home

d3vxyd74pg8nzb.cloudfront.net

Amazon.com, Inc

Domain Information

The domain d3vxyd74pg8nzb.cloudfront.net registered by Amazon.com, Inc was initially registered in April of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
MARKMONITOR INC.

Server location:
Virginia, United States (US)

Create date:
Friday, April 25, 2008

Expires date:
Tuesday, April 25, 2017

Updated date:
Tuesday, February 25, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
cloudfront.net

Whois:
1 cloudfront.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SITEONSPOT.AA, PUP.SITEONSPOT.EE, PUP.Installer.SITEONSPOT.W, PUP.Somoto.SITEONSP.Bundler (M)
100.00%

Clam AntiVirus
Win.Adware.Somoto
60.00%

ESET NOD32
Win32/Somoto
60.00%

Kaspersky
not-a-virus:AdWare.Win32.Agent
20.00%

Dr.Web
Trojan.Packed.26824
20.00%

VIPRE Antivirus
BetterInstaller
20.00%

Panda Antivirus
Trj/OCJ.F
20.00%

Baidu Antivirus
Adware.Win32.Somoto
20.00%

The domain d3vxyd74pg8nzb.cloudfront.net has been seen to resolve to the following 30 IP addresses.

52.85.131.27
server-52-85-131-27.iad53.r.cloudfront.net
May 18, 2016

52.85.131.5
server-52-85-131-5.iad53.r.cloudfront.net
May 18, 2016

52.85.131.209
server-52-85-131-209.iad53.r.cloudfront.net
May 18, 2016

52.85.131.190
server-52-85-131-190.iad53.r.cloudfront.net
May 18, 2016

52.85.131.154
server-52-85-131-154.iad53.r.cloudfront.net
May 18, 2016

52.85.131.145
server-52-85-131-145.iad53.r.cloudfront.net
May 18, 2016

52.85.131.137
server-52-85-131-137.iad53.r.cloudfront.net
May 18, 2016

52.85.131.63
server-52-85-131-63.iad53.r.cloudfront.net
May 18, 2016

54.230.102.139
server-54-230-102-139.iad2.r.cloudfront.net
September 3, 2014

54.230.102.35
server-54-230-102-35.iad2.r.cloudfront.net
September 3, 2014

54.230.101.43
server-54-230-101-43.iad2.r.cloudfront.net
September 3, 2014

54.230.101.37
server-54-230-101-37.iad2.r.cloudfront.net
September 3, 2014

216.137.33.226
server-216-137-33-226.iad2.r.cloudfront.net
September 3, 2014

216.137.33.187
server-216-137-33-187.iad2.r.cloudfront.net
September 3, 2014

54.230.103.94
server-54-230-103-94.iad2.r.cloudfront.net
September 3, 2014

54.230.103.45
server-54-230-103-45.iad2.r.cloudfront.net
September 3, 2014

205.251.251.178
server-205-251-251-178.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.35
server-54-230-49-35.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.184
server-54-230-49-184.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.221
server-54-230-49-221.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.247
server-54-230-49-247.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.207
server-54-230-49-207.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.180
server-54-230-49-180.jfk5.r.cloudfront.net
May 29, 2014

54.230.48.172
server-54-230-48-172.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.188
server-54-230-49-188.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.79
server-54-230-49-79.jfk5.r.cloudfront.net
May 29, 2014

54.230.48.88
server-54-230-48-88.jfk5.r.cloudfront.net
May 29, 2014

54.230.48.240
server-54-230-48-240.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.122
server-54-230-49-122.jfk5.r.cloudfront.net
May 29, 2014

54.230.49.198
server-54-230-49-198.jfk5.r.cloudfront.net
May 29, 2014

 
Showing 30 of 30 IP Addresses

File downloads found at URLs served by d3vxyd74pg8nzb.cloudfront.net.

