Security Report: d3s44k86ttheoh.cloudfront.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cf7257f9-c8ad-470a-a46d-b853577072b0 Domain and IP registration (RDAP)/api/v1/rdap/cf7257f9-c8ad-470a-a46d-b853577072b0How often this domain was scanned/api/v1/domain/stats/d3s44k86ttheoh.cloudfront.net Scan history for this domain/api/v1/domain/history/d3s44k86ttheoh.cloudfront.net?limit=15

This website contacted 6 IPs in 1 country across 3 domains to perform 37 HTTP transactions. The main domain is cloudfront.net and was registered 18 years ago.

Submitted URL: https://d3s44k86ttheoh.cloudfront.net

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake Kraken mobile download page on a random CloudFront subdomain that pushes an APK from an unrelated domain — brand impersonation plus likely malware distribution; do not download.

Risk Factors (5)

Brand impersonation of Kraken on an unrelated CloudFront subdomain

APK download link hosted on an unrelated random domain (z1aup3.zfbjwxp.com) — likely malicious Android payload

Primary domain reported as phishing by threat intelligence (single-source)

Unranked / no reputation domain on shared hosting namespace with unknown creation date

No legitimate app-store distribution path despite claiming to be an official mobile download centre

Domain age information unavailable

Details

Page Title

Kraken · 移动端下载中心

Scan Type

public

Domain Name Analysis

The domain name 'd3s44k86ttheoh.cloudfront.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'd3s44k86ttheoh'. The second-level label 'cloudfront' is 10 characters long split between 3 vowels and 7 consonants. Word splitting yields 2 words: cloud, front. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

kraken 01 KRAKEN MOBILE Jr , 28 Sa —TEEH. BRINGMEXSKK. DHT, AEE HEMNE TE, SR TEDRAEE. Få «RETTER 108 18++ Androld 8+ REAL-TIME / 24—7 Vers $2866.52 OL sne 24/7 sxmxx 48 news CO ARE

Page Load Overview

3.41s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:522 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software60% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

60%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	18.172.111.205Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	192.178.183.95Google · CDN	United States	AS15169Google LLC
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	18.172.111.4Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	18.172.111.64Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	18.172.111.210Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
37	6	-	-