home

wizards.custhelp.com

Domain Information

Server location:
California, United States (US)

ASN:
AS7160 NETDYNAMICS - Oracle Corporation,US

Root domain:
custhelp.com

The domain wizards.custhelp.com has been seen to resolve to the following 2 IP addresses.

129.152.38.64
vipva01.rightnowtech.com
June 5, 2016

216.136.168.73
vipsc01.rightnowtech.com
November 7, 2015

File downloads found at URLs served by wizards.custhelp.com.

0 / 68
http://wizards.custhelp.com/rd?1=AvMA~wpZDv8S~xb~Gv8O~yI5Wssqvrb7UFNVxT7~Pv_c&2=5636  (betasetup.exe)

0 / 68
http://wizards.custhelp.com/rd?1=AvMC~wp0Dv8S~xb~Gv8S~yIfWssqvrb7UFNsxT7~Pv_l&2=4783  (setup.exe)

0 / 68
http://wizards.custhelp.com/rd?1=AvMO~wpDDv8S~xb~Gv8G~yL~VfMq44D7IpFBOj7~Pv_I&2=7147  (setup.exe)

The following 11 files have been seen to comunicate with wizards.custhelp.com in live environments.

TCP » 129.152.38.64:443
apptrailers.exe

TCP » 129.152.38.64:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 129.152.38.64:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 129.152.38.64:443
browser.exe (Speed Browser by Smart Applications)

TCP » 129.152.38.64:443
cpx.exe (Google Embedded Application)

TCP » 129.152.38.64:443
messengertime.exe

TCP » 129.152.38.64:443
dailywiki.exe

TCP » 129.152.38.64:443
online-guardian-v2.0.9.exe

TCP » 129.152.38.64:443
apptrailers.exe

TCP » 129.152.38.64:443
browser.exe (Browser)

TCP » 129.152.38.64:443
apptrailers.exe

swiftpage.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.