Domain > d1dm2eu94w6emh.cloudfront.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to d1dm2eu94w6emh.cloudfront.net

MD5	A/V
b0aa0c564d615ce3132fe70be91642fc	[Artemis!B0AA0C564D61] [Riskware.Nsis.Dloader.dvvnkj] [Trojan.Win32.A.Clicker.328504[h]] [Trojan.DownLoader16.62061] [BehavesLike.Win32.BadFile.fh] [MultiBundle]
20b9f93cc9c8d7dab7af82659fbc0e24	[W32.HfsAdware.7119] [Riskware.Nsis.Dloader.dvvnkj] [BehavesLike.Win32.Tool.dc] [AdWare.MultiBundle] [MultiBundle]
4596e3c3804ada1c2fbbada9005a95a8	[Adware.Vopak.Win32.691] [Downloader] [Riskware.Nsis.Adware.dyobju] [Troj/DwnLdr-MXH] [Trojan.DownLoader16.63815] [BehavesLike.Win32.Tool.cc] [W32/Downloader.NPEP-6177] [TR/Dldr.Megone.173159] [Trj/CI.A] [AdWare.MultiBundle]
56e47847831302e59659ec68e242eeed
9b27abd09dd88fe2c7a39b1af1c36338	[W32.HfsAdware.7119] [Riskware.Nsis.Dloader.dvvnkj] [BehavesLike.Win32.Tool.dc] [Artemis!9B27ABD09DD8] [AdWare.MultiBundle] [MultiBundle]
4f66bbc61f4a8b3d1fe4ff6dfe1aaf77	[W32.HfsAdware.7119] [Riskware.Nsis.Dloader.dvvnkj] [BehavesLike.Win32.Tool.dc] [AdWare.MultiBundle] [MultiBundle]
7318a999344d77c5260c36bad43bb56e	[W32.HfsAdware.7119] [Artemis!7318A999344D] [PUP.Optional.DownWare] [Riskware.Nsis.Dloader.dvvnkj] [Adware.Downware.14122] [Adware.DownwareCRTD.Win32.20] [BehavesLike.Win32.BadFile.dc] [Adware.Downware.245472[h]] [MultiBundle]

Whois

Property	Value
Email	hostmaster@amazon.com
NameServer	NS-1597.AWSDNS-07.CO.UK
Created	2008-04-25 00:00:00
Changed	2014-02-25 00:00:00
Expires	2017-04-25 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2015-10-07	54.230.91.205 (ClassC)
2016-09-20	52.84.56.207 (ClassC)
2016-09-20	52.84.56.41 (ClassC)
2016-09-20	52.84.56.77 (ClassC)
2016-09-20	52.84.56.20 (ClassC)
2020-08-08	13.227.42.55 (ClassC)
2020-08-08	99.84.47.10 (ClassC)
2020-08-08	99.84.245.41 (ClassC)
2020-08-08	13.227.42.71 (ClassC)
2020-08-08	13.227.42.14 (ClassC)
2020-08-11	99.84.245.102 (ClassC)
2020-08-13	99.84.252.206 (ClassC)
2020-08-13	99.84.252.34 (ClassC)
2020-08-15	52.84.18.127 (ClassC)
2020-08-15	52.84.18.7 (ClassC)
2020-10-07	13.226.23.179 (ClassC)
2020-10-28	65.8.242.204 (ClassC)
2020-11-05	54.230.17.14 (ClassC)
2020-11-25	52.85.90.122 (ClassC)
2020-11-27	52.85.90.22 (ClassC)
2020-12-14	65.8.242.6 (ClassC)
2020-12-15	13.227.45.230 (ClassC)
2020-12-28	99.84.106.102 (ClassC)
2020-12-31	13.224.209.214 (ClassC)
2021-07-23	99.84.254.188 (ClassC)
2021-08-02	54.192.100.103 (ClassC)
2021-08-08	54.230.57.82 (ClassC)
2023-12-20	52.84.160.79 (ClassC)
2024-03-23	3.163.19.174 (ClassC)
2024-04-18	3.163.19.30 (ClassC)
2024-05-14	52.84.160.49 (ClassC)
2024-06-22	3.163.19.193 (ClassC)
2024-09-16	99.84.178.92 (ClassC)
2024-10-07	52.84.160.17 (ClassC)
2024-10-23	3.163.19.137 (ClassC)
2024-12-25	52.84.160.208 (ClassC)
2025-04-09	99.84.71.69 (ClassC)
2025-04-15	99.84.71.215 (ClassC)
2025-07-18	99.84.71.212 (ClassC)
2025-08-27	99.84.71.172 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
d1jds163rs6100.cloudfront.net	2024-09-17	3.163.24.123
d1atqi1n69j100.cloudfront.net	2025-01-11	204.246.191.96
di7jquifqm100.cloudfront.net	2018-08-19	13.32.0.104

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]