» 68b3147b518ab2bb069a-eac45106fdbdfcf754476c49e4dc7196.r50.cf2.rackcdn.com
Overview
IPs Addresses (2)
Downloads (1)
Network (7)
Related Domains (46)

68b3147b518ab2bb069a-eac45106fdbdfcf754476c49e4dc7196.r50.cf2.rackcdn.com

Domain Information

Server location:

Massachusetts, United States (US)

ASN:

AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:

The domain 68b3147b518ab2bb069a-eac45106fdbdfcf754476c49e4dc7196.r50.cf2.rackcdn.com has been seen to resolve to the following 2 IP addresses.

23.15.9.90

a23-15-9-90.deploy.static.akamaitechnologies.com

March 21, 2015

23.15.9.91

a23-15-9-91.deploy.static.akamaitechnologies.com

March 21, 2015

File downloads found at URLs served by 68b3147b518ab2bb069a-eac45106fdbdfcf754476c49e4dc7196.r50.cf2.rackcdn.com.

0 / 68

http://68b3147b518ab2bb069a-eac45106fdbdfcf754476c49e4dc7196.r50.cf2.rackcdn.com/SplashID-Safe-Installer.exe (0d09f0d80bbf8148a4fbf4cad2bee8ce)

The following 7 files have been seen to comunicate with 68b3147b518ab2bb069a-eac45106fdbdfcf754476c49e4dc7196.r50.cf2.rackcdn.com in live environments.

TCP » 23.15.9.91:443

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 23.15.9.90:443

ssn.exe (ssn)

TCP » 23.15.9.90:80

lgnbkdfelipbekjnlaedjaejohnlmmem.crx

TCP » 23.15.9.90:443

lavasofttcpservice.exe (LavasoftTcpService.exe by Lavasoft Limited)

TCP » 23.15.9.91:443

icedragon.exe (IceDragon by COMODO Security Solutions)

TCP » 23.15.9.91:80

mkleglchdkoipbckigmpmbajmlefofdg.crx

TCP » 23.15.9.91:80

hdheajejbpeacoiechhgeopdnpihmocd.crx

Related Domains

30 of 46 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.