Domain > d3frhxtoji9i5h.cloudfront.net

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	hostmaster@amazon.com
NameServer	NS-1597.AWSDNS-07.CO.UK
Created	2008-04-25 00:00:00
Changed	2014-02-25 00:00:00
Expires	2017-04-25 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2020-07-12	143.204.94.37 (ClassC)
2020-07-12	143.204.94.68 (ClassC)
2020-11-18	143.204.217.62 (ClassC)
2021-02-03	99.86.3.65 (ClassC)
2021-05-16	13.249.42.59 (ClassC)
2021-05-16	13.249.42.46 (ClassC)
2021-07-12	52.85.132.127 (ClassC)
2021-08-08	13.226.29.33 (ClassC)
2021-08-10	99.86.113.22 (ClassC)
2021-08-14	65.9.73.17 (ClassC)
2021-11-11	52.84.94.84 (ClassC)
2021-11-11	52.84.94.27 (ClassC)
2021-12-20	65.9.83.82 (ClassC)
2022-05-28	18.67.0.128 (ClassC)
2022-06-07	52.222.158.30 (ClassC)
2022-08-24	13.227.219.3 (ClassC)
2023-01-05	143.204.191.42 (ClassC)
2024-06-22	99.84.66.108 (ClassC)
2025-01-04	18.161.6.37 (ClassC)
2025-01-19	99.84.66.97 (ClassC)
2025-02-27	18.161.6.75 (ClassC)
2025-04-06	18.161.6.89 (ClassC)
2025-05-23	18.65.229.111 (ClassC)
2025-06-01	18.161.6.22 (ClassC)
2025-06-13	18.65.229.126 (ClassC)
2025-08-05	99.84.66.63 (ClassC)

HTTP/1.1 200 OKContent-Type: application/octet-streamContent-Length: 3684Connection: keep-aliveLast-Modified: Thu, 27 Jul 2023 11:37:40 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServe

!DOCTYPE html>html>  head>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1, viewport-fitcover />    title>Korean-air/title>    link      relstylesheet      typetext/css      hrefhttps://fonts.googleapis.com/css?familyNoto+Sans:400,700&displayswap      crossoriginanonymous    />  /head>  body>    style typetext/css>      body {        font-family: NotoSans, sans-serif;        line-height: 20px;      }    /style>    div>      h1>KOREANAIR/h1>      h3>Welcome to testing Korean website/h3>      p>        We are currently deflecting customer to this Dummy website. Once setup is on Brands live website we will config        this on their platform.      /p>      img        srchttps://qa4-sprcdn-assets.sprinklr.com/400002/eebac69d-64af-4f08-8e80-6fb28ca3649f-707808608.png        altHTML5 Icon        stylewidth: 70%; height: 70%      />    /div>    script>      function extractQueryParams() {        const t  window.location.search.substring(1);        return t          ? t.split(&).reduce(function (t, e) {              const n  e.split(),                r  n0,                o  n1,                c  tr,                i  decodeURIComponent(o);              return (tr  c ? (Array.isArray(c) ? c.concat(i) : c, i) : i), t;            }, {})          : {};      }      function getSplitValue(t, e) {        const n  t.split(e);        return 2 ! n.length || n0.length ? null : n1;      }      function extractSettingsFromQuery() {        const t  extractQueryParams(),          e  {            user: {},            clientContext: {},          };        for (let n in t) {          const r  tn;          let o;          (o  getSplitValue(n, user_))            ? (e.usero  r)            : (o  getSplitValue(n, context_))            ? (e.clientContexto  r)            : (en  r);        }        return e;      }      window.sprChatSettings  window.sprChatSettings || {};      window.sprChatSettings  {        appId: 647864b6af937c3287289406_app_1713040,        skin: MODERN,        ...extractSettingsFro

Subdomains

Date	Domain	IP
d1jds163rs6100.cloudfront.net	2024-09-17	3.163.24.123
d1atqi1n69j100.cloudfront.net	2025-01-11	204.246.191.96
di7jquifqm100.cloudfront.net	2018-08-19	13.32.0.104

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > d3frhxtoji9i5h.cloudfront.net

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains