ttb.lpmxp2111.com

Only contact by email, all postal mail will be rejected  (Proxy Registrant)

Domain Information

The domain ttb.lpmxp2111.com is registered by proxy through SOLUCIONES CORPORATIVAS IP,SLU and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Vitoria-Gasteiz, Pais Vasco within Spain which resides on the RIPE Network Coordination Centre network.
Registrar:
SOLUCIONES CORPORATIVAS IP,SLU

Server location:
Pais Vasco, Spain (ES)

Create date:
Thursday, August 7, 2014

Expires date:
Sunday, August 7, 2016

Updated date:
Sunday, August 9, 2015

ASN:
AS57910 SCIP-AS Soluciones Corporativas IP, SL,ES

Root domain:

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DigitalPluginSl.G, PUP.Installer.DigitalPluginSl.M, PUP.Installer.DigitalPluginSl.F, PUP.Installer.DigitalPluginSl.K, PUP.Softpulse.DigitalPluginSl.Bundler (M), PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse (M), PUP.Softpulse.Bundler (M)
96.88%

ESET NOD32
Win32/SoftPulse.J potentially unwanted application, Win32/SoftPulse.B potentially unwanted application, MSIL/NewPlayer.D potentially unwanted application
34.38%

Dr.Web
Trojan.DownLoader11.24441, Adware.SoftPules.3, Trojan.DownLoader11.24441, Trojan.DownLoader11.36367
31.25%

VIPRE Antivirus
Threat.4783235, Threat.4783262, Threat.4150696
31.25%

Sophos
SoftPulse, Smart Secure Software, PUA 'SoftPulse' (of type Adware)
31.25%

Avira AntiVirus
TR/Dropper.Gen, APPL/Softpulse.oanm, APPL/Softpulse.B
28.13%

NANO AntiVirus
Trojan.Win32.DownLoader11.ddvhzo, Trojan.Win32.DownLoader11.ddviag, Trojan.Win32.Agent.dhawww
28.13%

AVG
Win32/DH{gRJ+UIEHeVRPFVGBFYEJHFOBE0GBDw}, Win.Threat.High, Found Win32/DH{gRJ UIEHeVRPFVGBFYEJHFOBE0GBDw}, Generic
28.13%

avast!
Win32:GenMalicious-HN [PUP], Win32:SoftPulse-X [PUP], Win32:SoftPulse-AH [PUP]
25.00%

Kaspersky
not-a-virus:AdWare.Win32.Agent, not-a-virus:Downloader.Win32.Agent, not-a-virus:AdWare.Win32.SoftPulse
25.00%

McAfee
Socrydo, Program.Socrydo, Program.SoftPulse
25.00%

AhnLab V3 Security
PUP/Win32.DomaIQ, PUP/Win32.SoftPulse
25.00%

K7 AntiVirus
Unwanted-Program
21.88%

Agnitum Outpost
Riskware.Agent
21.88%

Malwarebytes
PUP.Optional.DomaIQ.Gen
21.88%

The domain ttb.lpmxp2111.com has been seen to resolve to the following 7 IP addresses.

www.renewyourexpireddomain.com
August 11, 2015

ec2-54-68-93-108.us-west-2.compute.amazonaws.com
December 1, 2014

ec2-54-148-246-124.us-west-2.compute.amazonaws.com
December 1, 2014

ec2-54-69-13-93.us-west-2.compute.amazonaws.com
December 1, 2014

ec2-54-201-55-228.us-west-2.compute.amazonaws.com
December 1, 2014

ec2-54-186-80-234.us-west-2.compute.amazonaws.com
August 22, 2014

ec2-54-191-142-255.us-west-2.compute.amazonaws.com
August 19, 2014

File downloads found at URLs served by ttb.lpmxp2111.com.

 
Latest 30 of 34 download URLs

The following file have been seen to comunicate with ttb.lpmxp2111.com in live environments.

URL:
http://ttb.lpmxp2111.com/

Google Analytics:
UA-1141889

Title:
“ ”

Web server:
Apache/2.2.22 (Debian)

30 of 147 related domains