home

5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com

Rackspace US, Inc.

Domain Information

The domain 5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com registered by Rackspace US, Inc. was initially registered in December of 2010 through CSC CORPORATE DOMAINS, INC.. The hosted servers are located in New York City, New York within the United States which resides on the NTT America, Inc. network.
Registrar:
CSC CORPORATE DOMAINS, INC.

Server location:
New York, United States (US)

Create date:
Wednesday, December 15, 2010

Expires date:
Thursday, December 15, 2016

Updated date:
Saturday, December 12, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
rackcdn.com

Whois:
1 rackcdn.com record

The domain 5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com has been seen to resolve to the following 6 IP addresses.

72.246.64.137
a72-246-64-137.deploy.akamaitechnologies.com
April 16, 2016

72.246.64.136
a72-246-64-136.deploy.akamaitechnologies.com
April 16, 2016

165.254.32.82
host82.akamai.com
February 23, 2016

165.254.32.138
host138.akamai.com
February 23, 2016

67.135.105.25
January 3, 2016

67.135.105.10
January 3, 2016

File downloads found at URLs served by 5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com.

0 / 68
http://5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com/RevoUninProSetup.exe  (63b148154570d8bc763c77575fd856a5)

0 / 68
http://5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com/RevoUninProSetup.exe  (39b05dbf9be289f2bf6ce9eea8fd7e1c)

1 / 68      (PUP)
http://5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com/RevoUninProSetup.exe  (6_offer_5.exe)

0 / 68
http://5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com/RevoUninProSetup.exe  (cfa5dd4880cc8c0eb30ea6610af45ad3)

The following 5 files have been seen to comunicate with 5ca27dd3e35fe7e38ae6-d9a75148fef9c34a3188996bd1f66f37.r15.cf1.rackcdn.com in live environments.

TCP » 72.246.64.137:80
neurowise.browseradapter.exe

TCP » 72.246.64.137:80
genieutils.exe

TCP » 72.246.64.137:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 165.254.32.82:80
Policies.exe (Policies)

TCP » 72.246.64.136:80
avgmfapx.exe (AVG Internet Security by AVG Technologies CZ, s.r.o)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.