The domain www.lpmxp24.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Arizona, United States (US)
Create date:
Monday, July 20, 2015
Expires date:
Wednesday, July 20, 2016
Updated date:
Thursday, January 7, 2016
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.DIGITALPLUGINSL.M, PUP.Installer.DigitalPluginSL.F, Adware.Generic.AT (M), PUP.Softpulse.DIGITALPLUGINSL.Bundler (M), PUP.Outbrowse.BeStinsTallTLL.Installer (M), PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.Softpulse.Sambamed.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.Outbrowse.OTOPIASo.Bundler (M), PUP.Installa.Installer (M), PUP.Softpulse.DIGITALP.Bundler (M)
100.00%
avast!
Win32:Adware-BRD [PUP], Win32:SoftPulse-P [PUP], Win32:Adware-BRE [PUP]
19.05%
Dr.Web
Trojan.Packed.26956, Adware.Downware.6060
14.29%
VIPRE Antivirus
Threat.4150696, Threat.4783235
14.29%
MicroWorld eScan
Application.Generic.645927, Gen:Variant.Application.Bundler.5, Application.Generic.648150
14.29%
McAfee
CryptDomaIQ, PUP-FIG!E579F1BB585D
14.29%
K7 AntiVirus
Unwanted-Program , Trojan
14.29%
Agnitum Outpost
PUA.Downloader, Riskware.Agent
14.29%
Clam AntiVirus
Win.Trojan.Application-487, Win.Trojan.Application-495
14.29%
Bitdefender
Application.Generic.645927, Gen:Variant.Application.Bundler.5, Application.Generic.648150
14.29%
NANO AntiVirus
Trojan.Win32.MLW.dbbdly, Trojan.Win32.Agent.dbmimq
14.29%
Lavasoft Ad-Aware
Application.Generic.645927, Gen:Variant.Application.Bundler.5, Application.Generic.648150
14.29%
Comodo Security
Application.Win32.Softpulse.A
14.29%
F-Secure
Application.Generic.645927, Gen:Variant.Application.Bundler, Application.Generic.648150
14.29%
The domain www.lpmxp24.com has been seen to resolve to the following 9 IP addresses.
ip-50-63-202-73.ip.secureserver.net
July 31, 2016
ec2-54-244-33-78.us-west-2.compute.amazonaws.com
August 12, 2014
ec2-54-187-235-203.us-west-2.compute.amazonaws.com
August 12, 2014
ec2-54-213-97-204.us-west-2.compute.amazonaws.com
August 7, 2014
ec2-54-186-140-71.us-west-2.compute.amazonaws.com
August 7, 2014
ec2-54-201-233-137.us-west-2.compute.amazonaws.com
July 7, 2014
File downloads found at URLs served by www.lpmxp24.com.
The following 4 files have been seen to comunicate with www.lpmxp24.com in live environments.
URL:
http://www.lpmxp24.com/
Title:
“The checkered past of Groupon’s chairman - Fortune”
Description:
“Groupon's largest shareholder and chairman, Eric Lefkofsky, has a back story investors might want to know.”