Domain > d3rfg299sklrxh.cloudfront.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to d3rfg299sklrxh.cloudfront.net

MD5	A/V
7abda160d21cbdccb9da527271effec7	[Trojan.DownLoader14.44235] [BehavesLike.Win32.AdwareMonetizer.dc] [Artemis!7ABDA160D21C] [W32/Eldorado.8F43!tr] [MultiBundle]
b0aa0c564d615ce3132fe70be91642fc	[Artemis!B0AA0C564D61] [Riskware.Nsis.Dloader.dvvnkj] [Trojan.Win32.A.Clicker.328504[h]] [Trojan.DownLoader16.62061] [BehavesLike.Win32.BadFile.fh] [MultiBundle]
20b9f93cc9c8d7dab7af82659fbc0e24	[W32.HfsAdware.7119] [Riskware.Nsis.Dloader.dvvnkj] [BehavesLike.Win32.Tool.dc] [AdWare.MultiBundle] [MultiBundle]
56e47847831302e59659ec68e242eeed
9b27abd09dd88fe2c7a39b1af1c36338	[W32.HfsAdware.7119] [Riskware.Nsis.Dloader.dvvnkj] [BehavesLike.Win32.Tool.dc] [Artemis!9B27ABD09DD8] [AdWare.MultiBundle] [MultiBundle]
4f66bbc61f4a8b3d1fe4ff6dfe1aaf77	[W32.HfsAdware.7119] [Riskware.Nsis.Dloader.dvvnkj] [BehavesLike.Win32.Tool.dc] [AdWare.MultiBundle] [MultiBundle]
7318a999344d77c5260c36bad43bb56e	[W32.HfsAdware.7119] [Artemis!7318A999344D] [PUP.Optional.DownWare] [Riskware.Nsis.Dloader.dvvnkj] [Adware.Downware.14122] [Adware.DownwareCRTD.Win32.20] [BehavesLike.Win32.BadFile.dc] [Adware.Downware.245472[h]] [MultiBundle]
3ed65340a486b3000acd66fd7bc5887e	[Artemis!3ED65340A486] [BehavesLike.Win32.AdwareSweet.dc] [MultiBundle]
14bdc88844cd63626f48fa9d610a81c0	[W32.HfsAdware.7119] [Artemis!14BDC88844CD] [PUP.Optional.DownWare] [Adware.DownwareCRTD.Win32.443] [trojan.win32.uascape.a] [Riskware.Nsis.Dloader.dvvnkj] [Adware.Downware.14126] [Artemis!Trojan] [MultiBundle]

Whois

Property	Value
Email	hostmaster@amazon.com
NameServer	NS-1597.AWSDNS-07.CO.UK
Created	2008-04-25 00:00:00
Changed	2014-02-25 00:00:00
Expires	2017-04-25 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2014-07-02	54.230.88.224 (ClassC)
2014-07-09	205.251.253.190 (ClassC)
2014-08-08	54.230.88.72 (ClassC)
2014-08-08	54.230.91.219 (ClassC)
2014-08-21	54.230.91.206 (ClassC)
2014-09-30	54.230.4.94 (ClassC)
2014-10-05	54.230.7.195 (ClassC)
2014-11-19	54.230.90.128 (ClassC)
2015-01-05	54.230.91.76 (ClassC)
2015-03-17	54.230.5.237 (ClassC)
2015-03-25	54.230.90.163 (ClassC)
2015-03-28	54.230.90.33 (ClassC)
2015-05-17	54.239.172.100 (ClassC)
2015-07-17	54.230.89.158 (ClassC)
2015-07-29	54.192.144.232 (ClassC)
2018-09-28	52.84.139.249 (ClassC)
2019-05-03	99.84.240.114 (ClassC)
2019-05-09	13.249.141.42 (ClassC)
2019-05-09	143.204.31.220 (ClassC)
2019-05-12	99.84.170.153 (ClassC)
2019-05-12	99.84.170.26 (ClassC)
2019-05-13	99.84.240.94 (ClassC)
2019-05-21	99.86.61.12 (ClassC)
2019-05-21	99.86.61.195 (ClassC)
2019-05-24	13.249.94.80 (ClassC)
2019-05-24	13.249.94.136 (ClassC)
2019-05-24	13.249.94.43 (ClassC)
2019-08-14	52.84.61.167 (ClassC)
2019-08-14	52.84.61.29 (ClassC)
2019-08-14	52.84.61.80 (ClassC)
2020-06-29	52.84.18.72 (ClassC)
2020-07-02	99.84.216.149 (ClassC)
2020-07-30	52.84.18.55 (ClassC)
2020-08-03	13.32.196.219 (ClassC)
2020-08-03	13.32.196.56 (ClassC)
2020-08-26	54.230.18.182 (ClassC)
2020-10-05	13.225.62.207 (ClassC)
2021-02-26	54.230.125.133 (ClassC)
2021-04-16	13.225.231.32 (ClassC)
2021-05-03	54.230.57.137 (ClassC)
2021-05-08	13.224.215.82 (ClassC)
2021-05-08	13.32.65.150 (ClassC)
2021-07-02	13.226.189.213 (ClassC)
2021-07-02	13.226.189.69 (ClassC)
2024-02-15	18.161.3.93 (ClassC)
2024-08-12	18.161.3.36 (ClassC)
2024-09-14	52.84.160.227 (ClassC)
2024-12-04	18.161.3.138 (ClassC)
2024-12-19	52.84.160.217 (ClassC)
2025-03-03	52.84.160.102 (ClassC)
2025-04-10	18.161.3.23 (ClassC)
2025-09-05	3.175.29.177 (ClassC)
2025-10-20	3.175.29.15 (ClassC)
2026-02-03	3.175.29.82 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
d1jds163rs6100.cloudfront.net	2024-09-17	3.163.24.123
d25wby5c7p9100.cloudfront.net	2026-01-05	3.169.167.166
d1atqi1n69j100.cloudfront.net	2025-01-11	204.246.191.96
di7jquifqm100.cloudfront.net	2018-08-19	13.32.0.104

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]