The domain d3b98uxelh2q3f.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Amazon.com, Inc
Registrar:
MARKMONITOR INC.
Server location:
New York, United States (US)
Create date:
Friday, April 25, 2008
Expires date:
Thursday, April 25, 2019
Updated date:
Thursday, May 5, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Scanner detections:
Detections (96% detected)
Scan engine
Details
Detections
Reason Heuristics
Threat.Win.Reputation.IMP, Threat.Adware.ConvertAd.Meta (H), PUP.Win.Reputation, Adware.ConvertAd (M), PUP.VOPackage.Meta (M), Adware.ConvertAd.Meta (M)
72.92%
ESET NOD32
Win32/Adware.ConvertAd.WE application, Win32/Adware.ConvertAd.YF application, Win32/Adware.ConvertAd.QQ application, Win32/Adware.ConvertAd.ZM application, Win32/Adware.ConvertAd.KJ application, Win32/Adware.ConvertAd.ACS application, Win32/Adware.ConvertAd.ADI application, Win32/Adware.ConvertAd.AHZ.gen application, Win32/Adware.ConvertAd.NT application
47.92%
Emsisoft Anti-Malware
Gen:Variant.Graftor.207928, Gen:Variant.Adware.Graftor.219994, Gen:Variant.Graftor.221910, Trojan.GenericKD.2624563, Gen:Variant.Mikey.21488, Gen:Variant.Graftor.245598, Gen:Variant.Razy.60071
45.83%
G Data
Gen:Variant.Graftor.207928, Gen:Variant.Adware.Graftor.219994, Gen:Variant.Graftor.221910, Gen:Variant.Application.Graftor.242299
39.58%
MicroWorld eScan
Gen:Variant.Graftor.207928, Gen:Variant.Adware.Graftor.219994, Gen:Variant.Graftor.221910, Gen:Variant.Application.Graftor.242299, Application.Generic.1498522, Gen:Variant.Graftor.245749, Gen:Variant.Adware.Graftor.252774
37.50%
Arcabit
Trojan.Graftor.D32C38, Trojan.Adware.Graftor.D35B5A, Trojan.Graftor.D362D6, Trojan.Application.Graftor.D3B27B, Trojan.Adware.Graftor.D3A386
37.50%
Bitdefender
Gen:Variant.Graftor.207928, Gen:Variant.Adware.Graftor.219994, Gen:Variant.Graftor.221910, Gen:Variant.Application.Graftor.242299
37.50%
Baidu Antivirus
Adware.Win32.ConvertAd
29.17%
F-Secure
Trojan.GenericKD.2628158, Riskware.Gen:Variant.Application.Graftor, Gen:Variant.Adware.Graftor, Gen:Variant.Graftor.245598, Trojan.GenericKD.2791459, Gen:Variant.Graftor.255326, Variant.Razy.60275
27.08%
Norman
Trojan.GenericKD.2628158, Gen:Variant.Application.Graftor.242299, Gen:Variant.Adware.Graftor.238470, Gen:Variant.Adware.Graftor.224539
27.08%
ESET NOD32
Win32/Adware.ConvertAd.UU (variant), Win32/Adware.ConvertAd.VC (variant), Win32/Adware.ConvertAd.VA (variant), Win32/Adware.ConvertAd.WA, Win32/Adware.ConvertAd.ADI (variant)
25.00%
F-Secure
Gen:Variant.Graftor.207928, Gen:Variant.Adware.Graftor, Gen:Variant.Graftor.221910, Trojan.GenericKD.2624563, Gen:Variant.Mikey.21488
22.92%
AhnLab V3 Security
PUP/Win32.VOPackage, Adware/Win32.ConvertAd, PUP/Win32.ConvertAd, PUP/Win32.Agent
22.92%
Panda Antivirus
Trj/Genetic.gen, Generic Suspicious
22.92%
Lavasoft Ad-Aware
Gen:Variant.Application.Graftor.242299, Gen:Variant.Adware.Graftor.238470, Gen:Variant.Adware.Graftor.224539, Gen:Variant.Graftor.245598, Gen:Variant.Adware.Graftor.239924
22.92%
The domain d3b98uxelh2q3f.cloudfront.net has been seen to resolve to the following 430 IP addresses.
server-54-230-193-219.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-100.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-87.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-30.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-29.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-236.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-230.iad53.r.cloudfront.net
August 30, 2016
server-54-192-19-134.iad12.r.cloudfront.net
August 28, 2016
server-54-192-19-95.iad12.r.cloudfront.net
August 28, 2016
server-54-192-19-78.iad12.r.cloudfront.net
August 28, 2016
server-54-192-19-192.iad12.r.cloudfront.net
August 28, 2016
server-54-192-19-170.iad12.r.cloudfront.net
August 28, 2016
server-54-230-193-133.iad53.r.cloudfront.net
August 27, 2016
server-52-84-125-49.iad16.r.cloudfront.net
August 26, 2016
server-54-192-19-55.iad12.r.cloudfront.net
August 25, 2016
server-54-192-19-179.iad12.r.cloudfront.net
August 25, 2016
server-54-192-19-160.iad12.r.cloudfront.net
August 25, 2016
server-54-192-19-105.iad12.r.cloudfront.net
August 25, 2016
server-54-192-19-136.iad12.r.cloudfront.net
August 25, 2016
server-54-230-193-62.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-214.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-201.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-186.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-146.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-126.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-97.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-68.iad53.r.cloudfront.net
August 25, 2016
server-52-84-125-46.iad16.r.cloudfront.net
August 23, 2016
server-52-84-125-33.iad16.r.cloudfront.net
August 23, 2016
server-52-84-125-28.iad16.r.cloudfront.net
August 23, 2016
Showing 30 of 430 IP Addresses
File downloads found at URLs served by d3b98uxelh2q3f.cloudfront.net.
The following 573 files have been seen to comunicate with d3b98uxelh2q3f.cloudfront.net in live environments.
URL:
http://d3b98uxelh2q3f.cloudfront.net/
Network:
Amazon Cloudfront
SSL certificate subject:
CN=*.cloudfront.net, O="Amazon.com, Inc.", L=Seattle, S=Washington, C=US
SSL certificate issuer:
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US