The domain cht.tbccint.com registered by ClientConnect LTD was initially registered in November of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in London, England within United Kingdom. The domain is associated with the publisher Conduit Ltd. who is located in Ness Ziona, Israel.
Registrar:
GODADDY.COM, LLC
Server location:
England, United Kingdom (GB)
Create date:
Thursday, November 21, 2013
Expires date:
Sunday, January 1, 2017
Updated date:
Monday, May 4, 2015
ASN:
AS1273 CW Cable and Wireless Worldwide plc,GB
Google Safe Browsing:
unwanted
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Toolbar.ClientConnect.H, PUP.Toolbar.Conduit.H, PUP.Installer.Conduit, PUP.Toolbar.Bundler.Conduit, PUP.Conduit.Installer, PUP.Conduit.ClientConnect.Installer (M), PUP.Conduit.ClientConnect.Bundler (M), PUP.Conduit.ClientCo.Installer (M), PUP.Conduit.ClientCo.Bundler (M), PUP.Conduit.Bundler (M), PUP.Conduit (M)
100.00%
McAfee
Artemis!4DDB65E92464, Trojan.Artemis!EAC7D43B8BC3, Artemis!FA1957AA5C2D, Artemis!DE1D57C6F2AF, Artemis!66FFEDA7BCCC, Artemis!A19D7793DD85, Artemis!A92199FC0F49, Artemis!336E58A79577
53.19%
Malwarebytes
PUP.Optional.Conduit.A, PUP.Optional.ClientConnect
53.19%
NANO AntiVirus
Riskware.Nsis.Downloader.ddbdbi
53.19%
Trend Micro House Call
Suspici.688DA4DB, Suspicious_GEN.F47V0826, Suspici.12797D5E, Suspicious_GEN.F47V0707, Suspicious_GEN.F47V0706, Suspicious_GEN.F47V0324
53.19%
Kaspersky
not-a-virus:WebToolbar.NSIS.Agent, not-a-virus:WebToolbar.Win32.Agent
53.19%
Agnitum Outpost
Riskware.SearchProtect, PUA.Toolbar.Conduit
53.19%
Sophos
Conduit Search Protect, PUA 'Conduit Search Protect', SearchProtect
53.19%
Comodo Security
Application.Win32.Conduit.~A
53.19%
VIPRE Antivirus
Conduit
53.19%
G Data
Win32.Application.ConduitTB, Trojan.Generic.11702542, Win32.Adware.Conduit, Win32.Application.SearchProtect.AJ
53.19%
Baidu Antivirus
PUA.Win32.ClientConnect, Adware.NSIS.Toolbar, Adware.Win32.Toolbar, Adware.Win32.Conduit
53.19%
Fortinet FortiGate
Riskware/Conduit_SearchProtect
53.19%
AVG
Toolbar.Conduit, Potentially harmful program Toolbar.Conduit, SearchProtect.D
53.19%
Panda Antivirus
Trj/Genetic.gen, PUP/Conduit.A, Trj/CI.A, Generic Suspicious
53.19%
The domain cht.tbccint.com has been seen to resolve to the following 6 IP addresses.
a104-66-252-129.deploy.static.akamaitechnologies.com
April 16, 2016
a104-93-196-11.deploy.static.akamaitechnologies.com
April 7, 2016
a23-67-106-165.deploy.static.akamaitechnologies.com
February 29, 2016
a173-223-75-174.deploy.static.akamaitechnologies.com
February 27, 2016
a23-214-151-183.deploy.static.akamaitechnologies.com
January 4, 2016
File downloads found at URLs served by cht.tbccint.com.
Latest 30 of 47 download URLs
URL:
http://cht.tbccint.com/
SSL certificate subject:
CN=*.tbccint.com, OU=IT, O=ClientConnect LTD, L=Foster City, S=CA, C=US
SSL certificate issuer:
CN=Verizon Akamai SureServer CA G14-SHA1, OU=Cybertrust, O=Verizon Enterprise Solutions, L=Amsterdam, C=NL
Web server:
Microsoft-IIS/7.5 (ASP.NET)
Related Domains