home

a.mysticed.xyz

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
mysticed.xyz

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

F-Secure
Gen:Variant.Adware.MPlug
100.00%

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

avast!
Win32:FakeDownload-E [PUP]
100.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.MPlug.38
100.00%

McAfee
Program.MultiPlug-FWG
100.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.MPlug.38
100.00%

Sophos
PUA 'MultiPlug' (of type Adware)
100.00%

MicroWorld eScan
Gen:Variant.Adware.MPlug.38
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Trojan.Win32.XPACK.drbbty
100.00%

F-Prot
W32/S-d27945fd
100.00%

Bitdefender
Gen:Variant.Adware.MPlug.38
100.00%

Avira AntiVirus
TR/Crypt.XPACK.Gen
100.00%

G Data
Gen:Variant.Adware.MPlug.38
100.00%

AhnLab V3 Security
PUP/Win32.MultiPlug
100.00%

The domain a.mysticed.xyz has been seen to resolve to the following 2 IP addresses.

54.149.241.47
ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 6, 2015

54.69.228.231
ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 6, 2015

File downloads found at URLs served by a.mysticed.xyz.

19 / 68    (PUP)
http://a.mysticed.xyz/hp/?q=lKcYU7SNa7EyZ789/XQJ0FvomhBgUhdqbpfBqfM52l5PsPsXv SpuR5LoaysqaWkSGaDYgRHQ6mhGWCXwU80K27oBhYzhddWkwT92rK/9JEn5y6UJz8fmlLDBG8pGNRBZX4jgsGDqF8oYg4UcxaY7g9nWzep1uosFIRnWbweP3mfZVM9Skjz kJiwD80uCUrhOfd0jlRkw1H20EO9HEm8/AQfqI mCt2b8EN4sPPEQi9vI2ICtkfj/X4LZLZj CmqTihcQN5v/gi4uhNELnxqJU7W0R3SVr3aLMsHbpn8o0HseiSC4Hqjv8aUKZZVE34GlmuPwjAdn1XZdsm0eMq1u LdxBs5kK8IcvEtQ0ZDWR1id/rfcc4KGXeAvmtiGeHe5AKRxQq0KHAb3P5rhgk0f73ObZCYyQR3Uq9g K6V/Ev4q5JQY7Awefw8ml7IeDJYekhs4IDIOVSCzxI/gXoxSG8J5LwKb9TeNnO0unsgU131Lp7wWSxye4p6WqdYikBKMQEWVj2vzQOXb7D1FxyJrnh6gML0qRJfyMWwVouVYSzCf2tgT4U7E2A3sCATJshF9CJ7Dj1D094kjVwRH51sODoTAHKF1aQhxWl/mb1o0QN7Fge M I80d3MGLRuzwpy5YsqLDbfzR21CaifoTzekQa82Jjttvutmhq/Sk7RDY7/BDpb/MDlltxNZsIZENR0GjZDLLuH03o6z49MWE2y8NByDCz5rEaLStAxU6YcONruR58/wlLCaXAS3ERlle/k68KTuiw4SqIJGADrKsaaF1fTX/mg DqCasnWBmrZLbdLoWA2FPoiJHeTp/PJBBRGofJwLb9hXq5nulospngbpS0qT/.../fjL5bcJ0SVMmEUe9a663v318ohVIolvV5MsxEMP6Ri PJ61EKzpu1nQRM nBBVZaQGadPQsEXiKyEwp53IC0hp91myLAjp0MBh  (selma.2014.french.bdrip.xvid-destroy.zone-telechargement.com.exe)

The following 3 files have been seen to comunicate with a.mysticed.xyz in live environments.

TCP » 54.149.241.47:80
papers please v1.0.41 setup.exe

TCP » 54.149.241.47:80
installer_game develop.exe

TCP » 54.69.228.231:80
download.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.