ttb.lpmxp2124.com

Whois Foundation

Domain Information

The domain ttb.lpmxp2124.com registered by Whois Foundation was initially registered in January of 2016 through SOLUCIONES CORPORATIVAS IP,SLU. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Tuesday, January 5, 2016

Expires date:
Thursday, January 5, 2017

Updated date:
Tuesday, January 5, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DigitalPluginSl.G, PUP.Installer.DigitalPluginSl.F, PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.Softpulse.SoftpulseSl.Bundler (M), PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.Softpulse.DigitalPluginSl.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Installa.Installer (M), PUP.AdGazelle.Verified.Installer (M), PUP.Bundlore.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.Softpulse (M)
100.00%

avast!
Win32:Malware-gen, Win32:PUP-gen [PUP]
13.79%

VIPRE Antivirus
Threat.4783235, Threat.4150696
13.79%

Dr.Web
Trojan.DownLoader11.28135
13.79%

Avira AntiVirus
TR/Dropper.Gen
13.79%

ESET NOD32
Win32/SoftPulse.J potentially unwanted application
13.79%

McAfee
Socrydo
13.79%

Malwarebytes
PUP.Optional.BundleInstaller.A
13.79%

K7 AntiVirus
Unwanted-Program
13.79%

NANO AntiVirus
Trojan.Win32.SoftPulse.ddzwdt
13.79%

Kaspersky
not-a-virus:AdWare.Win32.Agent, Trojan.Win32.Buzus
13.79%

Agnitum Outpost
PUA.Downloader
13.79%

Sophos
SoftPulse
13.79%

AVG
Win32/DH{gRJ+UIEHeVRPFVGBFYEJHFOBE0GBDw}, Win.Threat.High, Found Win32/DH{gRJ UIEHeVRPFVGBFYEJHFOBE0GBDw}
13.79%

Norman
Malware
10.34%

The domain ttb.lpmxp2124.com has been seen to resolve to the following 7 IP addresses.

.
June 19, 2016

June 6, 2016

May 28, 2016

May 26, 2016

February 12, 2016

ec2-54-69-84-254.us-west-2.compute.amazonaws.com
October 20, 2014

ec2-54-187-228-136.us-west-2.compute.amazonaws.com
September 1, 2014

File downloads found at URLs served by ttb.lpmxp2124.com.

 
Latest 30 of 30 download URLs

URL:
http://ttb.lpmxp2124.com/

Title:
“lpmxp2124.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache