» fft.tbccint.com
Overview
Analysis
IPs Addresses (14)
Downloads (105)
Website Detail
Related Domains (19)

fft.tbccint.com

Conduit Ltd.

Domain Information

The domain fft.tbccint.com registered by ClientConnect LTD was initially registered in November of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Conduit Ltd. who is located in Ness Ziona, Israel.

Registrant:

ClientConnect LTD for Conduit Ltd.

Registrar:

GODADDY.COM, LLC

Server location:

England, United Kingdom (GB)

Create date:

Thursday, November 21, 2013

Expires date:

Sunday, January 1, 2017

Updated date:

Monday, May 4, 2015

ASN:

AS1299 TELIANET TeliaSonera AB,SE

Root domain:

tbccint.com

Whois:

1 tbccint.com record

Google Safe Browsing:

unwanted

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ClientConnect.H, PUP.ClientConnect.O, PUP.Conduit, PUP.Installer.Conduit, PUP.Conduit.Installer, PUP.Conduit.ClientConnect.Installer (M), PUP.Conduit.ClientCo.Installer (M), PUP.Conduit.Bundler (M)

100.00%

McAfee

Artemis!E351A5F965EF, Artemis!E34567B8E1DC, Artemis!50992AD4C7E0, Artemis!22708DEB1C44, Artemis!734137D72D01, Trojan.Artemis!82E5B87EF01E

26.00%

Malwarebytes

PUP.Optional.Conduit.A, PUP.Optional.ClientConnect

26.00%

VIPRE Antivirus

Conduit, Threat.4786236

26.00%

Comodo Security

Application.Win32.Conduit.~A

26.00%

G Data

Win32.Application.ConduitTB, Win32.Application.SearchProtect.AJ

26.00%

Fortinet FortiGate

Riskware/Conduit_SearchProtect

26.00%

AVG

Toolbar.Conduit, Potentially harmful program Toolbar.Conduit, SearchProtect.D

26.00%

Baidu Antivirus

Adware.Win32.Conduit, Trojan.Win32.ClientConnect, Adware.NSIS.Toolbar

26.00%

Trend Micro House Call

Suspicious_GEN.F47V0701, Suspici.43A0F718, Suspicious_GEN.F47V0629, Suspicious_GEN.F47V0814, Suspici.FA106BD6, Suspici.F856D58F

24.00%

Dr.Web

Adware.Conduit.45, Adware.Conduit.280

24.00%

Kaspersky

not-a-virus:Downloader.NSIS.Agent, not-a-virus:WebToolbar.NSIS.Agent, not-a-virus:WebToolbar.Win32.Agent

24.00%

ESET NOD32

Win32/ClientConnect (variant), Win32/Conduit.SearchProtect (variant), Win32/ClientConnect.A potentially unwanted (variant)

22.00%

avast!

Win32:Malware-gen, Win32:PUP-gen [PUP], Win32:Adware-gen [Adw]

20.00%

K7 AntiVirus

Unwanted-Program

20.00%

The domain fft.tbccint.com has been seen to resolve to the following 14 IP addresses.

104.71.34.108

a104-71-34-108.deploy.static.akamaitechnologies.com

August 30, 2016

104.82.185.79

a104-82-185-79.deploy.static.akamaitechnologies.com

June 28, 2016

23.214.102.113

a23-214-102-113.deploy.static.akamaitechnologies.com

April 13, 2016

23.49.135.151

a23-49-135-151.deploy.static.akamaitechnologies.com

April 12, 2016

23.67.106.165

a23-67-106-165.deploy.static.akamaitechnologies.com

April 5, 2016

2.22.76.182

February 28, 2016

184.86.91.68

a184-86-91-68.deploy.static.akamaitechnologies.com

February 28, 2016

92.123.98.89

a92-123-98-89.deploy.akamaitechnologies.com

February 27, 2016

104.66.252.129

a104-66-252-129.deploy.static.akamaitechnologies.com

February 26, 2016

23.214.39.42

a23-214-39-42.deploy.static.akamaitechnologies.com

February 21, 2016

104.93.196.11

a104-93-196-11.deploy.static.akamaitechnologies.com

February 8, 2016

23.214.171.99

a23-214-171-99.deploy.static.akamaitechnologies.com

February 6, 2016

173.223.75.174

a173-223-75-174.deploy.static.akamaitechnologies.com

February 2, 2016

23.214.151.183

a23-214-151-183.deploy.static.akamaitechnologies.com

January 4, 2016

File downloads found at URLs served by fft.tbccint.com.

