally_in_love_music_video_featuring_disney.mp4.exe)

0 / 68

http://liversity.net/v20004?product_name=Bison Cam&filesize=4951 KB&product_title=Descargar Bison Cam&installer_file_name=bison-cam&product_file_name=Bisoncam.rar&reffer=http://www.programasejogos.com&product_download_url=http://www.lordblacksuca.net/.../Bisoncam.rar&locale=BR (bison-cam.exe)

1 / 68 (Malware)

http://liversity.net/v21773?product_name=Ellie Goulding Love Me Like You Do 4songs Pk.mp3&filesize=3.98 MB&product_title=Ellie Goulding Love Me Like You Do 4songs Pk.mp3&installer_file_name=Ellie Goulding Love Me Like You Do 4songs Pk.mp3&product_file_name=Ellie Goulding Love Me Like You Do 4songs Pk.mp3&q=Ellie Goulding Love Me Like You Do 4songs Pk.mp3&product_download_url=http://.../fil.php?s=srvsc&id=71747a3875754a6769416c342f53495a4534313730383133&t=Ellie goulding - Love me like you do 4songs pk.mp3&dl=1 (ellie goulding love me like you do 4songs pk.mp3.exe)

1 / 68 (Malware)

http://liversity.net/v21773?product_name=Ellie Goulding Love Me Like You Do.mp3&filesize=~5.0 MB&product_title=Ellie Goulding Love Me Like You Do.mp3&installer_file_name=Ellie Goulding Love Me Like You Do.mp3&product_file_name=Ellie Goulding Love Me Like You Do.mp3&q=Ellie Goulding Love Me Like You Do.mp3&product_download_url=http://.../fil.php?s=srv0001&id=363231333238382f53495a45&t=Ellie goulding - Love me like you do.mp3&dl=1 (ellie goulding love me like you do.mp3.exe)

1 / 68 (Malware)

http://liversity.net/v3500?product_name=David Guetta Miami Ultra Music Festival 2014.mp3&file size=&product_title=David Guetta Miami Ultra Music Festival 2014.mp3&installer_file_name=David Guetta Miami Ultra Music Festival 2014.mp3&product_file_name=David Guetta Miami Ultra Music Festival 2014.mp3&product_download_url=http://srv25.vidtomp3.com/download/.../David Guetta Miami Ultra Music Festival 2014.mp3 (david guetta miami ultra music festival 2014.mp3.exe)

1 / 68 (Adware)

http://liversity.net/v2321?product_name=Free Audio Dub 1.7.9&filesize=20380 KB&product_title=Descargar Free Audio Dub&installer_file_name=free-audio-dub&product_file_name=FreeAudioDub.exe&reffer=http://www.programasgratis.es&Locale=ES&product_download_url=http://.../FreeAudioDub.exe (free-audio-dub.exe)

1 / 68 (Adware)

http://liversity.net/v2321?product_name=Free Audio to Flash Converter 5.0.26&filesize=1176 KB&product_title=Descargar Free Audio to Flash Converter&installer_file_name=free-audio-to-flash-converter&product_file_name=FreeAudioToFlashConverter.exe&reffer=http://www.programasgratis.es&Locale=ES&product_download_url=http://web-downloads.dvdvideosoft.com/.../FreeAudioToFlashConverter.exe (free-audio-to-flash-converter.exe)

3 / 68 (PUP)

http://liversity.net/v20003?product_name=Filewing 2014&filesize=13214 KB&product_title=Descargar Filewing&installer_file_name=filewing&product_file_name=FileWingSetup.exe&reffer=http://www.programmesetjeux.com&product_download_url=http://.../FileWingSetup.exe&locale=FR (filewing.exe)

1 / 68 (Malware)

http://liversity.net/v3500?product_name=Du:it - Handle With Care.mp3&file size=&product_title=Du:it - Handle With Care.mp3&installer_file_name=Du:it - Handle With Care.mp3&product_file_name=Du:it - Handle With Care.mp3&product_download_url=http://srv24.vidtomp3.com/download/.../Du:it - Handle With Care.mp3 (du_it - handle with care.mp3.exe)

8 / 68 (PUP)

http://liversity.net/v20004?product_name=Otimizador de corte linear 3.5&filesize=1382 KB&product_title=Descargar Otimizador de corte linear&installer_file_name=otimizador-de-corte-linear&product_file_name=1dnpcins.exe&reffer=http://www.programasejogos.com&product_download_url=http://www.1d-solutions.com/1dnest/.../1dnpcins.exe&locale=BR (otimizador-de-corte-linear.exe)

