lp002.blupak.com
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain lp002.blupak.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Zurich, Zurich within Switzerland which resides on the RIPE Network Coordination Centre network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Zurich, Switzerland (CH)
Create date:
Wednesday, March 27, 2013
Expires date:
Sunday, March 27, 2016
Updated date:
Monday, May 11, 2015
ASN:
AS19905 NEUSTAR-AS6 - NeuStar, Inc.,US
Scanner detections:
Detections (94% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.BluPakSoftware.Installer (M), PUP.TapGamez.TAPGAMEZ2013.Installer (M), PUP.TapGamez.TapGamez2013.Installer (M), PUP.BluPakSo.Installer (M), PUP.TapGamez.Installe.Installer (M), PUP.TapGamez (M)
100.00%
ESET NOD32
Win32/Adware.TrueDownloader.A application
41.18%
avast!
Win32:Adware-gen [Adw], Win32:Malware-gen
41.18%
VIPRE Antivirus
Threat.5065747
41.18%
K7 AntiVirus
Adware
41.18%
Agnitum Outpost
PUA.TrueDownloader
41.18%
Avira AntiVirus
ADWARE/TrueDownloader.Gen, TR/Agent.386648, Adware/TrueDown.glo, TR/Kazy.kjh
41.18%
IKARUS anti.virus
PUA.TrueDownloader, Trojan.Kazy
41.18%
AVG
Generic, Generic6
41.18%
SUPERAntiSpyware
Trojan.Agent/Gen-Kazy
23.53%
McAfee
Program.PUP-FUS
17.65%
Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.176518
17.65%
Dr.Web
Adware.Downware.9723, Adware.Downware.10581, Adware.Downware.10890
17.65%
F-Secure
Gen:Variant.Adware.Graftor
17.65%
Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.176518
17.65%
The domain lp002.blupak.com has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by lp002.blupak.com.
The following 5 files have been seen to comunicate with lp002.blupak.com in live environments.
URL:
http://lp002.blupak.com/
