home

d2mje64xs0b9gu.cloudfront.net

Amazon.com, Inc

Domain Information

The domain d2mje64xs0b9gu.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
MARKMONITOR INC.

Server location:
Virginia, United States (US)

Create date:
Friday, April 25, 2008

Expires date:
Tuesday, April 25, 2017

Updated date:
Tuesday, February 25, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
cloudfront.net

Whois:
1 cloudfront.net record

The domain d2mje64xs0b9gu.cloudfront.net has been seen to resolve to the following 24 IP addresses.

54.230.49.20
server-54-230-49-20.jfk5.r.cloudfront.net
May 31, 2014

54.230.49.250
server-54-230-49-250.jfk5.r.cloudfront.net
May 31, 2014

54.230.49.122
server-54-230-49-122.jfk5.r.cloudfront.net
May 31, 2014

54.230.48.229
server-54-230-48-229.jfk5.r.cloudfront.net
May 31, 2014

54.230.51.156
server-54-230-51-156.jfk5.r.cloudfront.net
May 31, 2014

54.230.49.30
server-54-230-49-30.jfk5.r.cloudfront.net
May 31, 2014

54.230.49.191
server-54-230-49-191.jfk5.r.cloudfront.net
May 31, 2014

54.230.48.172
server-54-230-48-172.jfk5.r.cloudfront.net
May 31, 2014

54.230.49.241
server-54-230-49-241.jfk5.r.cloudfront.net
May 30, 2014

54.230.49.239
server-54-230-49-239.jfk5.r.cloudfront.net
May 30, 2014

54.230.49.212
server-54-230-49-212.jfk5.r.cloudfront.net
May 30, 2014

205.251.251.5
server-205-251-251-5.jfk5.r.cloudfront.net
May 30, 2014

54.230.49.190
server-54-230-49-190.jfk5.r.cloudfront.net
May 30, 2014

205.251.251.97
server-205-251-251-97.jfk5.r.cloudfront.net
May 30, 2014

205.251.251.30
server-205-251-251-30.jfk5.r.cloudfront.net
May 30, 2014

54.230.49.199
server-54-230-49-199.jfk5.r.cloudfront.net
May 30, 2014

54.230.38.216
server-54-230-38-216.jfk1.r.cloudfront.net
April 11, 2014

54.230.38.184
server-54-230-38-184.jfk1.r.cloudfront.net
April 11, 2014

54.230.39.119
server-54-230-39-119.jfk1.r.cloudfront.net
April 11, 2014

54.230.38.88
server-54-230-38-88.jfk1.r.cloudfront.net
April 11, 2014

54.230.38.186
server-54-230-38-186.jfk1.r.cloudfront.net
April 11, 2014

54.230.37.68
server-54-230-37-68.jfk1.r.cloudfront.net
April 11, 2014

54.230.36.168
server-54-230-36-168.jfk1.r.cloudfront.net
April 11, 2014

54.230.37.129
server-54-230-37-129.jfk1.r.cloudfront.net
April 11, 2014

File downloads found at URLs served by d2mje64xs0b9gu.cloudfront.net.

0 / 68
http://d2mje64xs0b9gu.cloudfront.net/.../Setup-kddi.exe  (174524c00b26449115ed5298f594a5da)

0 / 68
http://d2mje64xs0b9gu.cloudfront.net/.../setup_1.0beta1.exe  (aaa448769362be26e6c7dc000dcd3c0d)

2 / 68      (PUP)
http://d2mje64xs0b9gu.cloudfront.net/.../Setup.exe  (5a9ce4b834f114069fda6ba086324970)

0 / 68
http://d2mje64xs0b9gu.cloudfront.net/.../Setup.exe  (743b645bf3bef7ba8985d9c96c1f976d)

The following 26 files have been seen to comunicate with d2mje64xs0b9gu.cloudfront.net in live environments.

TCP » 54.230.51.156:80
com.exe

TCP » 54.230.51.156:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.51.156:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.230.37.68:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.51.156:80
uvconverter.exe

TCP » 205.251.251.30:80
client.exe (ClientWrapper)

TCP » 54.230.37.129:80
dcbrakieamo_amobl_setup.exe

TCP » 54.230.37.129:80
nsj9990.tmp

TCP » 54.230.37.129:80
nsia895.tmp

TCP » 54.230.37.129:80
nsx9c12.tmp

TCP » 54.230.38.184:80
dcytdkiemon_amodk_setup.exe

TCP » 54.230.38.184:443
nsx7f3e.tmp

TCP » 54.230.38.186:80
oswye.exe (Virtual by Virtual Group)

TCP » 54.230.38.186:443
DownloadManager.exe (DownloadManager)

TCP » 54.230.38.186:443
setup_42cd63.exe

TCP » 54.230.38.186:443
nso34ca.tmp

TCP » 54.230.38.186:443
nsd9152.tmp

TCP » 54.230.38.186:443
u1603.exe

TCP » 54.230.38.216:443
online-guardian-v2.0.9.exe

TCP » 54.230.49.20:80
Sendori.Service.exe (Sendori.Service by sendori)

 
Latest 20 of 30 files

URL:
http://d2mje64xs0b9gu.cloudfront.net/

Network:
Amazon Cloudfront

SSL certificate subject:
CN=*.cloudfront.net, O=Amazon.com Inc., L=Seattle, S=Washington, C=US

SSL certificate issuer:
CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.