1 / 68 (Adware)

http://liversity.net/v20003?product_name=Pixelmon pour Minecraft 1.8.3&filesize=10489 KB&product_title=Descargar Pixelmon pour Minecraft&installer_file_name=pixelmon-minecraft&product_file_name=F23Vr&reffer=http://www.programmesetjeux.com&product_download_url=http://.../F23Vr&locale=FR (pixelmon-minecraft.exe)

4 / 68 (PUP)

http://liversity.net/v20563?product_name=Arrow S03E03 English Subtitle&installer_file_name=arrow-s03e03-english-subtitle&filesize=19.51 kB&product_file_name=arrow-s03e03-english-subtitle.zip&product_download_url=http://.../files/pp25gz7.zip&reffer=http://.../cc25tm7 (arrow-s03e03-english-subtitle.exe)

3 / 68 (PUP)

http://liversity.net/v20563?product_name=The Legend of Korra S03E01 English Subtitle&installer_file_name=the-legend-of-korra-s03e01-english-subtitle&filesize=20.19 kB&product_file_name=the-legend-of-korra-s03e01-english-subtitle.zip&product_download_url=http://www.opensubtitles.org/en/download/sub/5765006&reffer=http://.../bf3sxo2 (the-legend-of-korra-s03e01-english-subtitle.exe)

1 / 68 (Adware)

http://liversity.net/v21062?product_name=audiomachine - city of hope.mp3&filesize=3.85 MB&product_title=audiomachine - city of hope.mp3&installer_file_name=audiomachine - city of hope.mp3&product_file_name=audiomachine - city of hope.mp3&product_download_url=http://mp3butik.com/audio/103430734/.../play.mp3 (audiomachine - city of hope.mp3.exe)

1 / 68 (Adware)

http://liversity.net/v2612?product_name=Guía Roji 2012&filesize=1 KB&product_title=Descargar Guía Roji&installer_file_name=guia-roji&product_file_name=&reffer=http://www.programas-gratis.net&Locale=ES&product_download_url=http://.../ (guia-roji.exe)

7 / 68 (PUP)

http://liversity.net/v3991 (playhub.exe)

3 / 68 (PUP)

http://liversity.net/v2612?product_name=SimTractor 4.107&filesize=204967 KB&product_title=Descargar SimTractor&installer_file_name=simtractor&product_file_name=SimTractor_41DX.exe&reffer=http://www.programas-gratis.net&Locale=ES&product_download_url=http://www.simtractor.com/.../SimTractor_41DX.exe (simtractor.exe)

5 / 68 (PUP)

http://liversity.net/v21105?product_name=Hill Climb Racing&filesize=3&product_title=Hill Climb Racing&installer_file_name=Hill Climb Racing&Product_File_Name=Hill Climb Racing.exe&product_download_url=http://cdn.bluestacks.com/public/.../BlueStacks-SplitInstaller_native.exe&locale=XX (70380cb22d5857cddec157c1da012983)

1 / 68 (Adware)

http://liversity.net/v2612?product_name=Los Sims 3: ¡Vaya Fauna!&filesize=1468006 KB&product_title=Descargar Los Sims 3: ¡Vaya Fauna!&installer_file_name=sims-3-vaya-fauna&product_file_name=pbPage.play-free-games-es_ES&reffer=http://www.programas-gratis.net&Locale=ES&product_download_url=http://store.origin.com/store/eaemea/es_ES/html/originweb/.../pbPage.play-free-games-es_ES (sims-3-vaya-fauna.exe)

1 / 68 (Malware)

http://liversity.net/v21773?product_name=Ellie Goulding Love Me Like You Do.mp3&filesize=3.79 MB&product_title=Ellie Goulding Love Me Like You Do.mp3&installer_file_name=Ellie Goulding Love Me Like You Do.mp3&product_file_name=Ellie Goulding Love Me Like You Do.mp3&q=Ellie Goulding Love Me Like You Do.mp3&product_download_url=http://.../fil.php?s=srvsc&id=62666b524f474351424242782f53495a4533393738313334&t=Ellie Goulding Love Me Like You Do.mp3&dl=1 (ellie goulding love me like you do.mp3.exe)

1 / 68 (Malware)

http://liversity.net/v21773?product_name=Ricardo Arjona Fuistes Tu.mp3&filesize=2.01 MB&product_title=Ricardo Arjona Fuistes Tu.mp3&installer_file_name=Ricardo Arjona Fuistes Tu.mp3&product_file_name=Ricardo Arjona Fuistes Tu.mp3&q=Ricardo Arjona Fuistes Tu.mp3&product_download_url=http://.../fil.php?s=srv0007&id=687474703a2f2f6d69706169736d69636f72617a6f6e2e6a696d646f2e636f6d2f6170702f646f776e6c6f61642f363233353232363938322f5269636172646f5f41726a6f6e615f467569737465735f54752e6d70333f743d313334333030343135372f53495a4532313038373933&t=Ricardo Arjona Fuistes Tu.mp3&dl=1 (ricardo arjona fuistes tu.mp3.exe)

