home

d3svwm5itp10l9.cloudfront.net

Amazon.com, Inc

Domain Information

The domain d3svwm5itp10l9.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
MARKMONITOR INC.

Server location:
Virginia, United States (US)

Create date:
Friday, April 25, 2008

Expires date:
Tuesday, April 25, 2017

Updated date:
Tuesday, February 25, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
cloudfront.net

Whois:
1 cloudfront.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic, PUP.YTD.Installer.Installer.Meta (M), PUP.GreenTree.Installer.Meta (M), PUP.GreenTree (M)
100.00%

Bkav FE
W32.HfsAdware
2.00%

McAfee
Artemis!8A5AE67E0CA6
2.00%

Malwarebytes
PUP.Optional.APNToolBar.A
2.00%

Dr.Web
Adware.Downware.10873
2.00%

Vba32 AntiVirus
Backdoor.Sinowal
2.00%

Baidu Antivirus
Adware.Win32.AskToolbar
2.00%

ESET NOD32
Win32/Bundled.Toolbar.Ask.G potentially unsafe (variant)
2.00%

IKARUS anti.virus
PUA.Offer
2.00%

Fortinet FortiGate
Riskware/Ask
2.00%

avast!
Win32:Adware-gen [Adw]
2.00%

G Data
Win32.Adware.Spigot
2.00%

Quick Heal
AdWare.MSIL.g6 (Not a Virus)
2.00%

K7 AntiVirus
Trojan
2.00%

Trend Micro House Call
TROJ_GEN.R047H07HS14
2.00%

The domain d3svwm5itp10l9.cloudfront.net has been seen to resolve to the following 19 IP addresses.

54.230.100.6
server-54-230-100-6.iad2.r.cloudfront.net
January 20, 2015

54.192.101.99
server-54-192-101-99.iad2.r.cloudfront.net
January 20, 2015

54.192.101.75
server-54-192-101-75.iad2.r.cloudfront.net
January 20, 2015

216.137.33.226
server-216-137-33-226.iad2.r.cloudfront.net
January 20, 2015

216.137.33.222
server-216-137-33-222.iad2.r.cloudfront.net
January 20, 2015

54.230.101.54
server-54-230-101-54.iad2.r.cloudfront.net
January 6, 2015

54.192.101.120
server-54-192-101-120.iad2.r.cloudfront.net
January 6, 2015

54.192.101.115
server-54-192-101-115.iad2.r.cloudfront.net
January 6, 2015

54.192.101.109
server-54-192-101-109.iad2.r.cloudfront.net
January 6, 2015

54.192.101.85
server-54-192-101-85.iad2.r.cloudfront.net
January 6, 2015

54.192.101.79
server-54-192-101-79.iad2.r.cloudfront.net
January 6, 2015

216.137.33.108
server-216-137-33-108.iad2.r.cloudfront.net
January 6, 2015

54.230.103.209
server-54-230-103-209.iad2.r.cloudfront.net
January 6, 2015

54.192.101.73
server-54-192-101-73.iad2.r.cloudfront.net
January 3, 2015

216.137.33.235
server-216-137-33-235.iad2.r.cloudfront.net
January 3, 2015

54.230.102.179
server-54-230-102-179.iad2.r.cloudfront.net
January 3, 2015

54.230.101.208
server-54-230-101-208.iad2.r.cloudfront.net
January 3, 2015

54.230.101.44
server-54-230-101-44.iad2.r.cloudfront.net
January 3, 2015

54.230.192.213
server-54-230-192-213.iad53.r.cloudfront.net
January 3, 2015

File downloads found at URLs served by d3svwm5itp10l9.cloudfront.net.

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/yBdIIQz0Hy50btzP5GvK3x8r6A4Y63m-Nh0W__RxxeM  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/As4gIq06V9OUsRjt6maJsbDSIDWX_kgC6rLxcQU2dac  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/wApMZyWJZQ2IAN8HFPU6ZumKb7uA076kk0LpoFmW_oU  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/G0uxdcQRUCi9DsFn5Xsd_BR1UkQWbd-DIKkxuvxKJsQ  (ytdsetup.exe)

24 / 68    (PUP)
http://d3svwm5itp10l9.cloudfront.net/YYUMnCScJ73iHj0YPfbx8ax7p-LeekllGN_XEtyUBnU  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/eZSPmQmQHCAWtHliA6j9xVkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/TWVo5aryoaJRj0wFY7F6tFkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/CKzplwVq3FtddjfX1JPePx8r6A4Y63m-Nh0W__RxxeM  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/omYX4CuO0-5ckk2KBcD8VlkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/9zxYb8dhJ6s8iytQae-tnBBhcJzwxstqIkek7uRXwn4  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/9VMzwFyZrxqV7a2VWt9BGVkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/qf1rwnem5K0hzCtOrddIrRBhcJzwxstqIkek7uRXwn4  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/YyXgMCdOd65vr1Sfj-uhCfAI6IY3layBYnqO906Huec  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/uo09aJOceZuxjjYZIkdgdrSi_sMeBSo7JEvES8p0Si8  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/PlpQBHnj9K5elPINs9Rjpv6rXOIN2Rny6QW4prgedu0  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/LGiAk0P7HO4F6d8ZOX4xG1kiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/ABYqqbO8lO-honW4AENSra3VziBpmqbqI3NI17oXurE  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/DjKU0iTyPmmjML1ySZMdE_beKaBZz9FMmH7rmyKJHTg  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/__KGkHFiY38v0h4QnND95Jt-deCbsEpI3WeY6gpgLGM  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/474re8Q7RL_fgdkGLw4XOn--8IPpRkxYaL6SZFAVTcI  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/0bZymQuwlmHAKVquJX1Yv--36LulftoG3TbRvjOj4Xs  (ytdsetup.exe)

1 / 68      (Malware)
http://d3svwm5itp10l9.cloudfront.net/VO-VpiRnMBo7kxYFQVCmHlkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/ZyxTCxfjXft5650CoOLcUVkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/XT4u6zikxomzVtJp0xCF-BR1UkQWbd-DIKkxuvxKJsQ  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/FjtUHoLVFo2Qk29TSThwVFkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/StwZzuyQnTF3VbZmTEH0zLSi_sMeBSo7JEvES8p0Si8  (ytdsetup.exe)

1 / 68      (PUP)
http://d3svwm5itp10l9.cloudfront.net/-40DIE2Y5RMaw7EvMFVGXxBhcJzwxstqIkek7uRXwn4  (ytdsetup.exe)

1 / 68      (Malware)
http://d3svwm5itp10l9.cloudfront.net/zaj_5GMEPw-pJbkwDU6qiax7p-LeekllGN_XEtyUBnU  (ytdsetup.exe)

1 / 68      (Malware)
http://d3svwm5itp10l9.cloudfront.net/mS8Fu09xwj0TDVhBIWQ-EvAI6IY3layBYnqO906Huec  (ytdsetup.exe)

1 / 68      (Malware)
http://d3svwm5itp10l9.cloudfront.net/TWyoj3a-hPfyjuW9fWKJilkiYEypjJkuUPk1gipfp4w  (ytdsetup.exe)

 
Latest 30 of 82 download URLs

The following 2 files have been seen to comunicate with d3svwm5itp10l9.cloudfront.net in live environments.

TCP » 216.137.33.235:80
CollbeeService.exe (CollbeeService)

TCP » 54.230.101.54:80
Explore.exe (Chromium by The Chromium Authors)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.