home

ndl.mgccw.com

YinSi BaoHu Yi KaiQi (Hidden by Whois Privacy Protection Service)

Domain Information

The domain ndl.mgccw.com registered by YinSi BaoHu Yi KaiQi (Hidden by Whois Privacy Protection Service) was initially registered in September of 2014 through HICHINA ZHICHENG TECHNOLOGY LTD.. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
HICHINA ZHICHENG TECHNOLOGY LTD.

Server location:
Virginia, United States (US)

Create date:
Tuesday, September 2, 2014

Expires date:
Friday, September 2, 2016

Updated date:
Thursday, September 4, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
mgccw.com

Whois:
1 mgccw.com record

The domain ndl.mgccw.com has been seen to resolve to the following 48 IP addresses.

52.84.125.137
server-52-84-125-137.iad16.r.cloudfront.net
September 16, 2016

52.84.125.109
server-52-84-125-109.iad16.r.cloudfront.net
September 16, 2016

52.84.125.108
server-52-84-125-108.iad16.r.cloudfront.net
September 16, 2016

52.84.125.61
server-52-84-125-61.iad16.r.cloudfront.net
September 16, 2016

52.84.125.48
server-52-84-125-48.iad16.r.cloudfront.net
September 16, 2016

52.84.125.22
server-52-84-125-22.iad16.r.cloudfront.net
September 16, 2016

52.84.125.210
server-52-84-125-210.iad16.r.cloudfront.net
September 16, 2016

52.84.125.164
server-52-84-125-164.iad16.r.cloudfront.net
September 16, 2016

54.230.193.145
server-54-230-193-145.iad53.r.cloudfront.net
September 14, 2016

54.230.193.143
server-54-230-193-143.iad53.r.cloudfront.net
September 14, 2016

54.230.193.109
server-54-230-193-109.iad53.r.cloudfront.net
September 14, 2016

54.230.193.64
server-54-230-193-64.iad53.r.cloudfront.net
September 14, 2016

54.230.193.18
server-54-230-193-18.iad53.r.cloudfront.net
September 14, 2016

54.230.193.214
server-54-230-193-214.iad53.r.cloudfront.net
September 14, 2016

54.230.193.210
server-54-230-193-210.iad53.r.cloudfront.net
September 14, 2016

54.230.193.184
server-54-230-193-184.iad53.r.cloudfront.net
September 14, 2016

52.84.125.247
server-52-84-125-247.iad16.r.cloudfront.net
August 21, 2016

52.84.125.143
server-52-84-125-143.iad16.r.cloudfront.net
August 21, 2016

52.84.125.99
server-52-84-125-99.iad16.r.cloudfront.net
August 21, 2016

52.84.125.98
server-52-84-125-98.iad16.r.cloudfront.net
August 21, 2016

52.84.125.67
server-52-84-125-67.iad16.r.cloudfront.net
August 21, 2016

52.84.125.52
server-52-84-125-52.iad16.r.cloudfront.net
August 21, 2016

52.84.125.30
server-52-84-125-30.iad16.r.cloudfront.net
August 21, 2016

52.84.125.11
server-52-84-125-11.iad16.r.cloudfront.net
August 21, 2016

52.84.125.253
server-52-84-125-253.iad16.r.cloudfront.net
August 5, 2016

52.84.125.249
server-52-84-125-249.iad16.r.cloudfront.net
August 5, 2016

52.84.125.228
server-52-84-125-228.iad16.r.cloudfront.net
August 5, 2016

52.84.125.191
server-52-84-125-191.iad16.r.cloudfront.net
August 5, 2016

52.84.125.141
server-52-84-125-141.iad16.r.cloudfront.net
August 5, 2016

52.84.125.93
server-52-84-125-93.iad16.r.cloudfront.net
August 5, 2016

 
Showing 30 of 48 IP Addresses

File downloads found at URLs served by ndl.mgccw.com.

0 / 68
http://ndl.mgccw.com/mu3/app/20140712/21/.../com.rejinpaul.com.apk  (9d9cf0694ef002eecb099670b3b6ba96)

0 / 68
http://ndl.mgccw.com/mu3/app/20140108/06/.../com.ynotvcan.annauniversity.apk  (b813d476ebcff526ee165b55e4596d16)

0 / 68
http://ndl.mgccw.com/mu3/app/20150504/08/.../com.wKeralaVehicleFineChecker.apk  (e87f47a91cdc01bad57ebbcf9afb2e9d)

0 / 68
http://ndl.mgccw.com/mu3/app/000/966/736/.../b57a2b13d73446259d10d5c37477327f.apk  (5e3d8940-7b27-e88c-c01d-b1358dd84dda_1d203317043e784)

0 / 68
http://ndl.mgccw.com/mu3/wallpaper/20140428/11/.../1280x1024-Mac_Sea_Stars_Desktop.jpg  (1ff059ff-cb81-5456-17d2-3dbab0f69112_1d1dae75613b36e)

3 / 68      (PUP)
http://ndl.mgccw.com/mu/android/release/10/.../mobogenie_1512.apk  (mobogenie.exe)

0 / 68
http://ndl.mgccw.com/mu/android/release/10/.../mobogenie_1512.apk  (909a52ce-4ecb-d20d-e03c-4be721d6232f_1d1b693d196f79f)

0 / 68
http://ndl.mgccw.com/mu/android/release/10/.../mobogenie_1512.apk  (984f4bdc11ffb5d1fcd333dc53240819)

0 / 68
http://ndl.mgccw.com/mu/android/release/10/.../mobogenie_1512.apk  (a15e654d34dd5df82198302a87de7922)

0 / 68
http://ndl.mgccw.com/mu/android/release/10/.../mobogenie_1512.apk  (21598a41927b781df3ae1537d1ea22ea)

0 / 68
http://ndl.mgccw.com/mu/android/release/10/.../mobogenie_1512.apk  (9c93c468fd4636a4f25b29cb84a996a1)

The following 33 files have been seen to comunicate with ndl.mgccw.com in live environments.

TCP » 52.84.125.141:443
Client.exe

TCP » 52.84.125.61:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.143:443
UCBrowser.exe (by UCWeb)

TCP » 52.84.125.249:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 52.84.125.11:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.42:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.99:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.141:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.52:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.99:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.143:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.210:443
browser.exe (Browser)

TCP » 52.84.125.61:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.164:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.191:443
onlineguardian-v2.exe

TCP » 52.84.125.191:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.141:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.247:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.210:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.22:443
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 117 files

URL:
http://ndl.mgccw.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

Facebook:
Likes:  34
Shares:  105

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.