home

ibt2-cdn.ets.org

Educational Testing Service

Domain Information

The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
MarkMonitor Inc.

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ets.org

Whois:
1 ets.org record

The domain ibt2-cdn.ets.org has been seen to resolve to the following 16 IP addresses.

52.84.127.160
server-52-84-127-160.iad16.r.cloudfront.net
July 23, 2016

52.84.127.75
server-52-84-127-75.iad16.r.cloudfront.net
July 23, 2016

52.84.127.72
server-52-84-127-72.iad16.r.cloudfront.net
July 23, 2016

52.84.127.59
server-52-84-127-59.iad16.r.cloudfront.net
July 23, 2016

52.84.127.41
server-52-84-127-41.iad16.r.cloudfront.net
July 23, 2016

52.84.127.240
server-52-84-127-240.iad16.r.cloudfront.net
July 23, 2016

52.84.127.232
server-52-84-127-232.iad16.r.cloudfront.net
July 23, 2016

52.84.127.178
server-52-84-127-178.iad16.r.cloudfront.net
July 23, 2016

52.85.142.118
server-52-85-142-118.iad12.r.cloudfront.net
July 4, 2016

52.85.142.92
server-52-85-142-92.iad12.r.cloudfront.net
July 4, 2016

52.85.142.64
server-52-85-142-64.iad12.r.cloudfront.net
July 4, 2016

52.85.142.60
server-52-85-142-60.iad12.r.cloudfront.net
July 4, 2016

52.85.142.56
server-52-85-142-56.iad12.r.cloudfront.net
July 4, 2016

52.85.142.35
server-52-85-142-35.iad12.r.cloudfront.net
July 4, 2016

52.85.142.254
server-52-85-142-254.iad12.r.cloudfront.net
July 4, 2016

52.85.142.228
server-52-85-142-228.iad12.r.cloudfront.net
July 4, 2016

File downloads found at URLs served by ibt2-cdn.ets.org.

1 / 68      (inconclusive)
https://ibt2-cdn.ets.org/SoftwareDistribution/iascp/lscpLauncherMainUpdater/.../lscpLauncherMainUpdater.exe  (0e0a6918b801d76271c6e571d0542618)

0 / 68
https://ibt2-cdn.ets.org/SoftwareDistribution/common/jre/.../jre.exe  (b772be0c01aeb6ce920311c5e5722bab)

0 / 68
https://ibt2-cdn.ets.org/SoftwareDistribution/common/tomcat/.../tomcat.exe  (a79a966922b12c38dc976a4f56061909)

0 / 68
https://ibt2-cdn.ets.org/SoftwareDistribution/common/tcproperties/.../tc-properties.exe  (77c6b0e597c56707940c20722741342d)

0 / 68
https://ibt2-cdn.ets.org/SoftwareDistribution/common/nativelib/.../nativelib.exe  (c57a2e0abdb4ac47965ccd97e8f10693)

0 / 68
http://ibt2-cdn.ets.org/SoftwareDistribution/common/netversion/.../netversion.exe  (039ff61cc2617ba8a3dc5af4c5355811)

0 / 68
http://ibt2-cdn.ets.org/SoftwareDistribution/common/netframework/.../netframework.exe  (NDP461-KB3102436-x86-x64-AllOS-ENU.exe)

The following 25 files have been seen to comunicate with ibt2-cdn.ets.org in live environments.

TCP » 52.85.142.60:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.35:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.228:443
jingling.exe

TCP » 52.85.142.228:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.228:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.56:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.60:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.60:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.35:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.92:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.228:80
DriverAssist.exe

TCP » 52.85.142.56:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.118:443
stormwatchbrowser.exe

TCP » 52.85.142.35:443
apptrailers.exe

TCP » 52.85.142.56:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.228:443
browser.exe (speed browser by Fast Applications)

TCP » 52.85.142.228:443
jingling.exe

TCP » 52.85.142.118:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.118:443
stormwatchapp.exe

TCP » 52.85.142.228:443
browser.exe (Browser)

 
Latest 20 of 50 files

URL:
http://ibt2-cdn.ets.org/

Network:
Amazon Cloudfront

SSL certificate subject:
CN=ibt2-cdn.ets.org, OU=Unified Communications, OU=Hosted by Educational Testing Service, OU=CDN (Content Delivery Network), O=Educational Testing Service, STREET=Rosedale Road, L=Princeton, S=New Jersey, PostalCode=08541, C=US

SSL certificate issuer:
CN=COMODO RSA Organization Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
CloudFront

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.