The domain install-cdn.lampylighty.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Massachusetts, United States (US)
Create date:
Thursday, March 20, 2014
Expires date:
Tuesday, March 20, 2018
Updated date:
Thursday, March 24, 2016
ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
Adware.Yontoo.BHO.O, PUP.Installer.LampyLighty.Q, PUP.BHO.LampyLighty.O, PUP.LampyLighty.L, PUP.Yontoo.LampyLighty (M), Adware.Yontoo.LampyLighty (M), PUP.Yontoo.LampyLig (M)
100.00%
Malwarebytes
PUP.Optional.LampyLighty.A, PUP.Optional.BPlug
83.33%
NANO AntiVirus
Trojan.Win32.BPlug.dfohwl, Trojan.Win32.BPlug.dfsehz, Trojan.Win32.BPlug.ddwtte, Trojan.Win32.Yontoo.dnkubo
83.33%
Dr.Web
Trojan.BPlug.167, infected with Trojan.BPlug.181, Trojan.BPlug.142, Trojan.Yontoo.1734
83.33%
Baidu Antivirus
Adware.Win32.BrowseFox, Adware.Win64.BrowseFox
83.33%
Qihoo 360 Security
HEUR/Malware.QVM30.Gen, HEUR/Malware.QVM06.Gen, HEUR/QVM42.0.Malware.Gen, HEUR/QVM30.1.Malware.Gen
83.33%
AVG
BrowseFox.F, Adware BrowseFox.F, Generic
66.67%
ESET NOD32
Win32/BrowseFox.O potentially unwanted application, Win32/BrowseFox.C potentially unwanted application
58.33%
G Data
NSIS.Application.BrowseFox, Adware.BrowseFox, Adware.BrowseFox.AP, Adware.BrowseFox.BQ
58.33%
Comodo Security
Application.Win32.BrowseFox.JM, ApplicUnwnt
50.00%
Avira AntiVirus
ADWARE/BrowseFox.Gen2
50.00%
AhnLab V3 Security
PUP/Win32.BrowseFox, Adware/Win32.BrowseFox
50.00%
Sophos
Generic PUA EE, Generic PUA DM, Generic PUA LD
41.67%
Fortinet FortiGate
Riskware/BrowseFox, Adware/BrowseFox
41.67%
VIPRE Antivirus
Threat.4150696, Yontoo
41.67%
The domain install-cdn.lampylighty.com has been seen to resolve to the following 8 IP addresses.
a104-96-220-128.deploy.static.akamaitechnologies.com
May 15, 2016
a104-96-220-104.deploy.static.akamaitechnologies.com
May 15, 2016
a23-15-8-210.deploy.static.akamaitechnologies.com
April 18, 2016
a23-15-8-203.deploy.static.akamaitechnologies.com
April 18, 2016
a23-0-160-33.deploy.static.akamaitechnologies.com
February 28, 2016
a23-0-160-59.deploy.static.akamaitechnologies.com
February 28, 2016
File downloads found at URLs served by install-cdn.lampylighty.com.
The following 167 files have been seen to comunicate with install-cdn.lampylighty.com in live environments.
URL:
http://install-cdn.lampylighty.com/
Web server:
Microsoft-IIS/7.5 (ASP.NET)