home

p.iwin.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
iwin.com

The domain p.iwin.com has been seen to resolve to the following 5 IP addresses.

52.1.23.157
ec2-52-1-23-157.compute-1.amazonaws.com
May 20, 2016

52.0.84.42
ec2-52-0-84-42.compute-1.amazonaws.com
May 20, 2016

107.23.92.156
ec2-107-23-92-156.compute-1.amazonaws.com
December 1, 2014

54.210.227.39
ec2-54-210-227-39.compute-1.amazonaws.com
December 1, 2014

54.210.226.131
ec2-54-210-226-131.compute-1.amazonaws.com
December 1, 2014

File downloads found at URLs served by p.iwin.com.

0 / 68
https://p.iwin.com/gm/.../GamesManagerInstaller.exe  (ece2e62c96883e077a35137b7c00c0af)

0 / 68
http://p.iwin.com/gm/.../GamesManagerInstaller.exe  (0a3b342b32f45eaeae170e9f72d93d0a)

0 / 68
http://p.iwin.com/gm/.../GamesManagerInstaller.exe  (e006afd296d38496d4c55b55c1caf9fc)

0 / 68
http://p.iwin.com/gm/.../GamesManagerInstaller.exe  (478bdf8e30df5dc659fe876d1595700f)

0 / 68
http://p.iwin.com/gm/.../iWin_GamesManagerInstaller.exe  (a989bfa1810c1bbe439579c1da29ca33)

0 / 68
http://p.iwin.com/gm/.../Yahoo_GamesManagerInstaller.exe  (5b2d9bff360d71cb5d75045d3cbe69c9)

2 / 68      (PUP)
http://p.iwin.com/.../iWinToolbarLauncher.exe  (f0274e323fab9a7282b33dc805de8f5e)

The following 5 files have been seen to comunicate with p.iwin.com in live environments.

TCP » 52.0.84.42:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.210.226.131:80
instgameinfohelpermsn.exe (PogoDGC Installer Helper by iWin)

TCP » 54.210.226.131:80
instgameinfohelperpdgc.exe (PogoDGC Installer Helper by iWin)

TCP » 54.210.226.131:80
instgameinfohelperiplay.exe (PogoDGC Installer Helper by iWin)

TCP » 54.210.226.131:80
instgameinfohelper.exe (iWinGames Installer Helper by iWin)

TCP » 54.210.227.39:80
instgameinfohelperpdgc.exe (PogoDGC Installer Helper by iWin)

TCP » 54.210.227.39:80
instgameinfohelperiplay.exe (PogoDGC Installer Helper by iWin)

TCP » 54.210.227.39:80
instgameinfohelpermsn.exe (PogoDGC Installer Helper by iWin)

TCP » 54.210.227.39:80
instgameinfohelper.exe (iWinGames Installer Helper by iWin)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.