home

rdsa2012.com

INTANGO

Domain Information

The domain rdsa2012.com registered by INTANGO was initially registered in March of 2015 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Monday, March 23, 2015

Expires date:
Thursday, March 23, 2017

Updated date:
Tuesday, February 23, 2016

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Whois:
1 rdsa2012.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DownloadAdmin.Bundler
100.00%

The domain rdsa2012.com has been seen to resolve to the following IP address.

173.192.117.80
173.192.117.80-static.reverse.softlayer.com
July 4, 2016

File downloads found at URLs served by rdsa2012.com.

1 / 68      (PUP)
http://rdsa2012.com/static/lprdr.html?r=http://.../?tp=iw&cid=5301&v=6&clickid=014515475032348762377&cachecode=UBKLM_Rp_IcEKH4QN2P5-Q  (installer_adobe_flash_player_english.exe)

1 / 68      (PUP)
http://rdsa2012.com/static/lprdr.html?r=http://.../?v=316G3249FF&KW=012269514&s1=012269514033743567855  (installer_adobe_flash_player_english.exe)

The following 90 files have been seen to comunicate with rdsa2012.com in live environments.

TCP » 173.192.117.80:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 173.192.117.80:80
stormwatchbrowser.exe

TCP » 173.192.117.80:80
UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80
browser.exe (Browser)

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 173.192.117.80:80
safeguardbrowser.exe

TCP » 173.192.117.80:80
crossbrowser.exe (CrossBrowser by The CrossBrowser Authors)

TCP » 173.192.117.80:80
apptrailers.exe

TCP » 173.192.117.80:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 173.192.117.80:80
kometa.exe (Kometa by Kometa Authors)

TCP » 173.192.117.80:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 173.192.117.80:80
UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80
UCBrowser.exe (by UCWeb)

TCP » 173.192.117.80:80
autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 173.192.117.80:80
Smartbar.exe (Smartbar)

TCP » 173.192.117.80:80
swiftmediaconverterbrowser.exe

TCP » 173.192.117.80:80
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 126 files

URL:
http://rdsa2012.com/

Title:
“Contact Us”

Web server:
nginx

Facebook:
Likes:  8
Shares:  58
Comments:  4

Statistics above are for the previous month of October 2024.

clk1003.com

clk1004.com

clk1005.com

clk1006.com

clk1007.com

clk1008.com

clk1009.com

clk1013.com

clk1014.com

clk1015.com

clkads.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.