ttb.lpcloudsvr305.com
Ron Castleman
Domain Information
The domain ttb.lpcloudsvr305.com registered by Ron Castleman was initially registered in May of 2015 through SOLUCIONES CORPORATIVAS IP,SLU. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC
Server location:
Oregon, United States (US)
Create date:
Monday, May 4, 2015
Expires date:
Wednesday, May 4, 2016
Updated date:
Sunday, February 28, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.TuguuIsrael.M, PUP.Tuguu.TuguuIsrael.Bundler (M), PUP.Tuguu.TuguuIsr.Bundler (M)
100.00%
AVG
Adware Skodna.Generic_r.IA
33.33%
avast!
Win32:DomaIQ-CM [PUP]
33.33%
VIPRE Antivirus
Threat.4783235
33.33%
Dr.Web
Trojan.PayInt.14
33.33%
Kaspersky
not-a-virus:AdWare.Win32.DomaIQ
33.33%
ESET NOD32
Win32/DomaIQ.AU potentially unwanted application
33.33%
MicroWorld eScan
Application.Bundler.DomaIQ.C
33.33%
Quick Heal
Adware.Domal.A5
33.33%
McAfee
Adware-DomaIQ!780291FDEE5F
33.33%
Malwarebytes
PUP.Optional.BundleInstaller.A
33.33%
K7 AntiVirus
Unwanted-Program
33.33%
Agnitum Outpost
PUA.DomaIQ
33.33%
F-Prot
W32/DomaIQ.B.gen
33.33%
Bitdefender
Application.Bundler.DomaIQ.C
33.33%
The domain ttb.lpcloudsvr305.com has been seen to resolve to the following 3 IP addresses.
ec2-50-112-177-75.us-west-2.compute.amazonaws.com
June 9, 2014
ec2-54-201-201-245.us-west-2.compute.amazonaws.com
June 9, 2014
File downloads found at URLs served by ttb.lpcloudsvr305.com.
The following 2 files have been seen to comunicate with ttb.lpcloudsvr305.com in live environments.
