Domain > d2wx6hrvzfuftl.cloudfront.net

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	hostmaster@amazon.com
NameServer	NS-1597.AWSDNS-07.CO.UK
Created	2008-04-25 00:00:00
Changed	2014-02-25 00:00:00
Expires	2017-04-25 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2019-05-22	13.32.242.145 (ClassC)
2019-05-23	13.249.109.103 (ClassC)
2019-05-25	99.86.58.104 (ClassC)
2019-05-25	99.86.58.79 (ClassC)
2019-05-25	99.86.58.92 (ClassC)
2019-05-28	13.249.122.15 (ClassC)
2019-10-19	52.85.34.104 (ClassC)
2019-10-19	52.85.34.77 (ClassC)
2019-10-22	13.226.42.118 (ClassC)
2019-10-22	13.226.42.96 (ClassC)
2019-10-25	13.32.81.11 (ClassC)
2019-11-05	54.230.193.79 (ClassC)
2019-11-05	54.230.193.204 (ClassC)
2019-11-05	54.230.193.224 (ClassC)
2019-11-09	52.85.135.186 (ClassC)
2019-11-09	52.85.135.196 (ClassC)
2019-11-10	54.230.193.8 (ClassC)
2019-12-11	13.32.83.78 (ClassC)
2019-12-11	13.32.83.99 (ClassC)
2019-12-11	13.32.83.204 (ClassC)
2019-12-11	13.32.83.4 (ClassC)
2020-04-13	54.230.250.15 (ClassC)
2020-04-14	54.230.250.113 (ClassC)
2020-04-15	54.230.250.48 (ClassC)
2021-02-25	54.230.126.88 (ClassC)
2024-08-30	204.246.191.128 (ClassC)
2024-10-22	3.163.165.14 (ClassC)
2025-04-25	204.246.191.107 (ClassC)
2025-06-27	204.246.191.72 (ClassC)
2025-08-05	204.246.191.97 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2980Connection: keep-aliveDate: Thu, 25 Feb 2021 20:17:03 GMTLast-Modified: Tue, 21 May 2019 19:12:51 GMTETag: c6ac8f22f5c09881231e9160149523ccSer

!DOCTYPE html>html langen-us classno-js>        head>        meta charsetutf-8>        title>Just One More Step/title>        meta namedescription contentstatic landing page>        meta nameviewport contentwidthdevice-width, initial-scale1.0>        meta namepropeller content76ee0c6bf02109551d47e9e64f295132>                      !--  Resource style  -->		link relstylesheet hrefassets/css/main.css>		!-- Modernizr runs quickly on page load to detect features -->		script srcassets/js/modernizr.js>/script>    meta http-equivContent-Type contenttext/html; charsetutf-8>style typetext/css>!--body {	background-color: #000000;}h1,h2,h3,h4,h5,h6 {	font-weight: bold;	font-family: Trebuchet MS, Arial, Helvetica, sans-serif;}h1 {	font-size: 50px;}-->/style>/head>	body>script>(function() {    var url  new URL(window.location.href);    var pci  url.searchParams.get(cid);    var ppi  url.searchParams.get(placementid);    var tag  document.createElement(script);    tag.type  text/javascript;    tag.datasetsdk  sdk;    tag.src  // pushmejs.com/ntfc.php?p2632657&ucistrue&mhttps&nbinptrue + &var+ ppi + &ymid + pci;    tag.onload  () > {      sdk.onBeforePermissionPrompt(function() {  });      sdk.onPermissionDefault(function() {location.replace(https://blatwalm.com/afu.php?zoneid2632675);  });      sdk.onPermissionAllowed(function() {location.replace(https://blatwalm.com/afu.php?zoneid2632675);  });      sdk.onPermissionDenied(function() {location.replace(https://bludwan.com/afu.php?zoneid2469698);  });      sdk.onAlreadySubscribed(function() {location.replace(https://bludwan.com/afu.php?zoneid2469698);      });    document.head.appendChild(tag);    }})();/script>script src//my.rtmark.net/p.js?fsync&lr1&partner5c4fd888784e1bb3ca43d9d641aaa352748370ffc695af822fd6e8b1a56247cd defer>/script>noscript>img src//my.rtmark.net/img.gif?fsync&lr1&partner5c4fd888784e1bb3ca43d9d641aaa352748370ffc695af822fd6e8b1a56247cd width1 height1 />/noscript>		div classloading-part>			div classloader-home>Loading.../div>		/div>								!-- Header -->	header

Subdomains

Date	Domain	IP
d1jds163rs6100.cloudfront.net	2024-09-17	3.163.24.123
d1atqi1n69j100.cloudfront.net	2025-01-11	204.246.191.96
di7jquifqm100.cloudfront.net	2018-08-19	13.32.0.104

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > d2wx6hrvzfuftl.cloudfront.net

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains