These domains on a Blizzard's game website

Viruses and worms
1

I entered playoverwatch.com (website for Blizzard’s Overwatch game) for the first time in a while and I saw it connecting to this domain:

http://d.xp1.ru4.com/

20658635p.rfihub.com

I did some quick Googling to see if people knew what these were, and there were lot of Battle.net user posts from couple years back, some claiming these to be normal trackers/advertisers, and some claimed them being malware/browser hijacks.

https://www.virustotal.com/fi/url/28d5e17705e49f778788035f41c13c07f39e6ec17e8a071b80dfb8f228afcf18/analysis/1489969878/

EDIT: Quttera report for playoverwatch.com

https://quttera.com/detailed_report/playoverwatch.com

2

It is not completely beyond suspicion: https://otx.alienvault.com/indicator/ip/193.0.160.182/
Re: https://www.virustotal.com/fi/ip-address/193.0.160.182/information/
both on rocketfuel
https://urlscan.io/result/4b9ea60d-c111-4bc5-a484-160053805c1c#summary
and
https://urlscan.io/result/4b9ea60d-c111-4bc5-a484-160053805c1c#summary

polonus

3

I checked Avast Online Secyrity for that page and those domains stopped loading once I disabled trackings.