home

wingatemedia.go2cloud.org

1&1 Internet Inc

Domain Information

The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
1 & 1 Internet AG

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
go2cloud.org

Whois:
2 go2cloud.org records

The domain wingatemedia.go2cloud.org has been seen to resolve to the following 20 IP addresses.

52.205.218.105
ec2-52-205-218-105.compute-1.amazonaws.com
August 11, 2016

52.206.36.195
ec2-52-206-36-195.compute-1.amazonaws.com
July 19, 2016

52.7.213.252
ec2-52-7-213-252.compute-1.amazonaws.com
July 19, 2016

52.87.124.218
ec2-52-87-124-218.compute-1.amazonaws.com
July 1, 2016

52.5.14.12
ec2-52-5-14-12.compute-1.amazonaws.com
July 1, 2016

54.165.125.29
ec2-54-165-125-29.compute-1.amazonaws.com
June 24, 2016

52.4.235.69
ec2-52-4-235-69.compute-1.amazonaws.com
June 24, 2016

52.5.57.82
ec2-52-5-57-82.compute-1.amazonaws.com
June 5, 2016

52.72.162.128
ec2-52-72-162-128.compute-1.amazonaws.com
May 31, 2016

52.203.78.46
ec2-52-203-78-46.compute-1.amazonaws.com
May 31, 2016

52.73.92.190
ec2-52-73-92-190.compute-1.amazonaws.com
May 19, 2016

52.7.74.56
ec2-52-7-74-56.compute-1.amazonaws.com
May 19, 2016

107.21.44.249
ec2-107-21-44-249.compute-1.amazonaws.com
April 8, 2016

52.72.118.27
ec2-52-72-118-27.compute-1.amazonaws.com
April 8, 2016

54.173.205.117
ec2-54-173-205-117.compute-1.amazonaws.com
March 2, 2016

52.73.185.238
ec2-52-73-185-238.compute-1.amazonaws.com
March 2, 2016

52.73.156.129
ec2-52-73-156-129.compute-1.amazonaws.com
February 16, 2016

52.72.1.193
ec2-52-72-1-193.compute-1.amazonaws.com
February 16, 2016

54.208.254.134
ec2-54-208-254-134.compute-1.amazonaws.com
February 16, 2016

54.174.127.129
ec2-54-174-127-129.compute-1.amazonaws.com
February 16, 2016

File downloads found at URLs served by wingatemedia.go2cloud.org.

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=60&aff_id=2821&redirect_pass=1&url=http://.../downloadclient.htm?sr=1059307&anid=1021402e1eb4f65bbeda7e5c0b95ee&urlauth=661936535926943324140647630265  (888casino.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=431&aff_id=2823&redirect_pass=1&url=http://affiliates.affpower.com/.../clickthrgh.asp?btag=a_2449b_884&aid=10259a83900d19d5d7f0e805989a8f&urlauth=293428687398614645407206183698  (cosmik_installer.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=60&aff_id=5923&redirect_pass=1&url=http://.../downloadclient.htm?sr=1059307&anid=102e168425d061da105c5f0ecae5b8&urlauth=445062793470850469586796525342  (888casino.exe)

3 / 68      (Malware)
http://wingatemedia.go2cloud.org/aff_r?offer_id=332&aff_id=9458&redirect_pass=1&url=http://.../redirect.aspx?pid=181584128&lpid=1468063256&bid=1468063257&var9=102a47e8e20bbe97ea78b18fbcc2c5&urlauth=666129400353136863610617123273  (Setup.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=598&aff_id=9458&redirect_pass=1&url=http://www.slotsoffortune.im/get/.../2016032&tracker=1023415e9962c1e03d7d45d4380277&urlauth=830327269561793874853141935395  (slotsoffortune-setup_bt.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=310&aff_id=9334&redirect_pass=1&url=http://affiliates.affpower.com/.../clickthrgh.asp?btag=a_1645b_887&aid=102444eb9176a156b18239018c0847&urlauth=614501945506164713251397052746  (cosmik_installer.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=60&aff_id=2821&redirect_pass=1&url=http://.../downloadclient.htm?sr=1059307&anid=102b03581f606d9204503122b36e1d&urlauth=579967751925642486025266167250  (888casino.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=598&aff_id=2821&url=http://www.slotsoffortune.im/get/.../2016032&tracker=102d63de321ef791703258831aead3&urlauth=571828836235790767616079057488  (slotsoffortune-setup_bt.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=310&aff_id=2821&redirect_pass=1&url=http://affiliates.affpower.com/.../clickthrgh.asp?btag=a_1645b_886&aid=102d83c28ad9e3402010d5efbc9a40&urlauth=376090910831130865932196738335  (cosmik_installer.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=60&aff_id=9460&redirect_pass=1&url=http://.../downloadclient.htm?sr=1153396&anid=102113ad97cb32e86f55ed3aba48c9&urlauth=472996683018779715224082480545  (888casino.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=60&aff_id=2821&redirect_pass=1&url=http://.../downloadclient.htm?sr=1059307&anid=102bc6f8a31d947e630469b71e28e5&urlauth=372555548032167491640924634358  (888casino.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=485&aff_id=1008&redirect_pass=1&url=http://www.silveroakcasino.eu/click/.../8894/13391/.../?x=y&transaction_id=10253596f9b531c55a6292c256ccc8&urlauth=573620995037110368618861112691  (silveroakcasinoinstaller.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=60&aff_id=2821&redirect_pass=1&url=http://.../downloadclient.htm?sr=1059307&anid=102f353992f1d3f1519f3e48843c18&urlauth=375579278166286562898673366243  (888casino.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=348&aff_id=2821&redirect_pass=1&url=http://.../download.php?affid=61216&reftag=1026ff23b943520fa47102d040deac&urlauth=686340672269807680592473489539  (installcasino.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=431&aff_id=1000&redirect_pass=1&url=http://affiliates.affpower.com/.../clickthrgh.asp?btag=a_2449b_884&aid=10266d497b1f9077823f964b64fbff&urlauth=828069338067420670806489050195  (cosmik_installer.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=348&aff_id=2635&redirect_pass=1&url=http://.../download.php?affid=44471&trackingID=102bf84346c8c5680a7f06e80504d6&urlauth=402024161259132411647891607864  (onbling.exe)

1 / 68      (inconclusive)
http://wingatemedia.go2cloud.org/aff_r?offer_id=431&aff_id=1258&redirect_pass=1&url=http://affiliates.affpower.com/.../clickthrgh.asp?btag=a_2449b_884&aid=102b7942477460de554c61dda04cab&urlauth=698195603572473594384344238063  (cosmik_installer.exe)

0 / 68
http://wingatemedia.go2cloud.org/aff_r?offer_id=84&aff_id=9106&redirect_pass=1&url=http://record.iaffiliates.com/_vMLTvr76d9SpvY_pqvZ4WGNd7ZgqdRLk/.../?payload=102e9850732fbe5998bec65e65c8a9&urlauth=700876576895533652536520876652  (casinosetup.exe)

URL:
http://wingatemedia.go2cloud.org/

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=*.go2cloud.org, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
nginx/1.7.9

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.