www.lpmxp23.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.lpmxp23.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Monday, July 20, 2015

Expires date:
Wednesday, July 20, 2016

Updated date:
Thursday, January 07, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DigitalPluginSL.F, PUP.Installer.DigitalPluginSL.M, PUP.Softpulse.DIGITALPLUGINSL.Bundler (M), PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.Softpulse.Sambamedia.Bundler (M), PUP.Softpulse.DIGITALP.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse (M)
96.00%

VIPRE Antivirus
Threat.4783235, Threat.4763461
16.00%

ESET NOD32
Win32/SoftPulse.B potentially unwanted application, Win32/VB.OSK trojan
16.00%

avast!
Win32:Adware-BRD [PUP], Win32:Adware-BRE [PUP], Win32:VB-OJQ [Wrm]
16.00%

Dr.Web
Trojan.Packed.26956, Trojan.Packed.26972, Trojan.Siggen6.54687
16.00%

McAfee
PUP-FIG!80B7D2700B25, CryptDomaIQ
12.00%

Agnitum Outpost
Riskware.Agent, PUA.Downloader
12.00%

Sophos
SoftPulse
12.00%

Comodo Security
Application.Win32.Softpulse.A
12.00%

McAfee Web Gateway
PUP-FIG!80B7D2700B25, CryptDomaIQ
12.00%

Antiy Labs AVL
Trojan/Win32.TSGeneric, RiskWare[Downloader:not-a-virus]/Win32.Agent
12.00%

G Data
Win32.Application.SoftPulse, Gen:Variant.Application.Bundler
12.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Downloader.Agent
12.00%

IKARUS anti.virus
PUA.Generic, PUA.SoftPulse
12.00%

AVG
Generic
12.00%

The domain www.lpmxp23.com has been seen to resolve to the following 8 IP addresses.

ip-50-63-202-66.ip.secureserver.net
August 4, 2016

ip-50-63-202-5.ip.secureserver.net
May 25, 2016

April 14, 2016

April 10, 2016

April 4, 2016

January 31, 2016

ec2-50-112-168-194.us-west-2.compute.amazonaws.com
July 3, 2014

ec2-54-201-141-37.us-west-2.compute.amazonaws.com
June 5, 2014

File downloads found at URLs served by www.lpmxp23.com.

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (96fcb1dbb639624635ac8517467b3f11)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (2bb56eb6ba09ce9c31a623439d1d0f8f)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (c13ed10e4159ebaa2004857da8c9bfb8)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (f7c9a5b86d151a0ad104a3cc1093030d)

6 / 68      (Malware)
http://www.lpmxp23.com/.../Setup.exe  (c76cd76f603fd169d0e085368d4bcae3)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (e035dc351e159e7eec97aa04cc08a084)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (bff6e166bbc99e93b27fa3444c75c498)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Player_Setup.exe  (c2c5525b45ea80fa61f47b285c8b2a7f)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Player_Setup.exe  (8283c8e898bcfaf83f2bd61fa57ea12f)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (dea34ec5066a364b7bbd40b1ed05a8e3)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (e6d064252417912705750b6ecf3a279f)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (75a8674476b0788206c71f1efbdd54ee)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Player_Setup.exe  (f609fc5bd831fc4d0f7e17825150b7db)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (34e29666173a114d0ec11c4885dca694)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (96510dfbb03c6cd58390459bc146cc35)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (8b974de43b38de1ea26c40db18b2c9eb)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (47f176b32750588c79821f3392fff185)

0 / 68
http://www.lpmxp23.com/.../Setup.exe  (fc81e94f2a419b01fa99db77a6eb268b)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (be114266ae3cb6ddb5b29a4efe3c00ac)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (00f5e282118e765291c4b573472d5d2f)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Player_Setup.exe  (ffed512ca85774af24f420b56ba2c933)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (e9923565392ae3d115e186b3d2f48056)

1 / 68      (Adware)
http://www.lpmxp23.com/.../Setup.exe  (1e86747aa498b32ae30195a88872f220)

25 / 68    (Adware)
http://www.lpmxp23.com/.../Setup.exe  (93ddd1c7aee1e72c6077dcc802762e80)

24 / 68    (Adware)
http://www.lpmxp23.com/.../Player_Setup.exe  (6af84feeaede3d224bd8a998347ee82b)

26 / 68    (Adware)
http://www.lpmxp23.com/.../Setup.exe  (fd3743f4a2d9b70f1e18948e1122e29f)

The following 10 files have been seen to comunicate with www.lpmxp23.com in live environments.

URL:
http://www.lpmxp23.com/

Title:
“Loading”

Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4.14)

Facebook:
Shares:  1

Statistics are for the previous month.