Avast WEBforum

Other => General Topics => Topic started by: avast2765 on June 25, 2021, 11:00:04 PM

Title: what is d2erpoundwv5y.cloudfront.net
Post by: avast2765 on June 25, 2021, 11:00:04 PM

No luck searching here.

Just started today.

Ran Boot Scan, nothing.

Google search no help.

When I go to any website, it pops up. Threat secured

Title: Re: what is d2erpoundwv5y.cloudfront.net
Post by: rocksteady on June 26, 2021, 10:32:14 AM

Can you include a screenshot of the Threat Secured message you see, including detailed information, here using the "Attachments and other options" link.

Title: Re: what is d2erpoundwv5y.cloudfront.net
Post by: avast2765 on June 26, 2021, 06:21:04 PM

See if this works

Title: Re: what is d2erpoundwv5y.cloudfront.net
Post by: Michael2301 on June 27, 2021, 05:10:58 AM

Getting the exact same thing when I try to open web based Dashlane, same screen, same message. How do we fix this? Just started happening today.

Title: Re: what is d2erpoundwv5y.cloudfront.net
Post by: Alexwarnum on June 27, 2021, 01:03:56 PM

Hi, have the same problem.

For me, it happens when I use Dashlane webapp.

Contacted Dashlane support and they suggested to exclude this lin in Avast: http://d2erpoudwvue5y.cloudfront.net/
Dashlane webapp apparently gets it's thumbnails from there.

But everything worked fine two days ago so it all seems a bit fishy.

Title: Re: what is d2erpoundwv5y.cloudfront.net
Post by: DavidR on June 27, 2021, 01:41:20 PM

You can try - Reporting Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php (https://www.avast.com/false-positive-file-form.php).

Title: Re: what is d2erpoundwv5y.cloudfront.net
Post by: polonus on June 27, 2021, 02:09:43 PM

You probably cannot fix this as this is with cloudfront/amazon and cloudfront kicks up that error

Quote

Headers
x-amz-cf-pop   ORD51-C1
via   1.1 c0098ca8d6549ce8db6f28ee0b22a4ce.cloudfront.net (CloudFront)
x-cache   Error from cloudfront
transfer-encoding   chunked
server   AmazonS3
x-amz-bucket-region   eu-west-1
connection   keep-alive
x-amz-cf-id   ZRHF7m_bIydqElPrvp3c-9LbOnuR-79w_oQgdLODKnDmT_w-MF3aGQ==
date   Sun, 27 Jun 2021 08:48:57 GMT
content-type   application/xml

There is a file from Amazon connected to it flagged.
Server address for IP however =  server-13-249-195-1.slc50.r.cloudfront.net.

Consider likewise: https://www.threatcrowd.org/domain.php?domain=d2ogrndh9skxtm.cloudfront.net
but also: https://www.threatcrowd.org/domain.php?domain=d2erpoudwvue5y.cloudfront.net

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)

Title: Re: what is d2erpoundwv5y.cloudfront.net
Post by: avast2765 on June 27, 2021, 09:32:33 PM

Dashlane support told me that my Antivirus had an update, who knew, and it now looks at Dashlane looking for new Icons for each site is now looks as a Threat.