home

download.nerobackitup.com

Nero AG

Domain Information

The domain download.nerobackitup.com registered by Nero AG was initially registered in April of 2002 through CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM. The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM

Server location:
Washington, United States (US)

Create date:
Monday, April 8, 2002

Expires date:
Saturday, April 8, 2017

Updated date:
Friday, March 4, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
nerobackitup.com

Whois:
2 nerobackitup.com records

The domain download.nerobackitup.com has been seen to resolve to the following 40 IP addresses.

52.85.131.202
server-52-85-131-202.iad53.r.cloudfront.net
June 5, 2016

52.85.131.144
server-52-85-131-144.iad53.r.cloudfront.net
June 5, 2016

52.85.131.140
server-52-85-131-140.iad53.r.cloudfront.net
June 5, 2016

52.85.131.109
server-52-85-131-109.iad53.r.cloudfront.net
June 5, 2016

52.85.131.99
server-52-85-131-99.iad53.r.cloudfront.net
June 5, 2016

52.85.131.77
server-52-85-131-77.iad53.r.cloudfront.net
June 5, 2016

52.85.131.38
server-52-85-131-38.iad53.r.cloudfront.net
June 5, 2016

52.85.131.252
server-52-85-131-252.iad53.r.cloudfront.net
June 5, 2016

52.85.131.68
server-52-85-131-68.iad53.r.cloudfront.net
April 19, 2016

52.85.131.36
server-52-85-131-36.iad53.r.cloudfront.net
April 19, 2016

52.85.131.232
server-52-85-131-232.iad53.r.cloudfront.net
April 19, 2016

52.85.131.219
server-52-85-131-219.iad53.r.cloudfront.net
April 19, 2016

52.85.131.159
server-52-85-131-159.iad53.r.cloudfront.net
April 19, 2016

52.85.131.157
server-52-85-131-157.iad53.r.cloudfront.net
April 19, 2016

52.85.131.138
server-52-85-131-138.iad53.r.cloudfront.net
April 19, 2016

52.85.131.89
server-52-85-131-89.iad53.r.cloudfront.net
April 19, 2016

54.192.195.137
server-54-192-195-137.iad53.r.cloudfront.net
February 1, 2016

54.192.195.29
server-54-192-195-29.iad53.r.cloudfront.net
February 1, 2016

54.192.195.13
server-54-192-195-13.iad53.r.cloudfront.net
February 1, 2016

54.192.195.7
server-54-192-195-7.iad53.r.cloudfront.net
February 1, 2016

54.192.195.4
server-54-192-195-4.iad53.r.cloudfront.net
February 1, 2016

54.192.195.198
server-54-192-195-198.iad53.r.cloudfront.net
February 1, 2016

54.192.195.179
server-54-192-195-179.iad53.r.cloudfront.net
February 1, 2016

54.192.195.156
server-54-192-195-156.iad53.r.cloudfront.net
February 1, 2016

54.192.195.130
server-54-192-195-130.iad53.r.cloudfront.net
January 5, 2016

54.192.195.120
server-54-192-195-120.iad53.r.cloudfront.net
January 5, 2016

54.192.195.108
server-54-192-195-108.iad53.r.cloudfront.net
January 5, 2016

54.192.195.94
server-54-192-195-94.iad53.r.cloudfront.net
January 5, 2016

54.192.195.61
server-54-192-195-61.iad53.r.cloudfront.net
January 5, 2016

54.192.195.249
server-54-192-195-249.iad53.r.cloudfront.net
January 5, 2016

 
Showing 30 of 40 IP Addresses

File downloads found at URLs served by download.nerobackitup.com.

0 / 68
http://download.nerobackitup.com/.../BackItUp_cb-31171_1.0.6.0_generic-pad.exe  (backitup_ie_1.0.6.0.exe)

0 / 68
http://download.nerobackitup.com/.../BackItUp_chrome_1.0.6.0.exe  (backitup_ie_1.0.6.0.exe)

0 / 68
http://download.nerobackitup.com/.../BackItUp_ie_1.0.6.0.exe  (8a64ac15c845bfc06728ee89685ee41e)

0 / 68
http://download.nerobackitup.com/.../BackItUp_chrome_1.0.4.4.exe  (nero_backitup_setup-1.0.4.4_free.exe)

0 / 68
http://download.nerobackitup.com/.../BackItUp_chrome_1.0.5.2.exe  (backitup_ff_1.0.5.2.exe)

The following 5 files have been seen to comunicate with download.nerobackitup.com in live environments.

TCP » 54.192.195.94:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.120:443
onlineguardian-v2.exe

TCP » 52.85.131.252:443
browser.exe (Browser)

TCP » 54.192.195.94:443
online-guardian.exe

TCP » 52.85.131.252:80
browser.exe (Browser)

TCP » 54.192.195.249:443
onlineguardian-v2.exe

TCP » 54.192.195.7:443
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

URL:
http://download.nerobackitup.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.