home

c15207891.r91.cf2.rackcdn.com

Rackspace US, Inc.

Domain Information

The domain c15207891.r91.cf2.rackcdn.com registered by Rackspace US, Inc. was initially registered in December of 2010 through CSC CORPORATE DOMAINS, INC.. The hosted servers are located in Manhattan, New York within the United States which resides on the Cable & Wireless Americas Operations, Inc. network.
Registrar:
CSC CORPORATE DOMAINS, INC.

Server location:
New York, United States (US)

Create date:
Wednesday, December 15, 2010

Expires date:
Thursday, December 15, 2016

Updated date:
Saturday, December 12, 2015

ASN:
AS1273 CW Cable and Wireless Worldwide plc,GB

Root domain:
rackcdn.com

Whois:
2 rackcdn.com records

The domain c15207891.r91.cf2.rackcdn.com has been seen to resolve to the following 9 IP addresses.

204.188.136.134
rsvd-akamai-134.136.188.204.in-addr.arpa
September 16, 2016

204.188.136.75
rsvd-akamai-75.136.188.204.in-addr.arpa
September 16, 2016

72.246.64.123
a72-246-64-123.deploy.akamaitechnologies.com
August 28, 2016

72.246.64.114
a72-246-64-114.deploy.akamaitechnologies.com
April 4, 2016

72.246.64.120
a72-246-64-120.deploy.akamaitechnologies.com
April 4, 2016

63.158.227.17
63-158-227-17.dia.static.qwest.net
November 18, 2015

63.158.227.49
63-158-227-49.dia.static.qwest.net
November 18, 2015

23.15.9.33
a23-15-9-33.deploy.static.akamaitechnologies.com
September 1, 2014

23.15.9.35
a23-15-9-35.deploy.static.akamaitechnologies.com
September 1, 2014

File downloads found at URLs served by c15207891.r91.cf2.rackcdn.com.

1 / 68      (Adware)
http://c15207891.r91.cf2.rackcdn.com/.../GameNutt_UnlockGames.exe  (88940f1562f7ac19d5c6dc4441ab0ec6)

25 / 68    (inconclusive)
http://c15207891.r91.cf2.rackcdn.com/.../WinZip165.exe  (6c4c1ee67ebc8c90d126715519f20dea)

2 / 68      (inconclusive)
http://c15207891.r91.cf2.rackcdn.com/.../WinZip165_2.exe  (89a4e177de52341367f071765d4dd46b)

0 / 68
http://c15207891.r91.cf2.rackcdn.com/.../Speedtest_TuneUpUtilities2012_en-US.exe  (aef67a725c0d8ab0b5ff0f6c29979785)

0 / 68
http://c15207891.r91.cf2.rackcdn.com/.../PlayPickle_UnlockGames.exe  (529c19fd38e2b654231a241d98f23c81)

8 / 68      (Adware)
http://c15207891.r91.cf2.rackcdn.com/.../MyTopFreeGames_UnlockGames.exe  (6507ed95bd46a6b6cb5364252f7229a3)

6 / 68      (Adware)
http://c15207891.r91.cf2.rackcdn.com/.../PuzzleZone_UnlockGames.exe  (d125aae64dc05ff854c577ad869c2f5b)

0 / 68
http://c15207891.r91.cf2.rackcdn.com/.../Speedtest_TuneUpUtilities2012_en-US_2.exe  (ae54ad835755c811ac0c9be694094aab)

0 / 68
http://c15207891.r91.cf2.rackcdn.com/.../Speedtest_TuneUpUtilities2012_en-US.exe  (d4809be22d5ce929bd2eb05a26f7f093)

10 / 68    (inconclusive)
http://c15207891.r91.cf2.rackcdn.com/.../WinZip165.exe  (d909e4bef67f2987ec442c8a09917ca3)

12 / 68    (inconclusive)
http://c15207891.r91.cf2.rackcdn.com/.../WinZip165.exe  (a3c6f7a567fa33fe2abd378fe31f3856)

The following 14 files have been seen to comunicate with c15207891.r91.cf2.rackcdn.com in live environments.

TCP » 23.15.9.33:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 72.246.64.123:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.246.64.123:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.246.64.120:80
jingling.exe

TCP » 23.15.9.33:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 204.188.136.75:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 204.188.136.134:80
oedbdopeomhfdadjfjalggcfjnfkilbn.crx

TCP » 204.188.136.134:80
dpjljfleopkalhlclefgnhpgphjpoaej.crx

TCP » 204.188.136.134:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 204.188.136.75:80
ggppnjpfgfjnmcjebajljfhpmikjdihj.crx

TCP » 204.188.136.75:80
lkplohlebnaggicbinnajfffmfgegdng.crx

TCP » 23.15.9.35:80
chfpmfingabfmmoennkbpldlobfeleib.crx

TCP » 23.15.9.35:443
beaglebrowser.exe (BeagleBrowser by The BeagleBrowser Authors)

TCP » 72.246.64.114:80
wgetx.exe

TCP » 72.246.64.120:443
myosprotect.exe (MyOSProtect.exe by MyOSCompany)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.