» likeloadfastover.org
Overview
Analysis
IPs Addresses (5)
Downloads (73)
Subdomains (10)
Website Detail

likeloadfastover.org

Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)

Domain Information

The domain likeloadfastover.org is registered by proxy through Registrar of Domain Names REG.RU LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.

Registrant:

Privacy Protection Service INC d/b/a PrivacyProtect.org

Registrar:

Registrar of Domain Names REG.RU LLC

Server location:

Luxembourg, Luxembourg (LU)

ASN:

AS57062 SERVERCLUB-AS ServerClub Inc, US

Whois:

1 likeloadfastover.org record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ICLoader.TEHNOARH (M), PUP.InstallCube.TKSSERVI (M), PUP.ICLoader.TEPLOONL (M), PUP.InstallCube.TREYSNK (M), PUP.InstallCube.WEBINSID, PUP.InstallCube.INFORMTO, PUP.InstallCube.WEBINSID (M), PUP.InstallCube.Bebihost (M), PUP.VORKEZ (M), PUP.InstallCube.GEHTSOFT (M), PUP.InstallCube.INFORMTO (M), PUP.ICLoader.Softstor (M), PUP.InstallCube.PROFITO (M), PUP.InstallCube.KOMPIUM (M), PUP.InstallCube.NOUT45 (M), PUP.InstallCube.INVENTOS (M), PUP.InstallCube (M), Adware.Bundler (M), Adware.Bundler.SR (M), PUP.ICLoader (M), PUP (M)

98.00%

Dr.Web

Trojan.InstallCube.1104, Trojan.InstallCube.1284

12.00%

Norman

Gen:Variant.Barys.54295, Gen:Variant.Symmi.63200

8.00%

F-Secure

Variant.Barys.54295, Variant.Symmi.63200

6.00%

Emsisoft Anti-Malware

Gen:Variant.Barys.54295, Gen:Variant.Symmi.63200

4.00%

ESET NOD32

Win32/Kryptik.EZDZ trojan, Win32/Adware.ICLoader.MB application

4.00%

avast!

Win32:Malware-gen

2.00%

Microsoft Security Essentials

Threat.Undefined

2.00%

The domain likeloadfastover.org has been seen to resolve to the following 5 IP addresses.

188.42.251.65

June 19, 2016

188.42.242.67

evidence.croymbacer.com

May 18, 2016

188.42.242.118

r1-1-29.mta2-gene.com

April 14, 2016

188.42.242.156

ascopening.net

April 4, 2016

188.42.244.82

March 3, 2016

File downloads found at URLs served by likeloadfastover.org.

