home

f04.s.alicdn.com

Alibaba Cloud Computing Ltd. (阿里云计算有限公司)

Domain Information

The domain f04.s.alicdn.com registered by Alibaba Cloud Computing Ltd. (阿里云计算有限公司) was initially registered in June of 2008 through MARKMONITOR INC.. The hosted servers are located in Warsaw, Mazowieckie within Poland which resides on the Akamai Technologies, Inc. network.
Registrar:
MARKMONITOR INC.

Server location:
Mazowieckie, Poland (PL)

Create date:
Wednesday, June 25, 2008

Expires date:
Sunday, June 25, 2017

Updated date:
Monday, May 25, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V., US

Root domain:
alicdn.com

Whois:
1 alicdn.com record

The domain f04.s.alicdn.com has been seen to resolve to the following 4 IP addresses.

104.96.220.177
a104-96-220-177.deploy.static.akamaitechnologies.com
August 11, 2016

104.96.220.168
a104-96-220-168.deploy.static.akamaitechnologies.com
August 11, 2016

66.231.239.120
June 26, 2016

66.231.239.110
June 26, 2016

File downloads found at URLs served by f04.s.alicdn.com.

0 / 68
http://f04.s.alicdn.com/.../HTB1.we6KVXXXXcrXpXXLAFXFXXX9.xls?spm=a2700.7803228.1998738840.3.9nk22Z&attachment=Lulu chair quotation.xls  (ee8a456f-f99c-0db5-f87a-e0907fb217c8_1d1dea97a846d26)

0 / 68
http://f04.s.alicdn.com/.../HTB1tLMlKpXXXXbiXFXXLAFXFXXX1.xls?spm=a2700.7803228.1998738840.5.80Ji0A&attachment=500pcs L-088AM and earphone and plug 2016-0617-02.xls  (4fd2c5dc-9089-4d47-4d0c-03d7e5b39c73_1d1c8fcaf0eedb5)

The following 15 files have been seen to comunicate with f04.s.alicdn.com in live environments.

TCP » 104.96.220.177:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.168:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.168:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.168:80
plugin.exe

TCP » 104.96.220.168:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.168:80
ngbmnkfdajmegijnmgpclinofpkpfncf.crx

TCP » 104.96.220.168:80
nlihanjhfgphfaofjlbfjccmohjedamc.crx

TCP » 104.96.220.168:80
plugin.exe

TCP » 104.96.220.168:80
plugin.exe

TCP » 104.96.220.168:80
plugin.exe

TCP » 104.96.220.168:80
plugin.exe

TCP » 104.96.220.177:80
ejhblhjjbjfgohafhpdacldpmmcmmjlc.crx

TCP » 104.96.220.177:80
kneljoemmoafkcofmnbajlkmgbpimfkg.crx

TCP » 104.96.220.177:80
cfpgcdlmnkebcilijcbnpmgobkpkknak.crx

TCP » 104.96.220.177:80
mgecpdghpgpnpbaipkgdmjmoihnhicjg.crx

TCP » 104.96.220.177:80
ejhblhjjbjfgohafhpdacldpmmcmmjlc.crx

URL:
http://f04.s.alicdn.com/

Web server:
Tengine

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.