24b9c2b31b06c472fcca-681664e3535063ecf3a37aa4fc97770c.r32.cf5.rackcdn.com

Rackspace US, Inc.

Domain Information

The domain 24b9c2b31b06c472fcca-681664e3535063ecf3a37aa4fc97770c.r32.cf5.rackcdn.com registered by Rackspace US, Inc. was initially registered in December of 2010 through CSC CORPORATE DOMAINS, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
CSC CORPORATE DOMAINS, INC.

Server location:
Virginia, United States (US)

Create date:
Wednesday, December 15, 2010

Expires date:
Thursday, December 15, 2016

Updated date:
Saturday, December 12, 2015

ASN:
AS26769 BANDCON - Bandcon,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Wajamu.H, PUP.Wajamu.F, PUP.PassionFruitTech.H, PUP.PassionFruitTech.K
100.00%

ESET NOD32
Win32/Toolbar.BitCocktail (variant)
66.67%

VIPRE Antivirus
Wajamu
50.00%

Dr.Web
Adware.Shopper.423
41.67%

Fortinet FortiGate
W32/Agent.HEXG!tr.dldr, Riskware/Toolbar_BitCocktail
33.33%

Baidu Antivirus
Adware.Win32.BitCocktail, PUA.Win32.BitCocktail
33.33%

MicroWorld eScan
Gen:Variant.Kazy.461155
25.00%

nProtect
Trojan-Downloader/W32.Agent.266064
25.00%

McAfee
Artemis!EAE451558E67
25.00%

Agnitum Outpost
Trojan.DL.Agent
25.00%

Kaspersky
Trojan-Downloader.Win32.Agent
25.00%

Bitdefender
Gen:Variant.Kazy.461155
25.00%

Lavasoft Ad-Aware
Gen:Variant.Kazy.461155
25.00%

Emsisoft Anti-Malware
Gen:Variant.Kazy.461155
25.00%

F-Secure
Gen:Variant.Kazy.461155
25.00%

The domain 24b9c2b31b06c472fcca-681664e3535063ecf3a37aa4fc97770c.r32.cf5.rackcdn.com has been seen to resolve to the following 7 IP addresses.

a72-246-64-139.deploy.akamaitechnologies.com
April 5, 2016

a72-246-64-122.deploy.akamaitechnologies.com
February 9, 2016

a72-246-64-115.deploy.akamaitechnologies.com
February 9, 2016

63-158-227-8.dia.static.qwest.net
January 5, 2016

63-158-227-32.dia.static.qwest.net
January 5, 2016

a96-17-161-130.deploy.akamaitechnologies.com
January 4, 2016

a96-17-161-97.deploy.akamaitechnologies.com
January 4, 2016

File downloads found at URLs served by 24b9c2b31b06c472fcca-681664e3535063ecf3a37aa4fc97770c.r32.cf5.rackcdn.com.

The following file have been seen to comunicate with 24b9c2b31b06c472fcca-681664e3535063ecf3a37aa4fc97770c.r32.cf5.rackcdn.com in live environments.

30 of 38 related domains