4 / 68 (PUP)

http://liversity.net/v3992?product_name=nuova sigla tg5 - prototipo&filesize=&product_title=nuova sigla tg5 - prototipo&installer_file_name=nuova sigla tg5 - prototipo&product_file_name=nuova sigla tg5 - prototipo.mp3&product_download_url=http://www.dirpy.com/download/nuova sigla tg5 - prototipo.mp3?url=https://.../watch?v=sBBoqfqHov4&hd=1&format_id=0&audio_format=320K&start_time=00:00:00&end_time=00:00:13&type=audio&ID3[title]=nuova sigla tg5 - prototipo&ID3[artist]=&ID3[comment]=&ID3[genre]=&ID3[album]=&ID3[track]=0&ID3[year]= (nuova sigla tg5 - prototipo.exe)

1 / 68 (Malware)

http://liversity.net/v3992?product_name=Nabyla Maan-Laghzal Fatma (Vidéo paroles) ????? ??? ? ?????? ?????&filesize=&product_title=Nabyla Maan-Laghzal Fatma (Vidéo paroles) ????? ??? ? ?????? ?????&installer_file_name=Nabyla Maan-Laghzal Fatma (Vidéo paroles) ????? ??? ? ?????? ?????&product_file_name=Nabyla Maan-Laghzal Fatma (Vidéo paroles) ????? ??? ? ?????? ?????.mp3&product_download_url=http://www.dirpy.com/download/Nabyla Maan-Laghzal Fatma (Vidéo paroles) ????? ??? ? ?????? ?????.mp3?url=http://.../watch?v=78MccwNyX7Y&format_id=0&audio_format=320K&start_time=00:00:00&end_time=00:04:59&type=audio&ID3[title]=Nabyla Maan-Laghzal Fatma (Vidéo paroles) ????? ??? ? ?????? ?????&ID3[artist]=&ID3[comment]=&ID3[genre]=&ID3%5 (nabyla maan-laghzal fatma (vido paroles) .exe)

1 / 68 (Malware)

http://liversity.net/v20769?product_name=SAMSUNG_USB_Driver_for_Mobile_Phones_1.5.27.0&file size=&product_title=SAMSUNG_USB_Driver_for_Mobile_Phones_1.5.27.0&installer_file_name=SAMSUNG_USB_Driver_for_Mobile_Phones_1.5.27.0&product_file_name=SAMSUNG_USB_Driver_for_Mobile_Phones_1.5.27.0.exe&product_download_url=http://fs1.d-h.st/download/00071/.../SAMSUNG_USB_Driver_for_Mobile_Phones_1.5.27.0.exe (40783091dd1a044eb635466943b1f38e)

1 / 68 (Adware)

http://liversity.net/v20003?product_name=WhatsApp pour PC &filesize=10071 KB&product_title=Descargar WhatsApp pour PC&installer_file_name=whatsapp-pour-pc&product_file_name=WhatsApp.apk&reffer=http://www.programmesetjeux.com&product_download_url=http://www.whatsapp.com/android/.../WhatsApp.apk&locale=FR (whatsapp-pour-pc.exe)

Latest 30 of 162 download URLs

The following 256 files have been seen to comunicate with liversity.net in live environments.

TCP » 54.72.9.115:80

globalupdate.exe (globalUpdate Update by globalUpdate)

TCP » 54.72.9.115:443

Softonic.exe (Softonic)

TCP » 54.72.9.115:443

Softonic.exe (Softonic)

TCP » 54.72.9.115:80

247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:443

Softonic.exe (Softonic)

TCP » 54.72.9.115:80

optimizerpro.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80

1573.exe (SavePass 1.1 by OB)

TCP » 54.72.9.115:80

hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:443

Softonic.exe (Softonic)

TCP » 54.72.9.115:80

hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80

5dfde4f5-80af-4a98-8da4-e95b948f183d-10.exe (Ge-Force by Webar)

TCP » 54.72.9.115:80

optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.115:80

hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80

shopwit.exe (by Pay By Ads)

TCP » 54.72.9.115:443

Softonic.exe (Softonic)

TCP » 54.72.9.115:80

pricehorse.exe (by Pay By Ads)

TCP » 54.72.9.115:80

hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80

hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80

6054.exe (SavePass 1.1 by OB)

TCP » 54.72.9.115:80

playnowradio.exe (Play now radio by Pay By Ads)

Latest 20 of 271 files

URL:

http://liversity.net/

Network:

Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:

CN=sni45157.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:

CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

cloudflare-nginx (PHP/5.4.37)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.