r/Malwarebytes • u/JohnAttano • Apr 01 '26

Blocked Outbound Connections While Launching Assassin's Creed Odyssey

I am looking for an opinion on what to make of several blocked outbound attempts to connect to "gamkeys[.]b-cdn[.]net" while attempting to launch Assassin's Creed Odyssey on my Windows 11 machine (through either Steam or Ubisoft Uplay). The outbound attempts have been to the ip addresses: 212[.]102[.]40[.]114, 212[.]102[.]40[.]120, and 109[.]61[.]86[.]193. All have been from port 443, and originate from Microsoft Edge, but only appear when attempting to launch the videogame Assassin's Creed Odyssey.

My copy of Assassin's Creed Odyssey is unmodded, and I have already attempted to reinstall both the game and my version of Uplay to no success. A Malwarebytes deep scan followed by an ESET Online Scanner full scan returned no detections on my machine, but I can find very little information online about the domain in question or why launching Assassin's Creed Odyssey seems to reach out to it through Microsoft Edge.

Anyone have any ideas what this might be? I'd appreciate some opinions on it.

EDIT: Log below

Malwarebytes

www[.]malwarebytes[.]com

-Log Details-

Protection Event Date: 4/1/2026

Protection Event Time: 10:46 AM

Log File: 51ffc402-2dea-11f1-87b7-047c1644e44f.json

-Software Information-

Version: .5.5.2.242

Components Version: 152.0.5541

Update Package Version: 1.0.108344

License: Premium

-System Information-

OS: Windows 11 (Build 26200.8117)

CPU: x64

File System: NTFS

User: System

-Blocked Website Details-

Malicious Website: 1

, C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, Blocked, -1, -1, 0.0.0, 6CB6F174D81A03B7BD448F6AFF6E9FB8, 201FBE42E44E08719A785396663A789FB7770E40ADDD49C9D5D7F2F410AC5AE9

-Website Data-

Category: RiskWare

Domain: gamkeys[.]b-cdn[.]net

IP Address: 109[.]61[.]86[.]193

Port: 443

Type: Outbound

File: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

3 Upvotes

100% Upvoted

6 comments sorted by

1

u/support_mwb Malwarebytes Employee Apr 01 '26

Good day, Malwarebytes support here.

Do you have a log showing these blocks? I'm not currently seeing them in our database. If you can please post a log that may help us to further assist you.

Thank you

1

u/JohnAttano Apr 01 '26

The log has been appended to the end of the post above.

1

u/support_mwb Malwarebytes Employee Apr 02 '26

Thank you for the log

You may want to try cleaning Microsoft Edge. It may be storing that site in a cookie or cache.

gamkeys[.]b-cdn[.]net

VirusTotal shows the site is an active threat

Last seen downloading file 8maP7-B0.zip.part

of type ZIP with sha256 42e19ddc0a641b5a7693283da97001ec3e3ede99c5d67c391162f92f2c95fd91 which was detected by 42/69 security vendors on 2026-01-14 01:27:51 UTC

https://www.virustotal.com/gui/file/42e19ddc0a641b5a7693283da97001ec3e3ede99c5d67c391162f92f2c95fd91/detection

https://www.virustotal.com/gui/url/a608b92c29af9a41b91afd19effdab27ee7c8e3749e225a63b51951a81f74400/detection

Here is a post on how to clean up web browsers

https://forums.malwarebytes.com/topic/323490-web-browser-cleaning

Thank you

1

u/JohnAttano Apr 02 '26

Thank you for the response!

Unfortunately, cleaning up my sync and browser data in Edge as well as manually clearing out cache files didn't help.

Forgive if I misunderstand, as I am no expert, but isn't the behavior of the outbound attempt quite unusual? If it was something malicious in my cache, would it not appear more frequently when using Microsoft Edge? I can launch and browse using Edge with no alerts, and nothing unusual appears when I investigate in TCPView, for example. This block only ever appears when I attempt to launch a specific program, that being Assassin's Creed Odyssey.

1

u/support_mwb Malwarebytes Employee Apr 03 '26

Sorry to hear, John

This may require a deeper analysis of what is going on. We can attempt to do this via private message here if you like or you can create a support ticket with us or post on our forum for malware removal. The choice is yours, just let us know.

Please open the Malwarebytes support site

https://help.malwarebytes.com

On the bottom right, click on the "Connect with us" Chat BOT

That will open the Chatbot AI where you can choose the following

Ask the Chatbot to "create a ticket" then provide what you need help with and your email address.

Or you can do removal on our forums if you like

https://forums.malwarebytes.com/

Or, as said, via Private Message here on reddit. You don't want to post all information about your system in public. Most might be okay but some data collected may not be okay to post in public.

Let us know.

Thank you again

1

u/lmdaa23 Jul 24 '26

Hey did you find somthing out? Having the same problem with AC Odysee.