ttb.lpcloudsvr305.com

Ron Castleman

Domain Information

The domain ttb.lpcloudsvr305.com registered by Ron Castleman was initially registered in May of 2015 through SOLUCIONES CORPORATIVAS IP,SLU. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Monday, May 04, 2015

Expires date:
Wednesday, May 04, 2016

Updated date:
Sunday, February 28, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.TuguuIsrael.M, PUP.Tuguu.TuguuIsrael.Bundler (M), PUP.Tuguu.TuguuIsr.Bundler (M)
100.00%

AVG
Adware Skodna.Generic_r.IA
33.33%

avast!
Win32:DomaIQ-CM [PUP]
33.33%

VIPRE Antivirus
Threat.4783235
33.33%

Dr.Web
Trojan.PayInt.14
33.33%

Kaspersky
not-a-virus:AdWare.Win32.DomaIQ
33.33%

ESET NOD32
Win32/DomaIQ.AU potentially unwanted application
33.33%

MicroWorld eScan
Application.Bundler.DomaIQ.C
33.33%

Quick Heal
Adware.Domal.A5
33.33%

McAfee
Adware-DomaIQ!780291FDEE5F
33.33%

Malwarebytes
PUP.Optional.BundleInstaller.A
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

K7 Gateway Antivirus
Unwanted-Program
33.33%

Agnitum Outpost
PUA.DomaIQ
33.33%

F-Prot
W32/DomaIQ.B.gen
33.33%

The domain ttb.lpcloudsvr305.com has been seen to resolve to the following 3 IP addresses.

July 5, 2016

ec2-50-112-177-75.us-west-2.compute.amazonaws.com
June 9, 2014

ec2-54-201-201-245.us-west-2.compute.amazonaws.com
June 9, 2014

File downloads found at URLs served by ttb.lpcloudsvr305.com.

The following 2 files have been seen to comunicate with ttb.lpcloudsvr305.com in live environments.