1 / 68 (Malware)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=221719056&token=80e6cdbd9e6ecf13e1c507d0ce9afd4d&return_url=http://.../icq.exe&source=&format=json (8db56fc812561a45fff9789dc666ca10)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=246515227&token=06f8b9f1572d59fc729acadaca99fe77&return_url=http://.../icq.exe&source=&format=json (topcat_2.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=232942573&token=5149450ccd321ee1b9faec66d0e9e4c9&return_url=http://.../icq.exe&source=&format=json (9ef7be7e5d3571afbef82750d5748eff)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=225938648&token=c50aad7b764b9efb61af18a2adb7058e&return_url=http://.../icq.exe&source=&format=json (eafd971a7310fbe63faf54af447a53ee)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=245613940&token=2919bffd214abbd8c075352f8ad40c63&return_url=http://.../icq.exe&source=&format=json (32dc1e00b590924ed8be3c2c9a5fb7cd)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=229994198&token=c59d749d089360f3c722820bc8604565&return_url=http://94.250.254.184/.../dragonmount_r38_mc1.7.x.zip&source=&format=json (dragonmount_r38_mc1_7_x.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=238677623&token=a71e748628f9aa0d6378c2edf69bdac4&return_url=http://.../icq.exe&source=&format=json (stm8l.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=228018501&token=ab5d4cb8a17a6f92efe8ced34fc076b4&return_url=http://.../icq.exe&source=&format=json (c5e770f9c6e85bc71aa44ae832435e61)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=233115126&token=9cade682db0488f5fe6505f61d91b64e&return_url=http://www.aim-cs.net/uploads/files/.../1445228665_glowin-by-tony-and-jme.rar&source=&format=json (1445228665_glowin-by-tony-and-jme.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=233115335&token=0ed1c43b904b0d172190c31c90d79e13&return_url=http://www.aim-cs.net/uploads/files/.../1445228665_glowin-by-tony-and-jme.rar&source=&format=json (1445228665_glowin-by-tony-and-jme.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=233115730&token=3beb5e578e0fc940c47e975c3d834d93&return_url=http://www.aim-cs.net/uploads/files/.../1445228665_glowin-by-tony-and-jme.rar&source=&format=json (1445228665_glowin-by-tony-and-jme.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=243000122&token=b3f6194104d4cf306384be900eefee87&return_url=http://.../icq.exe&source=&format=json (f7955c96380380e205f2fb9e402352dc)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=241359182&token=0821afda6f5804c9f5113e1339ea769c&return_url=http://.../icq.exe&source=&format=json (80be58af4684b19fe8c6b08e0506d8dd)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=250482162&token=5a44333a4d85c9485761d5ca6e85359a&return_url=http://.../icq.exe&source=&format=json (x64e_rpf.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=234807218&token=fa8db07f4234c6e97bc9011db140d7dc&return_url=http://.../icq.exe&source=&format=json (546ee595efaaba546bdc272a196c6fad)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=247813624&token=6e448b290a435a6338c080d97beeae3a&return_url=http://.../icq.exe&source=&format=json (57548deb3a1e64676cfde77675a6e082)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=233788960&token=e68207e1a631db3adcc1c65a1866722e&return_url=http://.../icq.exe&source=&format=json (m3_raw_drive_recovery.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=242955069&token=3dc30526bd687e982335b4a26bb8f8d5&return_url=http://.../icq.exe&source=&format=json (2e58139ee83c5132270c0303fa7b91b2)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=239369531&token=69336fdb8fc230c11f70a3e0cab8e3bc&return_url=http://94.250.254.184/.../IndustrialCraft2[1.5.2].zip&source=&format=json (industrialcraft2_1_5_2.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=237734984&token=9d1ea54cc440074dc53910946ae4ae8f&return_url=http://.../icq.exe&source=&format=json (hfss_15_torrent.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=243713923&token=a688311a0506dfb0d24c00293ae1bca1&return_url=http://.../icq.exe&source=&format=json (10eea5f94b0d037fcbbb449132d262e4)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=233036806&token=dfe7dc9aa91aeb0d62623f7b2caec908&return_url=http://.../icq.exe&source=&format=json (fb14a0ba7665e06b6edf564a0d218bd2)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=248567892&token=e4dded730a6fb7f57eca6d48b1c5a173&return_url=http://.../icq.exe&source=&format=json (b3c803ae0194dc86cf235551549bab63)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=239084207&token=c5c05a920fec9e79ac05ad6557302519&return_url=http://.../icq.exe&source=&format=json (8cb23a17fb63e58c2d9613ae9e6688c1)

4 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=240380415&token=c2f52e6e637c0cd1361d47506497fea3&return_url=http://.../icq.exe&source=&format=json (2eab29b37831e9b6648e991f7b08bb4b)

4 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=240380550&token=d7183e709562babca3185ebe2abc7653&return_url=http://.../icq.exe&source=&format=json (5274b20f3d8815fc1170eb3341ef226a)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=242189467&token=5716c01e2bb9111dc3a7e1e42833b226&return_url=http://94.250.254.184/.../minecraft170.zip&source=&format=json (minecraft170.exe)

4 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=251107630&token=03976f9b995f79136e91670a90e966f1&return_url=http://.../icq.exe&source=&format=json (2fbb6c074bd8174ad6c7bf3c00bcf431)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=249496080&token=d937f19530a302f810587e989c8bb856&return_url=http://94.250.254.184/.../minecraft 1.5.2 klient.zip&source=&format=json (minecraft_1_5_2_klient.exe)

1 / 68 (PUP)

http://likeloadfastover.org/api/web/getInstaller?transaction_id=241729217&token=bb8f7c0cf5cca58637e967048c2ddf64&return_url=http://.../icq.exe&source=&format=json (df0879d825c5c2dc182830a846840848)

Latest 30 of 73 download URLs

Subdomains

May 23, 2016

333c17b6b67b14a638ee5298.likeloadfastover.org

March 3, 2016

371e8910a1e89f7fafb55c01.likeloadfastover.org

April 16, 2016

5ee58d37ffb71f391ac3a4a1.likeloadfastover.org

May 25, 2016

72ddbb7d0249d264f476e068.likeloadfastover.org

July 4, 2016

7cb0e7bf15a30263978aa9da.likeloadfastover.org

May 22, 2016

92db2aa318f49c1b796e0c85.likeloadfastover.org

May 22, 2016

a5255bb743f6aaa8de683f360b6dc78f.likeloadfastover.org

August 22, 2016

be4561e9b0c13a1e514affbd.likeloadfastover.org

April 14, 2016

c8c05acfe90c3d4b53a24b86.likeloadfastover.org

July 27, 2016

d921d61f99012be098b77e17.likeloadfastover.org

URL:

http://likeloadfastover.org/

Web server:

nginx (PHP/5.6.15-1~dotdeb+7.1)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.