home

gonzalo.cachefly.net

CacheNetworks, LLC

Domain Information

The domain gonzalo.cachefly.net registered by CacheNetworks, LLC was initially registered in February of 2005 through TUCOWS DOMAINS INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States.
Registrar:
TUCOWS DOMAINS INC.

Server location:
Illinois, United States (US)

Create date:
Thursday, February 24, 2005

Expires date:
Friday, February 24, 2017

Updated date:
Tuesday, February 23, 2016

ASN:
AS30081 CACHENETWORKS - CacheNetworks, Inc.

Root domain:
cachefly.net

Whois:
1 cachefly.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/InstallCore.AEO.gen potentially unwanted application, Win32/InstallCore.ACY.gen potentially unwanted application
100.00%

Reason Heuristics
PUP.installCore (M)
100.00%

The domain gonzalo.cachefly.net has been seen to resolve to the following IP address.

205.234.175.175
vip1.g.cachefly.net
December 23, 2015

File downloads found at URLs served by gonzalo.cachefly.net.

2 / 68      (PUP)
http://gonzalo.cachefly.net/.../installer.exe  (не подтвержден 482259.crdownload)

2 / 68      (PUP)
http://gonzalo.cachefly.net/.../installer.exe  (19be0004507c278a1fca732149efe0a6)

The following 197 files have been seen to comunicate with gonzalo.cachefly.net in live environments.

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:443
binkiland.exe

TCP » 205.234.175.175:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
da1cbd75-84f6-4908-bec8-64d6e44d60bb-10.exe (Ge-Force by Webar)

TCP » 205.234.175.175:443
browser.exe (speed browser by Smart Applications)

TCP » 205.234.175.175:80
webfreer.exe (Web Freer by Appaxy)

TCP » 205.234.175.175:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:443
browser.exe (speed browser by Smart Applications)

TCP » 205.234.175.175:443
browser.exe (Browser)

TCP » 205.234.175.175:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:80
6054.exe (SavePass 1.1 by OB)

TCP » 205.234.175.175:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:80
irsetup.exe (Setup Factory Runtime by Indigo Rose)

TCP » 205.234.175.175:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 267 files

URL:
http://gonzalo.cachefly.net/

SSL certificate subject:
CN=*.cachefly.net, O=CacheNetworks LLC, L=Chicago, S=Illinois, C=US

SSL certificate issuer:
CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Web server:
CFS 0213

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.