No. A connection to *.cloudfront.net is almost always an app or website you use loading content through Amazon's CDN.
Thousands of companies serve their websites, app downloads, images and APIs through CloudFront, so the domain appears behind many unrelated apps.
Because CloudFront is shared infrastructure, the domain tells you the content comes through Amazon's CDN, not who it belongs to. To find the real service, look at which app made the connection and what name it originally looked up: the CNAME usually starts with the company's own domain (cdn.example.com) before pointing to cloudfront.net. Blocking cloudfront.net breaks large parts of the web.
Facts
- Owner
- Amazon (Amazon Web Services)
- Served by
- Amazon CloudFront CDN
- Purpose
- cloudfront.net is Amazon CloudFront's content delivery network. Thousands of companies serve their websites, app downloads, images and APIs through CloudFront, so the domain appears behind many unrelated apps.
- Block it?
- Don’t block it
Which apps use it
- Web browsers
- Many third-party apps and updaters
- Slack, Spotify and other services that use AWS
Should you block it?
No. A connection to *.cloudfront.net is almost always an app or website you use loading content through Amazon's CDN. The random-looking prefix (like d1a2b3c4d5.cloudfront.net) identifies one customer's distribution.
Frequently asked questions
What is cloudfront.net?
Amazon CloudFront's content delivery network. Companies use it to deliver websites, files and APIs from servers close to you.
Why is my Mac connecting to cloudfront.net?
An app or website you use loads content through CloudFront. Check which app made the connection; the domain itself belongs to thousands of AWS customers.
Is cloudfront.net a virus?
No. It's Amazon's legitimate CDN. Malware can host files on any CDN too, so judge by the app making the connection, not the domain.