1 / 68 (Adware)

http://fft.tbccint.com/35/106/CT1066435/Downloads/Firefox/Releases/10.38.0.9/.../hot_mp3.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/21/332/CT3329621/Downloads/Firefox/Releases/10.38.0.9/.../bs_player_controlbar_b.exe (fflogic.exe)

21 / 68 (Adware)

http://fft.tbccint.com/57/167/CT1678857/Downloads/Firefox/Releases/10.37.0.8/.../iwin.exe (e04bf123d41b809a4bda9446965f98855c6ced5f8e71bc468e6a192e625978f9)

1 / 68 (Adware)

http://fft.tbccint.com/95/327/CT3274395/Downloads/Firefox/Releases/10.37.0.8/.../iqmango.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/57/167/CT1678857/Downloads/Firefox/Releases/10.38.0.9/.../iwin.exe (8d17a0708b5f7b9d33db9049bb588601)

1 / 68 (Adware)

http://fft.tbccint.com/18/247/CT2479818/Downloads/Firefox/Releases/10.37.0.8/.../avanquest_uk_games.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/53/328/CT3284953/Downloads/Firefox/Releases/10.38.0.9/.../yesstreamer_bar.exe (10bd3c3cc356da01a4a44b00ec0d1bbe)

1 / 68 (Adware)

http://fft.tbccint.com/58/273/CT2737658/Downloads/Firefox/Releases/10.37.0.8/.../freeonlineradioplayerrecorder.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/58/273/CT2737658/Downloads/Firefox/Releases/10.35.0.3/.../freeonlineradioplayerrecorder.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/43/320/CT3202343/Downloads/Firefox/Releases/10.35.0.3/.../nana10.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/43/320/CT3202343/Downloads/Firefox/Releases/10.37.0.8/.../nana10.exe (fflogic.exe)

20 / 68 (Adware)

http://fft.tbccint.com/87/224/CT2247187/Downloads/Firefox/Releases/10.35.0.3/.../mario_forever.exe (37279d032a09390033ea8732ff11ca813cc65ba132f49250482eeef22870bb62)

1 / 68 (Adware)

http://fft.tbccint.com/95/327/CT3274395/Downloads/Firefox/Releases/10.38.0.9/.../iqmango.exe (fflogic.exe)

17 / 68 (Adware)

http://fft.tbccint.com/21/332/CT3329621/Downloads/Firefox/Releases/10.33.0.5/.../bs_player_controlbar_b.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/22/328/CT3282722/Downloads/Firefox/Releases/10.38.0.9/.../freeonlineradioplayerrecorder_v1.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/18/247/CT2479818/Downloads/Firefox/Releases/10.37.0.8/.../avanquest_uk_games.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/15/283/CT2836015/Downloads/Firefox/Releases/10.35.0.3/.../stardoll.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/16/142/CT1425416/Downloads/Firefox/Releases/10.38.0.9/.../radio_g.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/53/328/CT3284953/Downloads/Firefox/Releases/10.38.0.9/.../yesstreamer_bar.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/65/283/CT2830765/Downloads/Firefox/Releases/10.37.0.8/.../bitlord_security_bar.exe (fflogic.exe)

19 / 68 (Adware)

http://fft.tbccint.com/69/261/CT2612669/Downloads/Firefox/Releases/10.33.0.5/.../imvu_inc.exe (fflogic.exe)

1 / 68 (PUP)

http://fft.tbccint.com/69/261/CT2612669/Downloads/Firefox/Releases/10.33.0.17/.../imvu_inc.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/58/273/CT2737658/Downloads/Firefox/Releases/10.38.0.9/.../freeonlineradioplayerrecorder.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/52/156/CT1561552/Downloads/Firefox/Releases/10.37.0.8/.../hotspot_shield.exe (fflogic.exe)

17 / 68 (Adware)

http://fft.tbccint.com/21/332/CT3329621/Downloads/Firefox/Releases/10.34.0.3/.../bs_player_controlbar_b.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/53/328/CT3284953/Downloads/Firefox/Releases/10.38.0.9/.../yesstreamer_bar.exe (fflogic.exe)

18 / 68 (Adware)

http://fft.tbccint.com/77/219/CT2192277/Downloads/Firefox/Releases/10.34.0.3/.../clixsense.com.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/14/326/CT3266014/Downloads/Firefox/Releases/10.38.0.9/.../link_finder.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/99/267/CT2670199/Downloads/Firefox/Releases/10.35.0.3/.../free_lunch_design_tb.exe (fflogic.exe)

1 / 68 (Adware)

http://fft.tbccint.com/51/292/CT2928751/Downloads/Firefox/Releases/10.37.0.8/.../icy_tower.exe (fflogic.exe)

Latest 30 of 105 download URLs

URL:

http://fft.tbccint.com/

SSL certificate subject:

CN=*.tbccint.com, OU=IT, O=ClientConnect LTD, L=Foster City, S=CA, C=US

SSL certificate issuer:

CN=Verizon Akamai SureServer CA G14-SHA1, OU=Cybertrust, O=Verizon Enterprise Solutions, L=Amsterdam, C=NL

Web server:

Microsoft-IIS/7.5 (ASP.NET)

Related Domains

communitytoolbars.com

ourbusinesstoolbar.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.