home

res05.bignox.com

Beijing Duodian Zaixian Keji Company Limited

Domain Information

The domain res05.bignox.com registered by Beijing Duodian Zaixian Keji Company Limited was initially registered in January of 2015 through XIN NET TECHNOLOGY CORPORATION. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
XIN NET TECHNOLOGY CORPORATION

Server location:
Washington, United States (US)

Create date:
Monday, January 12, 2015

Expires date:
Sunday, January 12, 2025

Updated date:
Monday, October 12, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
bignox.com

Whois:
1 bignox.com record

The domain res05.bignox.com has been seen to resolve to the following 108 IP addresses.

54.192.19.104
server-54-192-19-104.iad12.r.cloudfront.net
September 18, 2016

54.192.19.96
server-54-192-19-96.iad12.r.cloudfront.net
September 18, 2016

54.192.19.76
server-54-192-19-76.iad12.r.cloudfront.net
September 18, 2016

54.192.19.19
server-54-192-19-19.iad12.r.cloudfront.net
September 18, 2016

54.192.19.245
server-54-192-19-245.iad12.r.cloudfront.net
September 18, 2016

54.192.19.154
server-54-192-19-154.iad12.r.cloudfront.net
September 18, 2016

54.192.19.125
server-54-192-19-125.iad12.r.cloudfront.net
September 18, 2016

54.192.19.105
server-54-192-19-105.iad12.r.cloudfront.net
September 18, 2016

52.84.125.173
server-52-84-125-173.iad16.r.cloudfront.net
September 16, 2016

52.84.125.160
server-52-84-125-160.iad16.r.cloudfront.net
September 16, 2016

52.84.125.58
server-52-84-125-58.iad16.r.cloudfront.net
September 16, 2016

52.84.125.10
server-52-84-125-10.iad16.r.cloudfront.net
September 16, 2016

52.84.125.5
server-52-84-125-5.iad16.r.cloudfront.net
September 16, 2016

52.84.125.249
server-52-84-125-249.iad16.r.cloudfront.net
September 16, 2016

52.84.125.210
server-52-84-125-210.iad16.r.cloudfront.net
September 16, 2016

54.192.19.190
server-54-192-19-190.iad12.r.cloudfront.net
September 14, 2016

54.192.19.166
server-54-192-19-166.iad12.r.cloudfront.net
September 14, 2016

54.192.19.150
server-54-192-19-150.iad12.r.cloudfront.net
September 14, 2016

54.192.19.98
server-54-192-19-98.iad12.r.cloudfront.net
September 14, 2016

54.192.19.253
server-54-192-19-253.iad12.r.cloudfront.net
September 14, 2016

54.192.19.224
server-54-192-19-224.iad12.r.cloudfront.net
September 14, 2016

54.230.193.6
server-54-230-193-6.iad53.r.cloudfront.net
September 4, 2016

54.230.193.5
server-54-230-193-5.iad53.r.cloudfront.net
September 4, 2016

54.230.193.4
server-54-230-193-4.iad53.r.cloudfront.net
September 4, 2016

54.230.193.204
server-54-230-193-204.iad53.r.cloudfront.net
September 4, 2016

54.230.193.79
server-54-230-193-79.iad53.r.cloudfront.net
September 4, 2016

54.230.193.52
server-54-230-193-52.iad53.r.cloudfront.net
September 4, 2016

54.230.193.27
server-54-230-193-27.iad53.r.cloudfront.net
September 4, 2016

54.230.193.25
server-54-230-193-25.iad53.r.cloudfront.net
September 4, 2016

54.192.19.20
server-54-192-19-20.iad12.r.cloudfront.net
September 4, 2016

 
Showing 30 of 108 IP Addresses

File downloads found at URLs served by res05.bignox.com.

0 / 68
http://res05.bignox.com/g2/M00/00/.../CjM_R1ePWLWAA9b7FYvJEI1KxsM861.exe  (nox_setup_v3.7.0.0_full_en_0720_pokemon.exe)

0 / 68
http://res05.bignox.com/g2/M00/00/.../CjM_R1ejCoyAQn3jEpITSHnOlFg379.exe  (nox_setup_v3.7.1.0_full_en.exe)

0 / 68
http://res05.bignox.com/g2/M00/00/.../CjM_R1eHwjeAL9w7FYbvEEMRAcQ898.exe  (nox_setup_v3.7.0.0_full_en_pokemon.exe)

0 / 68
http://res05.bignox.com/g2/M00/00/.../CjM_R1egZxmAGPirFjZfSKTbIWA621.exe  (nox_setup_v3.7.1.0_full_en_pokemon_0801.exe)

0 / 68
http://res05.bignox.com/group1/M00/15/.../Cqrk21c0LpOAUNgWD9XvEJQL9Zo288.exe  (nox_setup_v3.5.1.0_full_en.exe)

0 / 68
http://res05.bignox.com/g2/M00/00/.../Cqxc3FdjpaeAeD90D-KfED-0Pc0531.exe  (nox_setup_v3.6.0.0_full_en.exe)

0 / 68
http://res05.bignox.com/g2/M00/00/.../Cqxc3Fdjo_yAMqzhABchENl9lpc567.exe  (nox_setup_v3.6.0.0_dl_en.exe)

The following 562 files have been seen to comunicate with res05.bignox.com in live environments.

TCP » 52.84.125.173:443
Client.exe

TCP » 54.192.19.238:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.192.19.156:80
yacqq.exe

TCP » 54.192.19.125:80
saber.exe

TCP » 54.192.19.82:80
cfhelp66.exe

TCP » 54.192.19.109:80
saber.exe

TCP » 52.85.142.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.251:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.156:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.190:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.104:80
saber.exe

TCP » 54.192.19.166:443
online-guardian-v2.0.9.exe

TCP » 54.192.19.19:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.46:80
dam_ay.exe

TCP » 54.192.19.21:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.192.19.215:80
saber.exe

TCP » 54.192.19.188:80
browser.exe (Browser)

TCP » 54.192.19.60:80
smu.exe (W by Search Module)

TCP » 54.192.19.156:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.192.19.166:80
spassist.exe (SoftPlanet Software Assistant by Secure Download)

 
Latest 20 of 1,600 files

URL:
http://res05.bignox.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.