dhb2v6uqym5lb.cloudfront.net
Amazon.com, Inc
Domain Information
The domain dhb2v6uqym5lb.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Amazon.com, Inc
Registrar:
MARKMONITOR INC.
Server location:
Washington, United States (US)
Create date:
Friday, April 25, 2008
Expires date:
Tuesday, April 25, 2017
Updated date:
Tuesday, February 25, 2014
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Google Safe Browsing:
unwanted
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Bkav FE
W32.HfsAdware
100.00%
Zillya! Antivirus
Downloader.Agent.Win32.228288
100.00%
K7 AntiVirus
Unwanted-Program
100.00%
Agnitum Outpost
Riskware.Agent
100.00%
ESET NOD32
Win32/DownWare.L potentially unwanted
100.00%
Kaspersky
not-a-virus:Downloader.Win32.Agent
100.00%
ViRobot
Adware.Agent.2043080[h]
100.00%
Sophos
Generic PUA OK (PUA)
100.00%
Dr.Web
Program.Unwanted.362
100.00%
VIPRE Antivirus
Trojan-Downloader.Win32.Agent
100.00%
Fortinet FortiGate
Riskware/Agent
100.00%
AhnLab V3 Security
Win-PUP/Adload
100.00%
Baidu Antivirus
PUA.Win32.DownWare
100.00%
G Data
Win32.Trojan.Agent.FDHUIL
100.00%
The domain dhb2v6uqym5lb.cloudfront.net has been seen to resolve to the following 8 IP addresses.
server-54-192-195-185.iad53.r.cloudfront.net
February 3, 2016
server-54-192-195-162.iad53.r.cloudfront.net
February 3, 2016
server-54-192-195-138.iad53.r.cloudfront.net
February 3, 2016
server-54-192-195-44.iad53.r.cloudfront.net
February 3, 2016
server-54-192-195-25.iad53.r.cloudfront.net
February 3, 2016
server-54-192-195-14.iad53.r.cloudfront.net
February 3, 2016
server-54-192-195-249.iad53.r.cloudfront.net
February 3, 2016
server-54-192-195-205.iad53.r.cloudfront.net
February 3, 2016
File downloads found at URLs served by dhb2v6uqym5lb.cloudfront.net.
The following file have been seen to comunicate with dhb2v6uqym5lb.cloudfront.net in live environments.
URL:
http://dhb2v6uqym5lb.cloudfront.net/
Network:
Amazon Cloudfront
SSL certificate subject:
CN=*.cloudfront.net, O="Amazon.com, Inc.", L=Seattle, S=Washington, C=US
SSL certificate issuer:
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
