home

get.ripeready.com

Domain Information

Server location:
Florida, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
ripeready.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.DownLoader11.57090
100.00%

ESET NOD32
MSIL/Solimba.AK.gen potentially unwanted application
100.00%

VIPRE Antivirus
Threat.4758821
100.00%

AVG
Adware BundleApp_r.AJ
100.00%

Malwarebytes
PUP.Optional.Firseria
100.00%

NANO AntiVirus
Trojan.Win32.Morstar.dmuxrd
100.00%

Comodo Security
Application.Win32.Firseria.GH
100.00%

Avira AntiVirus
APPL/Firseria.Gen
100.00%

Vba32 AntiVirus
Downware.Morstar
100.00%

Panda Antivirus
Trj/Genetic.gen
100.00%

Reason Heuristics
PUP.Solimba
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Morstar
100.00%

Bkav FE
W32.HfsAdware
100.00%

Emsisoft Anti-Malware
Trojan.Generic.12663549
100.00%

F-Secure
Trojan.Generic.12663549
100.00%

The domain get.ripeready.com has been seen to resolve to the following 4 IP addresses.

23.0.160.215
a23-0-160-215.deploy.static.akamaitechnologies.com
February 9, 2015

23.0.160.216
a23-0-160-216.deploy.static.akamaitechnologies.com
February 9, 2015

23.62.6.114
a23-62-6-114.deploy.static.akamaitechnologies.com
February 9, 2015

23.62.6.136
a23-62-6-136.deploy.static.akamaitechnologies.com
February 9, 2015

File downloads found at URLs served by get.ripeready.com.

27 / 68    (Adware)
http://get.ripeready.com/n/3.2.85/.../Dr.WEB CureIt!.exe  (dfebadf7bdedf92bd1fe690502a19205)

27 / 68    (Adware)
http://get.ripeready.com/n/3.2.85/.../ClamWin Free Antivirus.exe  (9357c41d4d683eae6f88a12438d2aa0a)

The following 26 files have been seen to comunicate with get.ripeready.com in live environments.

TCP » 23.62.6.114:80
browser.exe (Speed Browser by Long Mile Solutions)

TCP » 23.0.160.215:80
iTunes.exe (iTunes by Apple)

TCP » 23.0.160.215:80
efafpkfkimegociipjfecfpgagcppkjf.crx

TCP » 23.0.160.215:80
abjmmongnldnffjiiciiploahbeihoah.crx

TCP » 23.0.160.215:80
ojndgdfgamogmimbmhjjhkkbhbdpciim.crx

TCP » 23.0.160.215:80
nkcgcgdbdfmibjaodhihikinfpmmogfe.crx

TCP » 23.0.160.215:80
mocjmgdfpdokiapmabmkmedkeebfaojm.crx

TCP » 23.0.160.215:80
jepfebhiclafajkaljahgjgidpkbhflk.crx

TCP » 23.0.160.215:80
lejkbnlkamppphahjgfpmpaofjefkbfo.crx

TCP » 23.0.160.215:80
macpejfjpneigchdbhbigjepfombefga.crx

TCP » 23.0.160.215:80
gdncmogcfbkcgjdnlacgomaoeapalakb.crx

TCP » 23.0.160.215:80
ddmpeligffopofdbfldgnpaamhmapdif.crx

TCP » 23.0.160.215:80
bohddlnjobpeoikcdmkpnggfgjpbkiem.crx

TCP » 23.0.160.215:80
npgfkibkmennbfadphcpjejdpfaeaenh.crx

TCP » 23.0.160.215:80
ogiglaepmheikjmddcafhmjklepppnaa.crx

TCP » 23.0.160.215:80
hambiomgokbbaninkkcbfcgcfnjhoknd.crx

TCP » 23.0.160.215:80
gdidnibgconffodacokgochfmjkommmf.crx

TCP » 23.0.160.215:80
cnplcfcahccbobajbpjjniedjgpedkkn.crx

TCP » 23.0.160.216:80
iTunes.exe (iTunes by Apple)

TCP » 23.0.160.216:80
gjjofdeodiofmmdlnbgpeekgefglmkfj.crx

 
Latest 20 of 28 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.