home

wdownloadmanager.com

Whois Privacy Shield Services

Domain Information

The domain wdownloadmanager.com registered by Whois Privacy Shield Services was initially registered in February of 2016 through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PHEENIX 97, LLC

Server location:
Virginia, United States (US)

Create date:
Tuesday, February 9, 2016

Expires date:
Thursday, February 9, 2017

Updated date:
Tuesday, February 9, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
3 wdownloadmanager.com records

The domain wdownloadmanager.com has been seen to resolve to the following 4 IP addresses.

146.148.34.125
125.34.148.146.bc.googleusercontent.com
February 16, 2016

54.210.47.225
ec2-54-210-47-225.compute-1.amazonaws.com
February 16, 2016

209.99.40.222
209-99-40-222.fwd.datafoundry.com
December 4, 2015

78.140.174.186
January 24, 2014

The following 51 files have been seen to comunicate with wdownloadmanager.com in live environments.

TCP » 209.99.40.222:80
UCBrowser.exe (by UCWeb)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
online-guardian-v2.0.9.exe

TCP » 209.99.40.222:80
msn.exe

TCP » 54.210.47.225:80
online-guardian-v2.0.9.exe

TCP » 146.148.34.125:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 209.99.40.222:80
apptrailers.exe

TCP » 209.99.40.222:80
y03fd24.tmp

TCP » 209.99.40.222:80
lliseconc8.exe

TCP » 209.99.40.222:80
megacubo.exe (Megacubo by www.megacubo.net)

TCP » 209.99.40.222:80
messengertime.exe

TCP » 209.99.40.222:80
ContentSinder.exe (ContentSinder by ContentSinder Company)

TCP » 209.99.40.222:80
jingling.exe

 
Latest 20 of 60 files

January 24, 2014
link.wdownloadmanager.com

February 21, 2016
update.wdownloadmanager.com

URL:
http://wdownloadmanager.com/

Title:
“wdownloadmanager.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.