home

files.ntwind.com

Alexander Avdonin

Domain Information

The domain files.ntwind.com registered by Alexander Avdonin was initially registered in March of 2005 through GODADDY.COM, LLC. The hosted servers are located in New York City, New York within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Friday, March 25, 2005

Expires date:
Saturday, March 25, 2017

Updated date:
Sunday, March 13, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ntwind.com

Whois:
3 ntwind.com records

The domain files.ntwind.com has been seen to resolve to the following 56 IP addresses.

52.85.142.207
server-52-85-142-207.iad12.r.cloudfront.net
April 6, 2016

52.85.142.206
server-52-85-142-206.iad12.r.cloudfront.net
April 6, 2016

52.85.142.144
server-52-85-142-144.iad12.r.cloudfront.net
April 6, 2016

52.85.142.126
server-52-85-142-126.iad12.r.cloudfront.net
April 6, 2016

52.85.142.122
server-52-85-142-122.iad12.r.cloudfront.net
April 6, 2016

52.85.142.100
server-52-85-142-100.iad12.r.cloudfront.net
April 6, 2016

52.85.142.58
server-52-85-142-58.iad12.r.cloudfront.net
April 6, 2016

52.85.142.219
server-52-85-142-219.iad12.r.cloudfront.net
April 6, 2016

54.230.16.80
server-54-230-16-80.iad12.r.cloudfront.net
July 16, 2015

54.230.16.3
server-54-230-16-3.iad12.r.cloudfront.net
July 16, 2015

54.240.160.233
server-54-240-160-233.iad12.r.cloudfront.net
July 16, 2015

54.240.160.12
server-54-240-160-12.iad12.r.cloudfront.net
July 16, 2015

54.230.18.221
server-54-230-18-221.iad12.r.cloudfront.net
July 16, 2015

54.230.18.171
server-54-230-18-171.iad12.r.cloudfront.net
July 16, 2015

54.230.17.90
server-54-230-17-90.iad12.r.cloudfront.net
July 16, 2015

54.230.16.109
server-54-230-16-109.iad12.r.cloudfront.net
July 16, 2015

54.230.71.131
server-54-230-71-131.sea50.r.cloudfront.net
September 3, 2014

54.230.71.108
server-54-230-71-108.sea50.r.cloudfront.net
September 3, 2014

54.230.70.169
server-54-230-70-169.sea50.r.cloudfront.net
September 3, 2014

54.230.70.156
server-54-230-70-156.sea50.r.cloudfront.net
September 3, 2014

54.230.69.91
server-54-230-69-91.sea50.r.cloudfront.net
September 3, 2014

54.230.69.33
server-54-230-69-33.sea50.r.cloudfront.net
September 3, 2014

54.240.188.5
server-54-240-188-5.sea50.r.cloudfront.net
September 3, 2014

54.230.71.138
server-54-230-71-138.sea50.r.cloudfront.net
September 3, 2014

54.230.100.36
server-54-230-100-36.iad2.r.cloudfront.net
September 2, 2014

216.137.33.232
server-216-137-33-232.iad2.r.cloudfront.net
September 2, 2014

216.137.33.219
server-216-137-33-219.iad2.r.cloudfront.net
September 2, 2014

54.230.103.112
server-54-230-103-112.iad2.r.cloudfront.net
September 2, 2014

54.230.102.229
server-54-230-102-229.iad2.r.cloudfront.net
September 2, 2014

54.230.102.163
server-54-230-102-163.iad2.r.cloudfront.net
September 2, 2014

 
Showing 30 of 56 IP Addresses

File downloads found at URLs served by files.ntwind.com.

0 / 68
http://files.ntwind.com/.../WinSnap_4.5.6-setup.exe  (winsnap_v4.5.6.exe)

0 / 68
http://files.ntwind.com/.../WinSnap_4.5.5-setup.exe  (ws48d4.tmp.exe)

0 / 68
http://files.ntwind.com/.../WinSnap_4.5.1-setup.exe  (b962afcb7a4de9c2f536d95fe072b1e4)

0 / 68
http://files.ntwind.com/.../VSubst_1.0.6.exe  (b183e3061dd2bfe8e090d553ffc85df4)

0 / 68
http://files.ntwind.com/.../WindowSpace_2.5.9-setup.exe  (ac1104644f878f0559577178dfcb66bd)

0 / 68
http://files.ntwind.com/.../CloseAll_2.0-setup.exe  (631b25ed3e91f5749acd4a5f213783cf)

0 / 68
http://files.ntwind.com/.../VistaSwitcher_1.1.5-setup.exe  (3180098ce5e139af8e715e2b51b4d280)

The following 33 files have been seen to comunicate with files.ntwind.com in live environments.

TCP » 54.230.55.31:443
UCBrowser.exe (by UCWeb)

TCP » 52.85.142.144:443
jingling.exe

TCP » 52.85.142.207:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.206:80
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.85.142.100:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.100:80
browser.exe (Browser)

TCP » 52.85.142.126:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.126:80
clearscreenplayerbrowser.exe

TCP » 52.85.142.58:80
browser.exe (Browser)

TCP » 52.85.142.122:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.207:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.206:80
2efc0fa24a9513847cfac6d94441f0fa.exe

TCP » 52.85.142.58:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 204.246.169.15:80
ContentExplorer.exe (ContentExplorer)

TCP » 52.85.142.122:80
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.85.142.206:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.85.142.206:80
online-guardian-v2.0.9.exe

TCP » 52.85.142.206:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.207:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.58:443
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 64 files

URL:
http://files.ntwind.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.