Author Topic: Redirection destination.... Is this Amazon CloudFront abuse?  (Read 1906 times)

0 Members and 1 Guest are viewing this topic.

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34060
  • malware fighter
Re: http://fetch.scritch.org/%2Bfetch/?url=http%3A%2F%2Fwww.labtechsoftware.com%2Fapp-care&useragent=Fetch+useragent&accept_encoding=
See where it came from apparently: http://killmalware.com/dl2.appcare.net/
and http://toolbar.netcraft.com/site_report?url=http%3A%2F%2Fwww.labtechsoftware.com%2Fapp-care.php
Quote
ERROR

The request could not be satisfied.

Bad request.
Generated by cloudfront (CloudFront)
Request ID: rWHjhwMwuVvC73ucvWXe3L_bJKWlFb-s0kU8cd2Kg_Jn-tzjl7jV3g==
On reversed address: http://toolbar.netcraft.com/site_report?url=http://server-54-230-31-12.dub2.r.cloudfront.net

Error and two warnings: https://asafaweb.com/Scan?Url=www.labtechsoftware.com%2Fapp-care

Consider also: https://www.robtex.com/dns-lookup/www.labtechsoftware.com

9 addresses and various domains ....  www.labtechsoftware.com listed in multi.uribl.com

wXw.labtechsoftware.com is listed in multi.uribl.com
HostKarma Junk Email Filter
known for more than 10 days (good)

polonus
« Last Edit: April 06, 2017, 07:37:27 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6699
  • Trust only what you test yourself!
Re: Redirection destination.... Is this Amazon CloudFront abuse?
« Reply #1 on: April 07, 2017, 06:32:56 PM »
Could this be part of the reason behind Amazon's recent server issues? Just asking.
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34060
  • malware fighter
Re: Redirection destination.... Is this Amazon CloudFront abuse?
« Reply #2 on: April 07, 2017, 06:47:52 PM »
When they weren't part of the solution, they certainly were part of that general infrastructure  issues.

But these CloudFront IP's addresses all were  involved in some way in some manipulative schemes:
Quote
-54.192.28.224
-54.192.69.173
-54.192.100.25
-54.192.109.109
-54.192.132.11
-54.192.156.161
-54.192.199.175
-54.230.59.175
-216.137.36.177


polonus
« Last Edit: April 07, 2017, 06:50:14 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!