home

down.plaxo.com

Comcast Corporation

Domain Information

The domain down.plaxo.com registered by Comcast Corporation was initially registered in May of 2001 through CSC CORPORATE DOMAINS, INC.. The hosted servers are located in Mountain View, California within the United States which resides on the Plaxo Incorporated network.
Registrar:
CSC CORPORATE DOMAINS, INC.

Server location:
California, United States (US)

Create date:
Wednesday, May 16, 2001

Expires date:
Tuesday, May 16, 2017

Updated date:
Wednesday, May 13, 2015

ASN:
AS36212 PLAXOASN-1 - Plaxo Incorporated,US

Root domain:
plaxo.com

Whois:
2 plaxo.com records

The domain down.plaxo.com has been seen to resolve to the following IP address.

204.15.241.191
down.plaxo.com
May 30, 2014

File downloads found at URLs served by down.plaxo.com.

0 / 68
http://down.plaxo.com/down2/ol4/.../PlaxoInstall_en.exe  (2f6933a9e302bf2e0fab63d700417f26)

0 / 68
http://down.plaxo.com/down2/ol4/.../PlaxoInstall_en.exe  (6ff485366f4d06f61c26d657f244ae3e)

1 / 68      (inconclusive)
http://down.plaxo.com/down2/ol4/.../PlaxoInstall_en.exe  (e1383e66bd3b61fb4521f38ba9e11871)

1 / 68      (inconclusive)
http://down.plaxo.com/down2/ol4/.../PlaxoInstall_en.exe  (88647d9d8a4e5d94aa1fb60ac998c455)

0 / 68
http://down.plaxo.com/down2/wm/.../plaxo-smph-wm5-1.4.3.exe  (8eadd6c0b9e638897713a05e96f792dc)

0 / 68
http://down.plaxo.com/down2/outlook/.../PlaxoInstall_en.exe  (bf3b4db40b0d8f0b600ad72ec21cbd53)

0 / 68
http://down.plaxo.com/down2/outlook/.../PlaxoInstall_en.exe  (5f77f9e1deb2a4b44e2b641171af105c)

0 / 68
http://down.plaxo.com/down2/outlook/.../PlaxoInstall_en.exe  (f4ca2c590ada55adfc399eddaff8a620)

0 / 68
http://down.plaxo.com/down2/outlook/.../PlaxoInstall_fr.exe  (ea7598b0ac8738fff2676336df5daf2a)

The following file have been seen to comunicate with down.plaxo.com in live environments.

TCP » 204.15.241.191:80
plaxohelper_en.exe (Plaxo Integration for Windows Mail, Windows Live Mail, and Outlook Express by Plaxo)

URL:
http://down.plaxo.com/

SSL certificate subject:
CN=*.plaxo.com, OU=Domain Control Validated

SSL certificate issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc."

Web server:
lighttpd

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.