home

layfolder.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain layfolder.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Monday, September 29, 2014

Expires date:
Thursday, September 29, 2016

Updated date:
Sunday, October 4, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Whois:
2 layfolder.com records

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Solimba.Bundle.Meta (M), PUP.Solimba.EilioDev (M), PUP.Solimba.Bechiro (M), PUP.Solimba (M), Adware.Solimba.Bundle (M)
97.96%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.04%

F-Secure
Application:W32/Generic.70053c248f!Online
2.04%

The domain layfolder.com has been seen to resolve to the following 10 IP addresses.

50.63.202.39
ip-50-63-202-39.ip.secureserver.net
October 26, 2015

54.165.65.72
ec2-54-165-65-72.compute-1.amazonaws.com
August 16, 2015

52.6.62.98
ec2-52-6-62-98.compute-1.amazonaws.com
August 16, 2015

54.225.127.99
ec2-54-225-127-99.compute-1.amazonaws.com
June 18, 2015

23.21.184.132
ec2-23-21-184-132.compute-1.amazonaws.com
June 18, 2015

23.21.44.29
ec2-23-21-44-29.compute-1.amazonaws.com
May 15, 2015

75.101.136.136
ec2-75-101-136-136.compute-1.amazonaws.com
May 15, 2015

54.243.233.95
ec2-54-243-233-95.compute-1.amazonaws.com
November 29, 2014

23.23.148.223
ec2-23-23-148-223.compute-1.amazonaws.com
November 10, 2014

50.17.180.253
ec2-50-17-180-253.compute-1.amazonaws.com
November 10, 2014

File downloads found at URLs served by layfolder.com.

1 / 68      (Adware)
http://layfolder.com/n/3.1.54/.../Temple Run 2 for PC.exe  (10ef41d490084676aad3b00fa8d3dfcf)

1 / 68      (Adware)
http://layfolder.com/n/3.1.54.0/.../Temple Run 2.exe  (be8a547ee110b57a1636c2b85f1e2c7a)

1 / 68      (Adware)
http://layfolder.com/n/3.1.54.0/.../MixMaster.exe  (7d169945cdf81c83ae8455fb6c74b1ac)

1 / 68      (Adware)
http://layfolder.com/n/3.2.2/.../Corel PaintShop Pro X5.exe  (827eed74e0348af00e856a716fec8eac)

1 / 68      (PUP)
http://layfolder.com/n/3.1.54.0/.../Luxor Evolved.exe  (2df323420a5d91f3bfed80f945200e30)

1 / 68      (Adware)
http://layfolder.com/n/3.1.54.0/.../PowerPoint.exe  (e1c4d88ead08f2a104647a89b4699d1b)

1 / 68      (Adware)
http://layfolder.com/n/.../Samsung Kies for Windows.exe  (dab9c7653d3d4e343a316c9a0c96a7c6)

1 / 68      (Adware)
http://layfolder.com/n/.../Ailt BMP JPG JPEG to Word Converter.exe  (7026f5847676a585700e69101477c2da)

1 / 68      (Adware)
http://layfolder.com/n/3.2.6/.../Sphinx Plus².exe  (2629ef7bcb52b43fb4fad1a54fc118f8)

1 / 68      (Adware)
http://layfolder.com/n/3.2.2/.../Clash of Clans.exe  (3b8face29a1fec7afb09eaa31edd078e)

1 / 68      (Adware)
http://layfolder.com/n/3.1.50/.../MX Player.exe  (492fc3ebb43ce73b09fff1f872cf3a59)

1 / 68      (Adware)
http://layfolder.com/n/3.2.10/.../MomentCam.exe  (53773f85a0326ec969b27b8c51c8d376)

1 / 68      (Adware)
http://layfolder.com/n/3.1.54.0/.../Picsart.exe  (d0feb4f1255a6c317d71ee7656b0f67e)

1 / 68      (Adware)
http://layfolder.com/n/3.2.2/.../Head Soccer for PC.exe  (008c4774c4bc7e1fbdb58651f5d315aa)

1 / 68      (Adware)
http://layfolder.com/n/3.2.6/.../Skype Password.exe  (bbc6f555587f35aa5a8f2ec0dcacbbee)

1 / 68      (Adware)
http://layfolder.com/n/3.1.56/.../Home Designer Suite 2014.exe  (58e6dc2c2574a3ad1addb1b8e5470997)

1 / 68      (Adware)
http://layfolder.com/n/3.2.2/.../GarageBand.exe  (5c5e3e4c9babcbc75724b0835c09bcdc)

1 / 68      (Adware)
http://layfolder.com/n/3.2.10/.../Dream League Soccer for PC Windows.exe  (af352f71db29e5f5c683ad0067a7eab1)

1 / 68      (Adware)
http://layfolder.com/n/3.2.2/.../SmadAv.exe  (dfdc54a139f83dbbc8163b377b6482ca)

1 / 68      (Adware)
http://layfolder.com/n/3.1.54.0/.../Clash of Clans.exe  (3f71ea672907be6dbcd086cd7bb7d174)

1 / 68      (Adware)
http://layfolder.com/n/3.2.10/.../Real Racing 3 for PC.exe  (8cb52cdaa45ef9d9ab71265f358d41cc)

1 / 68      (Adware)
http://layfolder.com/n/3.1.54.0/.../Whats App PC.exe  (ca3992abcd8066f532ac60d97fc3e989)

1 / 68      (Adware)
http://layfolder.com/n/3.1.53/.../microsoft office.exe  (313e78709e1aa842dd61b8f29a382896)

1 / 68      (Adware)
http://layfolder.com/n/3.2.2/.../Whatsapp for Bada.exe  (0f155ae727ee0a72ea62e86ba5d6c90c)

1 / 68      (Adware)
http://layfolder.com/n/3.2.6/.../Talking Tom Cat.exe  (db382730bc9fa4e3f3d5c9638009a80e)

1 / 68      (Adware)
http://layfolder.com/n/3.2.10/.../Microsoft Access.exe  (d282a47c198e7383a266c8a0a6446010)

1 / 68      (Adware)
http://layfolder.com/n/3.2.10/.../Microsoft Office Access 2010.exe  (b272e1bc3f556ee3a4ef7a26eb301516)

1 / 68      (Adware)
http://layfolder.com/n/3.2.6/.../WhatsApp.exe  (288eef8962b6e613daa00e4fed2c22b6)

1 / 68      (Adware)
http://layfolder.com/n/.../Cross Fire.exe  (0af7bb5a3dbbebf5ee6bc7895d3f31b5)

1 / 68      (Adware)
http://layfolder.com/n/3.1.56/.../Angry Birds Epic for PC.exe  (d47cffd1f442f2a900bd809372209d2c)

 
Latest 30 of 133 download URLs

The following 7 files have been seen to comunicate with layfolder.com in live environments.

TCP » 50.63.202.39:80
vcheck.exe (WebGrabber Application)

TCP » 50.63.202.39:80
bfa0d68f.exe (Client Server Runtime Process by Microsoft)

TCP » 50.63.202.39:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.39:25
www.exe

TCP » 50.63.202.39:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 50.63.202.39:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.39:587
w.exe

URL:
http://layfolder.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.