ttb.lpmxp2129.com

Domain Registries Foundation

Domain Information

The domain ttb.lpmxp2129.com registered by Domain Registries Foundation was initially registered in January of 2016 through SOLUCIONES CORPORATIVAS IP,SLU. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Thursday, January 28, 2016

Expires date:
Saturday, January 28, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DigitalPluginSl.G, PUP.Installer.DigitalPluginSl.M, PUP.Installer.DigitalPluginSl.F, PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.Softpulse.DigitalPluginSl.Bundler (M), PUP.Softpulse.PluginUpdate.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.Softpulse (M)
100.00%

VIPRE Antivirus
Threat.4783235, Threat.4150696
13.89%

ESET NOD32
Win32/SoftPulse.H potentially unwanted application, Win32/SoftPulse.K potentially unwanted application, Win32/SoftPulse.R potentially unwanted application
13.89%

McAfee
Socrydo, Program.SoftPulse
13.89%

K7 AntiVirus
Unwanted-Program
13.89%

Kaspersky
not-a-virus:AdWare.Win32.Agent, not-a-virus:Downloader.Win32.Agent, not-a-virus:AdWare.Win32.SoftPulse
13.89%

G Data
Win32.Adware.Softpulse, Gen:Variant.Adware.Strictor.62516, Gen:Variant.Adware.Symmi.46906, Win32.Application.SoftPulse
13.89%

Panda Antivirus
Trj/Genetic.gen
13.89%

AVG
Generic, Found Win32/DH{gRIxfX5QgQd5VE8VUYEVgQkcU4ETQYEP}
13.89%

IKARUS anti.virus
PUA.SoftPulse
11.11%

Emsisoft Anti-Malware
Gen:Variant.Adware.Strictor.62516, Gen:Variant.Adware.Symmi.46906, Gen:Variant.Application.Bundler.SoftPulse
8.33%

avast!
Win32:Malware-gen, Win32:SoftPulse-AH [PUP], Win32:SoftPulse-BE [PUP]
8.33%

MicroWorld eScan
Gen:Variant.Adware.Strictor.62516, Gen:Variant.Adware.Symmi.46906, Gen:Variant.Graftor.166365
8.33%

Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.SmartSec
8.33%

Agnitum Outpost
PUA.Agent, Riskware.Agent
8.33%

The domain ttb.lpmxp2129.com has been seen to resolve to the following 10 IP addresses.

June 18, 2016

June 3, 2016

June 3, 2016

.
May 29, 2016

.
May 28, 2016

May 26, 2016

February 21, 2016

ec2-54-187-228-136.us-west-2.compute.amazonaws.com
September 9, 2014

ec2-54-191-142-255.us-west-2.compute.amazonaws.com
August 23, 2014

ec2-54-186-80-234.us-west-2.compute.amazonaws.com
August 23, 2014

File downloads found at URLs served by ttb.lpmxp2129.com.

 
Latest 30 of 37 download URLs

URL:
http://ttb.lpmxp2129.com/

Title:
“lpmxp2129.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache