home

d3qgdrtcrfbzr5.cloudfront.net

Amazon.com, Inc

Domain Information

The domain d3qgdrtcrfbzr5.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
MARKMONITOR INC.

Server location:
Virginia, United States (US)

Create date:
Friday, April 25, 2008

Expires date:
Tuesday, April 25, 2017

Updated date:
Tuesday, February 25, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
cloudfront.net

Whois:
1 cloudfront.net record

The domain d3qgdrtcrfbzr5.cloudfront.net has been seen to resolve to the following 8 IP addresses.

54.230.50.129
server-54-230-50-129.jfk5.r.cloudfront.net
August 13, 2014

54.230.49.196
server-54-230-49-196.jfk5.r.cloudfront.net
August 13, 2014

54.230.50.206
server-54-230-50-206.jfk5.r.cloudfront.net
August 13, 2014

54.230.51.129
server-54-230-51-129.jfk5.r.cloudfront.net
August 13, 2014

54.230.49.186
server-54-230-49-186.jfk5.r.cloudfront.net
August 13, 2014

54.230.51.2
server-54-230-51-2.jfk5.r.cloudfront.net
August 13, 2014

54.230.48.197
server-54-230-48-197.jfk5.r.cloudfront.net
August 13, 2014

205.251.251.148
server-205-251-251-148.jfk5.r.cloudfront.net
August 13, 2014

File downloads found at URLs served by d3qgdrtcrfbzr5.cloudfront.net.

0 / 68
http://d3qgdrtcrfbzr5.cloudfront.net/files_production/.../UM79?response-content-disposition=attachment; filename=Windows8-Setup.exe; filename*=UTF-8''Windows8-Setup.exe&Expires=1381951845&Signature=ahpdZP0tYJtGu3z6JALP4eczGbGZl7-X21L~CwRcC5U6ClWpqTqAHuh9NPDllDyu1qOXhnzdXMU0h7Uxht9yS~00lWhVwFOMhnQwXb~BxmVeDYVK8bEIQnsWNSCBsmnkZVsBe8DwM8QIV3OCpTtQTvmNXtAcHgzEVob8CtFxTD4_&Key-Pair-Id=APKAJTEIOJM3LSMN33SA  (c7e3c98f743330cd996027692fd6663b)

The following 12 files have been seen to comunicate with d3qgdrtcrfbzr5.cloudfront.net in live environments.

TCP » 54.230.51.129:80
browser.exe (Browser)

TCP » 54.230.51.129:80
ipcdl.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 54.230.51.129:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.51.129:80
uncheckithelper.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 54.230.51.129:80
new_updatemobogenie.exe

TCP » 54.230.51.129:80
uncheckitupdate.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 54.230.51.129:80
yacqq.exe

TCP » 54.230.48.197:80
PureLeads.Service.exe (Sendori.Service by sendori)

TCP » 54.230.48.197:80
cyycfhtzro64.exe

TCP » 54.230.49.186:80
cyycfhtzro64.exe

TCP » 54.230.49.186:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 54.230.49.186:80
Client.exe

TCP » 54.230.50.206:80
Client.exe

TCP » 54.230.51.129:80
docqwz7.exe

URL:
http://d3qgdrtcrfbzr5.cloudfront.net/

Network:
Amazon Cloudfront

SSL certificate subject:
CN=*.cloudfront.net, O=Amazon.com Inc., L=Seattle, S=Washington, C=US

SSL certificate issuer:
CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Web server:
CloudFront

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.