1 / 68      (Adware)
https://d3vxyd74pg8nzb.cloudfront.net/isym?affiliate_slug=windowsmoviemaker&source_slug=qspartnerstvsoi&software_name=Windows Movie Maker&software_download_url=http://www.windows-movie-maker.org/.../windows-movie-maker-setup.exe&software_filename=windows-movie-maker-setup.exe&download_link_ids=download_link_1,download_link_2&oname=windows-movie-maker-setup&os=WIN  (windows-movie-maker-setup_downloader-2maxxst6.exe)

1 / 68      (Adware)
https://d3vxyd74pg8nzb.cloudfront.net/isym?affiliate_slug=solidfileslzsr&source_slug=qspartnerstvsoi&software_name=YouWave Universal Crack.rar&software_download_url=http://s15.soliddl.com/.../84ea95fa22&software_filename=YouWave Universal Crack.rar&software_filesize=505410&download_link_ids=download-button&oname=YouWave Universal Crack.rar&os=WIN  (youwaveuniversalcrack_downloader-9uarzgds.exe)

8 / 68      (Adware)
https://d3vxyd74pg8nzb.cloudfront.net/isym?affiliate_slug=hugefiles2&source_slug=qspartnerstvsoi&software_name=com.zapnus.messaging.v0.728.apk&software_download_url=http://download.filesfrog.com/software_files/flvplayer/.../FLVPlayerSetup.exe&software_subtitle=Download Manager&software_filename=setup.exe&download_link_ids=download_link_1&oname=com.zapnus.messaging.v0.728.apk&os=WIN  (freezipsetup-n383jkyvk.exe)

3 / 68      (Adware)
https://d3vxyd74pg8nzb.cloudfront.net/isym?affiliate_slug=solidfileslzsr&source_slug=qspartnerstvsoi&software_name=DN34814348.rar&software_download_url=http://s7.soliddl.com/.../318ff148f5&software_filename=DN34814348.rar&software_filesize=2242211&download_link_ids=download-button&oname=DN34814348.rar&os=WIN  (dn34814348_downloader-8yea03hh.exe)

3 / 68      (Adware)
https://d3vxyd74pg8nzb.cloudfront.net/isym?affiliate_slug=emu3ds&source_slug=qspartnerstvsoi&software_name=eMu3Ds&software_download_url=http://176.31.17.187/download/eMu3Ds_Setup.exe&software_subtitle=3DS Emulator&software_filename=eMu3Ds_Setup.exe&software_description=This Setup will install eMu3Ds.&software_version=0.9.5.2&software_arch=32&software_filesize=11907&software_os=Windows XP / Windows Vista / Windows 7 / Windows 8&software_logo_url=http://3dsemulator.org/.../logo.png&download_link_ids=download_link_1,mirror_1&oname=eMu3Ds&os=WIN  (emu3ds_downloader-6russbve.exe)

The following 5 files have been seen to comunicate with d3vxyd74pg8nzb.cloudfront.net in live environments.

TCP » 205.251.251.178:80
dcvau4685.tmp.exe

TCP » 205.251.251.178:80
dcytdkiemon_amodk_setup.exe

TCP » 205.251.251.178:80
nsme4a5.tmp

TCP » 52.85.131.63:443
u.exe

TCP » 54.230.102.35:80
raptr.exe (Raptr by Raptr, Inc)

URL:
http://d3vxyd74pg8nzb.cloudfront.net/

Google Analytics:
UA-31676879

Title:
“Better Installer - Cloud Based Installation Platform”

Description:
“BetterInstaller is a Cloud Based Installation Platform. Nsis , InnoSetup Welcomed!”

Network:
Amazon Cloudfront

SSL certificate subject:
CN=*.cloudfront.net, O=Amazon.com Inc., L=Seattle, S=Washington, C=US

SSL certificate issuer:
CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Web server:
nginx

betterinstaller.com

bijscode.com

disheritance.info

dodron.info

downloadspeedmax.com

easy-file-converter.com

ecocka.info

goeren.info

goveba.info

naperone.info

nappee.info

ohilei.info

rhionx.info

sertave.info

sibilance.info

sneian.info

somotoinc.com

vottow.info

yerraw.info

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.