home

dwn.wow-clear.ru

Private Person  (Proxy Registrant)

Domain Information

The domain dwn.wow-clear.ru is registered by proxy through REGRU-RU and was originally registered in May of 2015. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Thursday, May 7, 2015

Expires date:
Sunday, May 7, 2017

Root domain:
wow-clear.ru

Whois:
3 wow-clear.ru records

The domain dwn.wow-clear.ru has been seen to resolve to the following 2 IP addresses.

46.165.196.182
December 1, 2015

92.242.140.21
unallocated.barefruit.co.uk
May 4, 2015

File downloads found at URLs served by dwn.wow-clear.ru.

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (cfa1baa1b3d97c67e8263f266d076ecd)

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (786152a52aa5c2736352833470f1b0a6)

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (8625fa51efd603c599a5bf12e30f6a2e)

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (4099d46b843091bae5f90edc01b79e3e)

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (0510b8ee7a9be06e60b1cee060149758)

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (2194c08fd0619e88dc3b6180d89847aa)

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (62667952086ccbd56e35e08db8ec2ebc)

0 / 68
http://dwn.wow-clear.ru/.../MultiPackFull.exe  (231b81734e139bfc86b60dfc58e23489)

2 / 68
http://dwn.wow-clear.ru/jovesmodpack_0.9.3_v14.7_extended.exe  (9ecfdcec3891673cc57f0b1d88b67859)

1 / 68
http://dwn.wow-clear.ru/jovesmodpack_0.9.4_v15.7_extended.exe  (887385b29ade7fdd4e885a9deb08ba19)

The following 230 files have been seen to comunicate with dwn.wow-clear.ru in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

URL:
http://dwn.wow-clear.ru/

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.