The domain d2htwdv930b0cg.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Amazon.com, Inc
Registrar:
MARKMONITOR INC.
Server location:
Virginia, United States (US)
Create date:
Friday, April 25, 2008
Expires date:
Thursday, April 25, 2019
Updated date:
Thursday, May 5, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (98% detected)
Scan engine
Details
Detections
Baidu Antivirus
Adware.Win32.ConvertAd, Adware.Win32.Agent, Adware.Win32.Vopak, Adware.Win32.Downloader, Adware.Win32.Genome
64.00%
Kaspersky
UDS:DangerousObject.Multi.Generic, not-a-virus:AdWare.Win32.Vopak, not-a-virus:AdWare.NSIS.ConvertAd, not-a-virus:HEUR:Adware.NSIS.ConvertAd, Trojan-Downloader.Win32.Genome
62.00%
G Data
Trojan.GenericKD.2277933, Gen:Variant.Graftor.183154, Application.Generic.1265028, Trojan.GenericKD.2292339, Gen:Variant.Graftor.183886
58.00%
MicroWorld eScan
Trojan.GenericKD.2277933, Gen:Variant.Graftor.183154, Application.Generic.1265028, Trojan.GenericKD.2292339, Gen:Variant.Graftor.183886, Trojan.GenericKD.2323936, Trojan.GenericKD.2323811, Gen:Variant.Adware.Graftor.185812, Gen:Variant.Mikey.12499, Gen:Variant.Mikey.12938, Gen:Variant.Graftor.183491, Gen:Variant.Adware.Graftor.184961
56.00%
Bitdefender
Trojan.GenericKD.2277933, Gen:Variant.Graftor.183154, Application.Generic.1265028, Trojan.GenericKD.2292339, Gen:Variant.Graftor.183886
56.00%
VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, Adware.NSIS.ConvertAd, Threat.4807782
56.00%
Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen, HEUR/QVM42.0.Malware.Gen, HEUR/QVM42.1.Malware.Gen, Win32/Trojan.Downloader.83b
56.00%
Emsisoft Anti-Malware
Trojan.GenericKD.2277933, Gen:Variant.Graftor.183154, Trojan.GenericKD.2292339, Gen:Variant.Graftor.183886, Gen:Variant.Mikey.11348
54.00%
Trend Micro House Call
Suspicious_GEN.F47V0413, TROJ_GEN.R0C1H09DM15, Suspicious_GEN.F47V0415, TROJ_GEN.R000C0EDT15, TROJ_GEN.R047H07DU15, TROJ_GEN.R047C0OE615, Suspicious_GEN.F47V0501
54.00%
Reason Heuristics
Threat.Win.Reputation.IMP, Threat.Adware.ConvertAd, Adware.ConvertAd (M), PUP.ConvertAd.ET (M)
50.00%
ESET NOD32
Win32/Adware.ConvertAd.FO, Win32/Adware.ConvertAd.GI (variant), Win32/Adware.ConvertAd.FC, Win32/Adware.ConvertAd.FL, Win32/Adware.ConvertAd.FE
48.00%
Panda Antivirus
Generic Suspicious, Trj/Genetic.gen, Trj/CI.A, Trj/Chgt.O
46.00%
F-Secure
Application.Generic.1265028, Gen:Variant.Graftor.183886, Trojan.GenericKD.2299059, Trojan.GenericKD.2299684, Application.Generic.1265951
44.00%
McAfee
Artemis!FB53112CC484, Trojan.Artemis!93CFEF7548F0, Artemis!947FF7B8820B, RDN/Generic PUP.x!cwm, Artemis!E2303D37CE31, Artemis!77303112398F
44.00%
avast!
Win32:Adware-gen [Adw], Win32:Dropper-gen [Drp], Win32:Rootkit-gen [Rtk], Win32:Malware-gen
40.00%
The domain d2htwdv930b0cg.cloudfront.net has been seen to resolve to the following 282 IP addresses.
server-54-230-193-40.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-243.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-127.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-126.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-77.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-76.iad53.r.cloudfront.net
August 30, 2016
server-54-230-193-74.iad53.r.cloudfront.net
August 30, 2016
server-52-84-125-55.iad16.r.cloudfront.net
August 30, 2016
server-54-230-193-212.iad53.r.cloudfront.net
August 29, 2016
server-54-230-193-15.iad53.r.cloudfront.net
August 26, 2016
server-54-230-193-221.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-220.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-190.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-150.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-93.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-67.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-45.iad53.r.cloudfront.net
August 25, 2016
server-54-230-193-21.iad53.r.cloudfront.net
August 25, 2016
server-54-192-19-212.iad12.r.cloudfront.net
August 24, 2016
server-54-192-19-158.iad12.r.cloudfront.net
August 24, 2016
server-54-192-19-157.iad12.r.cloudfront.net
August 24, 2016
server-54-192-19-156.iad12.r.cloudfront.net
August 24, 2016
server-54-192-19-113.iad12.r.cloudfront.net
August 24, 2016
server-54-192-19-60.iad12.r.cloudfront.net
August 24, 2016
server-54-192-19-58.iad12.r.cloudfront.net
August 24, 2016
server-54-192-19-22.iad12.r.cloudfront.net
August 24, 2016
server-52-84-125-164.iad16.r.cloudfront.net
August 23, 2016
server-52-84-125-66.iad16.r.cloudfront.net
August 23, 2016
server-52-84-125-63.iad16.r.cloudfront.net
August 23, 2016
server-52-84-125-11.iad16.r.cloudfront.net
August 23, 2016
Showing 30 of 282 IP Addresses
File downloads found at URLs served by d2htwdv930b0cg.cloudfront.net.
The following 382 files have been seen to comunicate with d2htwdv930b0cg.cloudfront.net in live environments.
URL:
http://d2htwdv930b0cg.cloudfront.net/
Network:
Amazon Cloudfront
SSL certificate subject:
CN=*.cloudfront.net, O="Amazon.com, Inc.", L=Seattle, S=Washington, C=US
SSL certificate issuer:
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US