home

wg.gcdn.co

G Core Innovations SaR

Domain Information

The domain wg.gcdn.co registered by G Core Innovations SaR was initially registered in June of 2014 through INSTRA CORPORATION PTY LTD. The hosted servers are located in Luxembourg, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
INSTRA CORPORATION PTY LTD

Server location:
Luxembourg, Luxembourg (LU)

Create date:
Wednesday, June 11, 2014

Expires date:
Friday, June 10, 2016

Updated date:
Monday, March 28, 2016

ASN:
AS199524 WGI G-Core Labs S.A.,AT

Root domain:
gcdn.co

Whois:
2 gcdn.co records

The domain wg.gcdn.co has been seen to resolve to the following 2 IP addresses.

92.223.96.13
na.d.gcdn.co
March 3, 2016

92.223.96.14
na.d.gcdn.co
March 3, 2016

File downloads found at URLs served by wg.gcdn.co.

0 / 68
http://wg.gcdn.co/wows_a/projects/PT/ru/files/.../WoWS_PublicTest.exe  (dd8ebdd155f32f128d1f8df5411951cc)

0 / 68
http://wg.gcdn.co/wows_a/na/files/.../WoWS_internet_install_na.exe  (8e612b31cb58c4a201537d8f7c8de646)

The following 11 files have been seen to comunicate with wg.gcdn.co in live environments.

TCP » 92.223.96.14:80
browser.exe (speed browser by Smart Applications)

TCP » 92.223.96.13:80
UCBrowser.exe (by UCWeb)

TCP » 92.223.96.13:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 92.223.96.14:80
UCBrowser.exe (by UCWeb)

TCP » 92.223.96.14:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 92.223.96.13:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 92.223.96.13:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 92.223.96.13:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 92.223.96.14:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 92.223.96.14:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 92.223.96.13:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 92.223.96.14:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://wg.gcdn.co/

SSL certificate subject:
CN=*.gcdn.co, O=G-Core Innovations S.a.r.l., L=Luxembourg, C=LU

SSL certificate issuer:
CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Web server:
nginx

wargaming.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.