d17ql6ygi350y.cloudfront.net
Amazon.com, Inc
Domain Information
The domain d17ql6ygi350y.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. Currently this domain has been known to host various forms of malware. The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Amazon.com, Inc
Registrar:
MARKMONITOR INC.
Server location:
Washington, United States (US)
Create date:
Friday, April 25, 2008
Expires date:
Thursday, April 25, 2019
Updated date:
Thursday, May 5, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Malware distribution (100% detected)
Scan engine
Details
Detections
avast!
Win32:Adware-gen [Adw], Win32:RmnDrp
83.33%
Dr.Web
Trojan.Crossrider1.57003, Trojan.Crossrider1.57128, Win32.Rmnet.12
66.67%
Emsisoft Anti-Malware
Gen:Variant.Razy.18672, Win32.Ramnit.N
50.00%
Reason Heuristics
Adware.Imali, Threat.Win.Reputation.IMP
33.33%
Malwarebytes
PUP.Optional.Amonetize
33.33%
ESET NOD32
MSIL/Adware.Imali (variant)
33.33%
Trend Micro House Call
HT_IMALI_FB250001.UVPM
33.33%
Avira AntiVirus
TR/Dropper.MSIL.Gen
33.33%
AhnLab V3 Security
PUP/Win32.OfferInstaller
33.33%
Vba32 AntiVirus
TScope.Trojan.MSIL
33.33%
IKARUS anti.virus
AdWare.MSIL.Imali
33.33%
Qihoo 360 Security
QVM03.0.Malware.Gen
33.33%
ESET NOD32
Win32/Ramnit.H virus
33.33%
McAfee
Trojan.RDN/Generic.grp
33.33%
F-Prot
W32/Ramnit.B!Generic
33.33%
The domain d17ql6ygi350y.cloudfront.net has been seen to resolve to the following 24 IP addresses.
server-52-85-131-44.iad53.r.cloudfront.net
June 28, 2016
server-52-85-131-22.iad53.r.cloudfront.net
June 28, 2016
server-52-85-131-199.iad53.r.cloudfront.net
June 28, 2016
server-52-85-131-185.iad53.r.cloudfront.net
June 28, 2016
server-52-85-131-165.iad53.r.cloudfront.net
June 28, 2016
server-52-85-131-82.iad53.r.cloudfront.net
June 28, 2016
server-52-85-131-60.iad53.r.cloudfront.net
June 28, 2016
server-52-85-131-58.iad53.r.cloudfront.net
June 28, 2016
server-52-85-142-208.iad12.r.cloudfront.net
June 5, 2016
server-52-85-142-180.iad12.r.cloudfront.net
June 5, 2016
server-52-85-142-103.iad12.r.cloudfront.net
June 5, 2016
server-52-85-142-54.iad12.r.cloudfront.net
June 5, 2016
server-52-85-142-39.iad12.r.cloudfront.net
June 5, 2016
server-52-85-142-22.iad12.r.cloudfront.net
June 5, 2016
server-52-85-142-8.iad12.r.cloudfront.net
June 5, 2016
server-52-85-142-217.iad12.r.cloudfront.net
June 5, 2016
server-52-85-131-65.iad53.r.cloudfront.net
June 4, 2016
server-52-85-131-13.iad53.r.cloudfront.net
June 4, 2016
server-52-85-131-221.iad53.r.cloudfront.net
June 4, 2016
server-52-85-131-198.iad53.r.cloudfront.net
June 4, 2016
server-52-85-131-181.iad53.r.cloudfront.net
June 4, 2016
server-52-85-131-141.iad53.r.cloudfront.net
June 4, 2016
server-52-85-131-95.iad53.r.cloudfront.net
June 4, 2016
server-52-85-131-67.iad53.r.cloudfront.net
June 4, 2016
File downloads found at URLs served by d17ql6ygi350y.cloudfront.net.
The following 29 files have been seen to comunicate with d17ql6ygi350y.cloudfront.net in live environments.
URL:
http://d17ql6ygi350y.cloudfront.net/
Network:
Amazon Cloudfront
SSL certificate subject:
CN=*.cloudfront.net, O="Amazon.com, Inc.", L=Seattle, S=Washington, C=US
SSL certificate issuer:
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
