*.cloudfront.net

Phishing C&C Download

Attackers can use *.cloudfront.net to host their phishing websites.

Subdomains of cloudfront.net have been used as C&C servers by ransomware.

None

Malicious tools can be stored on *.cloudfront.net and downloaded when required.

https://www.joesandbox.com/analysis/481251/0/html