Domain > rarlab.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to rarlab.com

MD5	A/V
68ba29879602ea023779cccd18ccbc75	[Packed.Win32.Obfuscated.10!O] [PUP.Optional.InstallMonster] [Trojan.Win32.Inject.hpws]
7eb269ba6911e5b9256d668d7915f733	[Virus*Win32/Sality.R]
c5f104a4ac7782f7366e4bb35db988a0
8b1cb115dba7657a9e186220b235d35c
021a9a5ee1cbbf083b815edebd193c85
76ca0a530f6a48ec3a2be3a2cb870295
557c9f9686bb8708ff58412f1663e671

Whois

Property	Value
Email	327a332cda2310dbedc58e3ba870edfe-163429@contact.gandi.net
NameServer	NS2.RARLAB.COM
Created	2002-04-01 00:00:00
Changed	2014-12-28 00:00:00
Expires	2023-04-01 00:00:00
Registrar	GANDI SAS

DNS Resolutions

Date	IP Address
2011-04-21	217.70.129.242 (ClassC)
2013-08-11	188.138.1.135 (ClassC)
2013-08-11	188.138.1.143 (ClassC)
2013-09-21	188.138.17.58 (ClassC)
2013-10-02	188.138.17.57 (ClassC)
2014-02-20	188.138.17.58 (ClassC)
2014-09-04	188.165.200.151 (ClassC)
2017-11-08	151.139.245.25 (ClassC)
2019-09-08	5.135.104.98 (ClassC)
2025-08-04	51.195.68.162 (ClassC)

HTTP/1.1 200 OKDate: Sun, 08 Sep 2019 21:08:05 GMTServer: ApacheAccept-Ranges: bytesVary: Accept-EncodingCache-Control: max-age30Expires: Sun, 08 Sep 2019 21:08:35 GMTTransfer-Encoding: chunkedContent

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN>html langen>head>meta namedescription contentWinRAR provides the full RAR and ZIP file support, can decompress CAB, GZIP and other archive formats>meta http-equivContent-Type contenttext/html; charsetutf-8>title>WinRAR archiver, a powerful tool to process RAR and ZIP files/title>link hrefstyle.css relstylesheet typetext/css>!--if IE>style typetext/css>@import url(./css/ie7.css);/style>!endif-->!--if IE 8>style typetext/css>@import url(./css/ie8.css);/style>!endif-->!--if IE 9>style typetext/css>@import url(./css/ie9.css);/style>!endif-->link hrefcss/lc_switch.css?20170725 relstylesheet typetext/css>link hrefcss/ck.css?20170725 relstylesheet typetext/css>style typetext/css>div#content{    min-width: 448px;    padding-left: 10px;}a.btn{    background-color: white;    /*border: 2px solid #133c8a;*/    border-radius: 4px;    display: block;    float: left;    font-weight: bold;    padding: 2px;    text-align: center;    /*text-decoration: none;*/    width: 130px;}p#buttons{    padding-top: 5px;    text-align: center;}span#ga_question{    color: #133c8a;    font-weight: bold;}div#closeBtn{    position: relative;    right: 0px;    top: 0px;}/style>style typetext/css>#helper_umsg{    position: absolute;    top: 0px;    width: 100%;    z-index: 200;}.htbar{    position: relative;    top: 0px;    z-index: 100;}/style>script typetext/javascript srcjs/jquery.js>/script>script typetext/javascript>/*! * rarlab.com Google Universal Analytics account * Date: 2016-02-22 *//* !CDATA */var gaAccount  UA-17808623-1;(function(i,s,o,g,r,a,m){iGoogleAnalyticsObjectr;irir||function(){(ir.qir.q||).push(arguments)},ir.l1*new Date();as.createElement(o),ms.getElementsByTagName(o)0;a.async1;a.srcg;m.parentNode.insertBefore(a,m)})(window,document,script,https://www.google-analytics.com/analytics.js,ga);ga(create, gaAccount, auto, {    allowLinker: true,    sampleRate: 1});ga(set, anonymizeIp, true);ga(send, pageview);/* > *//script>/head>body classupbody>!-- 00f8c682c847e5a945a590cd

Subdomains

Date	Domain	IP
NS2.RARLAB.COM	2025-08-01	174.138.9.247
NS3.RARLAB.COM	2025-08-01	51.195.68.169
www.rarlab.com	2014-04-10	188.138.17.57

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]