home

tigervnc.bphinz.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain tigervnc.bphinz.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2014. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US East (Northern Virginia) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Tuesday, February 25, 2014

Expires date:
Saturday, February 25, 2017

Updated date:
Thursday, February 25, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bphinz.com

Whois:
1 bphinz.com record

The domain tigervnc.bphinz.com has been seen to resolve to the following 5 IP addresses.

54.231.115.17
s3-website-us-east-1.amazonaws.com
September 17, 2016

54.231.72.217
s3-website-us-east-1.amazonaws.com
August 20, 2016

54.231.8.228
s3-website-us-east-1.amazonaws.com
June 24, 2016

54.231.82.33
s3-website-us-east-1.amazonaws.com
May 28, 2016

54.231.2.140
s3-website-us-east-1.amazonaws.com
March 2, 2016

File downloads found at URLs served by tigervnc.bphinz.com.

0 / 68
http://tigervnc.bphinz.com/nightly/.../tigervnc64-1.6.80.exe  (098f5cb29b32cb5c05134048c3f737a3)

0 / 68
http://tigervnc.bphinz.com/nightly/.../tigervnc64-1.6.80.exe  (c52dbf4af4c417de4ed8bb6338215abe)

0 / 68
http://tigervnc.bphinz.com/nightly/.../tigervnc64-1.6.80.exe  (14e5d34ea643267d44304f5ef52f64cb)

0 / 68
http://tigervnc.bphinz.com/nightly/.../tigervnc64-1.6.80.exe  (1bb325a55da1f8412dddb32338c227a6)

0 / 68
http://tigervnc.bphinz.com/nightly/.../tigervnc64-1.6.80.exe  (c4494fe47821e5db122b4c10a8c61228)

The following 38 files have been seen to comunicate with tigervnc.bphinz.com in live environments.

TCP » 54.231.115.17:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.231.115.17:80
disco_games_notification_service.exe (FileProperties_ProductName by FileProperties_CompanyName)

TCP » 54.231.115.17:80
bb8696a2-17ae-4a8b-9e5d-5f27d68570a1-1-7.exe (HQ Video Pro 3.1cV30.06 by HQ VideoV30.06)

TCP » 54.231.82.33:80
UCBrowser.exe (by UCWeb)

TCP » 54.231.72.217:80
nse3450.tmp

TCP » 54.231.115.17:80
disco_games_updating_service.exe

TCP » 54.231.82.33:80
disco_games_notification_service.exe (FileProperties_ProductName by FileProperties_CompanyName)

TCP » 54.231.82.33:80
f27fc1a6-55a5-462d-aaea-0b55c38f8068-7.exe (Cinem Plus 2.4cV23.09 by Cinema Plus ProV23.09)

TCP » 54.231.115.17:80
a7297b7c-cc5d-4afa-8aa1-af8186d63f8f-1-7.exe (CinemaPlus-3.2cV28.09 by Cinema PlusV28.09)

TCP » 54.231.115.17:80
SlimDrivers-setup.exe (SlimDrivers by Slimware Utilities Holdings)

TCP » 54.231.72.217:80
disco_games_notification_service.exe (FileProperties_ProductName by FileProperties_CompanyName)

TCP » 54.231.72.217:80
online-guardian-v2.0.9.exe

TCP » 54.231.82.33:80
9c344b1f-489f-498e-9973-0cf45b907b3b-1-7.exe (CinemaPlus-3.2cV28.09 by Cinema PlusV28.09)

TCP » 54.231.82.33:80
savings sidekick-bg.exe (Savings Sidekick by 215 Apps)

TCP » 54.231.115.17:80
sense-nova.exe (Sense by Object Browser)

TCP » 54.231.115.17:80
ge-force-nova.exe (Ge-Force by iWebar)

TCP » 54.231.115.17:80
360b1fed-6438-4d5e-b582-8aaf72805454-6.exe (CinemaPlus-3.2cV28.06 by Cinema PlusV28.06)

TCP » 54.231.115.17:80
03d3f808-3490-4bba-b233-9ad206fa8b4b-6.exe (PalMall by BND)

TCP » 54.231.115.17:80
d9ea625a-4df5-4db7-b5af-5b4a13326923-10.exe (MediaPlayerVid2.4 by NewPlayerVideo+)

TCP » 54.231.115.17:80
de42c193-5410-462c-b64f-0028044b4608-6.exe (HQ Video Pro 3.1cV18.09 by HQ VideoV18.09)

 
Latest 20 of 43 files

URL:
http://tigervnc.bphinz.com/

Network:
Amazon Web Services (AWS)

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.