home

download.nxa.us

Nexon America

Domain Information

The domain download.nxa.us registered by Nexon America was initially registered in January of 2015 through Corporate Domains, Inc.. The hosted servers are located in Dulles, Virginia within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
Corporate Domains, Inc.

Server location:
Virginia, United States (US)

Create date:
Thursday, January 8, 2015

Expires date:
Saturday, January 7, 2017

Updated date:
Monday, December 7, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
nxa.us

Whois:
1 nxa.us record

The domain download.nxa.us has been seen to resolve to the following 16 IP addresses.

52.84.125.132
server-52-84-125-132.iad16.r.cloudfront.net
August 3, 2016

52.84.125.95
server-52-84-125-95.iad16.r.cloudfront.net
August 3, 2016

52.84.125.83
server-52-84-125-83.iad16.r.cloudfront.net
August 3, 2016

52.84.125.72
server-52-84-125-72.iad16.r.cloudfront.net
August 3, 2016

52.84.125.47
server-52-84-125-47.iad16.r.cloudfront.net
August 3, 2016

52.84.125.35
server-52-84-125-35.iad16.r.cloudfront.net
August 3, 2016

52.84.125.27
server-52-84-125-27.iad16.r.cloudfront.net
August 3, 2016

52.84.125.176
server-52-84-125-176.iad16.r.cloudfront.net
August 3, 2016

54.240.160.85
server-54-240-160-85.iad12.r.cloudfront.net
January 4, 2016

54.240.160.60
server-54-240-160-60.iad12.r.cloudfront.net
January 4, 2016

54.240.160.203
server-54-240-160-203.iad12.r.cloudfront.net
January 4, 2016

54.240.160.187
server-54-240-160-187.iad12.r.cloudfront.net
January 4, 2016

54.240.160.181
server-54-240-160-181.iad12.r.cloudfront.net
January 4, 2016

54.240.160.143
server-54-240-160-143.iad12.r.cloudfront.net
January 4, 2016

54.240.160.100
server-54-240-160-100.iad12.r.cloudfront.net
January 4, 2016

54.240.160.89
server-54-240-160-89.iad12.r.cloudfront.net
January 4, 2016

File downloads found at URLs served by download.nxa.us.

0 / 68
http://download.nxa.us/Game/.../NexonLauncherSetup.exe  (4f3724e04e05ffd9db5895cd005154f0)

1 / 68
http://download.nxa.us/Game/.../NexonLauncherSetup.exe  (b6a83e3c63cf08fb75a3a16d2bc25f75)

0 / 68
http://download.nxa.us/Game/.../NexonLauncherSetup.exe  (4c28eb34ebb3aabfd91588146d2b9f6f)

The following 15 files have been seen to comunicate with download.nxa.us in live environments.

TCP » 52.84.125.47:443
apptrailers.exe

TCP » 52.84.125.95:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.176:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.35:443
oozes.exe (Oozes)

TCP » 52.84.125.35:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.35:80
browser.exe (Browser)

TCP » 52.84.125.47:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.35:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.95:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.47:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.83:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.95:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.35:80
AdxEngine.exe (MPC AdCleaner by DotC United Inc)

TCP » 52.84.125.35:443
whatsapptime.exe

TCP » 52.84.125.47:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 52.84.125.83:80
parishoners.exe (Parishoners)

TCP » 52.84.125.95:443
browser.exe (Browser)

TCP » 52.84.125.35:80
parishoners.exe (Parishoners)

TCP » 52.84.125.35:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.47:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

 
Latest 20 of 35 files

URL:
http://download.nxa.us/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.