home

dde.de.abadabout-home.com

Client Connect Ltd.

Domain Information

The domain dde.de.abadabout-home.com registered by Client Connect Ltd. was initially registered in September of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Myers, Florida within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Florida, United States (US)

Create date:
Monday, September 15, 2014

Expires date:
Monday, January 1, 2018

Updated date:
Tuesday, April 21, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
abadabout-home.com

Whois:
2 abadabout-home.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ClientConnect.W, PUP.ClientConnect.R, PUP.ClientConnect.U, PUP.ClientConnect.V, PUP.Conduit.ClientConnect.Installer (M), PUP.Perion.Bundler.Conduit (M), PUP.Perion.Bundler (M)
100.00%

VIPRE Antivirus
Threat.4786236, Conduit
33.33%

Dr.Web
Adware.Conduit.87
33.33%

Malwarebytes
PUP.Optional.ClientConnect
33.33%

avast!
Win32:Adware-BRM [PUP]
33.33%

Kaspersky
not-a-virus:WebToolbar.Win32.Agent
33.33%

AVG
Generic
33.33%

Qihoo 360 Security
Win32/Virus.WebToolbar.8f1, Malware.QVM06.Gen
27.78%

K7 AntiVirus
Unwanted-Program
22.22%

ESET NOD32
Win32/ClientConnect.A potentially unwanted application
16.67%

Zillya! Antivirus
Adware.Agent.Win32.12686, Adware.Perinet.Win32.4
16.67%

ESET NOD32
Win32/ClientConnect (variant)
16.67%

IKARUS anti.virus
PUA.Toolbar.Conduit
16.67%

Baidu Antivirus
Adware.Win32.Toolbar
11.11%

Panda Antivirus
Trj/Chgt.G
11.11%

The domain dde.de.abadabout-home.com has been seen to resolve to the following 16 IP addresses.

104.96.221.89
a104-96-221-89.deploy.static.akamaitechnologies.com
July 27, 2016

104.96.221.146
a104-96-221-146.deploy.static.akamaitechnologies.com
July 27, 2016

184.51.126.107
a184-51-126-107.deploy.static.akamaitechnologies.com
July 6, 2016

184.51.126.106
a184-51-126-106.deploy.static.akamaitechnologies.com
July 6, 2016

23.15.9.27
a23-15-9-27.deploy.static.akamaitechnologies.com
June 5, 2016

23.15.9.43
a23-15-9-43.deploy.static.akamaitechnologies.com
June 5, 2016

104.96.220.97
a104-96-220-97.deploy.static.akamaitechnologies.com
May 24, 2016

104.96.220.144
a104-96-220-144.deploy.static.akamaitechnologies.com
May 24, 2016

184.28.17.201
a184-28-17-201.deploy.static.akamaitechnologies.com
April 12, 2016

184.28.17.202
a184-28-17-202.deploy.static.akamaitechnologies.com
April 12, 2016

23.62.6.56
a23-62-6-56.deploy.static.akamaitechnologies.com
December 2, 2014

23.62.6.96
a23-62-6-96.deploy.static.akamaitechnologies.com
December 2, 2014

23.62.6.171
a23-62-6-171.deploy.static.akamaitechnologies.com
December 1, 2014

23.62.6.179
a23-62-6-179.deploy.static.akamaitechnologies.com
December 1, 2014

23.0.160.65
a23-0-160-65.deploy.static.akamaitechnologies.com
November 1, 2014

23.0.160.32
a23-0-160-32.deploy.static.akamaitechnologies.com
November 1, 2014

File downloads found at URLs served by dde.de.abadabout-home.com.

1 / 68      (Adware)
http://dde.de.abadabout-home.com/39/381/ct3811639/a72f6ae4610b4550adac760479f61b8a/Downloads/Prod/DDE1.4.0.1.141006.01/.../IncrediMail.exe  (incredimail_tsa3te4cp.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/76/810/ct8100976/b64953b6369a4d2981ae0c5f88f24757/Downloads/Prod/DDE1.4.0.1_nc6.140910.01/.../IncrediMail.exe  (incredimail_tsa3p14tz.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/99/763/ct7630799/3d336856410d402e810236521c0db095/Downloads/Prod/DDE1.4.0.1.140930.02/.../SweetFlash.exe  (sweetflash_tsa3rrxvm.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/59/428/ct4285259/103c41aa75134d89b7bf765633c24392/Downloads/Prod/DDE1.4.0.1.140910.01/.../SweetPlayer.exe  (sweetplayer_tsv62gf2k.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/99/763/ct7630799/3d336856410d402e810236521c0db095/Downloads/Prod/DDE1.4.0.1.141006.01/.../SweetFlash.exe  (sweetflash_tsa2u8wmz.exe)

12 / 68    (Adware)
http://dde.de.abadabout-home.com/90/978/ct9783290/6769e4cc26c94987840673c7dabceeda/Downloads/Prod/DDE1.3.9.0.140520.01/.../ChromeUpdate.exe  (chromeupdate_tsv6268cm.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/33/681/ct6817533/e55d4be31a39424487b8e7990b9fd7e5/Downloads/Prod/DDE1.4.0.1.141006.01/.../SweetFlash.exe  (sweetflash_tsa3thqz8.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/33/681/ct6817533/e55d4be31a39424487b8e7990b9fd7e5/Downloads/Prod/DDE1.4.0.1.140930.02/.../SweetFlash.exe  (sweetflash_tsa3qzo2n.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/33/681/ct6817533/e55d4be31a39424487b8e7990b9fd7e5/Downloads/Prod/DDE1.4.0.1.141006.01/.../SweetFlash.exe  (sweetflash_tsa3ubt25.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/76/810/ct8100976/b64953b6369a4d2981ae0c5f88f24757/Downloads/Prod/DDE1.4.0.1.140930.02/.../IncrediMail.exe  (incredimail_tsa3rhxh6.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/96/826/ct8260996/3240a4dea1db4e688ee765982a2661e1/Downloads/Prod/DDE1.4.0.1.141006.01/.../IncrediMail.exe  (incredimail_tsa2su5be.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/35/91/ct913035/7221b178dacb4a158b71f72dff94f8f5/Downloads/Prod/DDE1.4.0.1.141006.01/.../SweetFlash.exe  (sweetflash_tsa3ued0i.exe)

1 / 68      (Adware)
http://dde.de.abadabout-home.com/39/381/ct3811639/a72f6ae4610b4550adac760479f61b8a/Downloads/Prod/DDE1.4.0.1.141006.01/.../IncrediMail.exe  (incredimail_tsa3zpc05.exe)

13 / 68    (Adware)
http://dde.de.abadabout-home.com/76/810/ct8100976/b64953b6369a4d2981ae0c5f88f24757/Downloads/Prod/DDE1.4.0.1.141006.01/.../IncrediMail.exe  (incredimail_tsv3e7mwh.exe)

8 / 68      (Adware)
http://dde.de.abadabout-home.com/90/978/ct9783290/6769e4cc26c94987840673c7dabceeda/Downloads/Prod/DDE1.4.0.1.140930.02/.../ChromeUpdate.exe  (chromeupdate_tsv62k44j.exe)

16 / 68    (Adware)
http://dde.de.abadabout-home.com/19/23/ct232719/ab683eb7349344bdb946b833d47ffe08/Downloads/Prod/DDE1.4.0.1.140825.01/.../BitLordSetup.exe  (bitlord_installer.exe)

13 / 68    (Adware)
http://dde.de.abadabout-home.com/32/805/ct8051332/948d71e82d9147abb6ebd73f8e4fbebe/Downloads/Prod/DDE1.4.0.1_pr.140805.01/.../IncrediMail.exe  (incredimail_tsa29lul.exe)

13 / 68    (Adware)
http://dde.de.abadabout-home.com/78/616/ct6168378/572f424f63cc4715b1f58d7493bf4c24/Downloads/Prod/DDE1.4.0.1.140910.01/.../Mahjong.exe  (mahjong_tsv4ddgu6.exe)

The following 158 files have been seen to comunicate with dde.de.abadabout-home.com in live environments.

TCP » 104.96.220.144:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.144:80
plugin.exe

TCP » 184.51.126.107:443
kometa.exe (Kometa by Kometa Authors)

TCP » 23.15.9.43:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.107:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.144:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.107:443
beaglebrowser.exe (BeagleBrowser by The BeagleBrowser Authors)

TCP » 104.96.220.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.171:80
browser.exe (Browser)

TCP » 23.15.9.27:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.179:80
plugin.exe

TCP » 23.15.9.27:443
whatsapptime.exe

TCP » 104.96.220.144:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.107:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.107:80
geniecleaner.exe (Genie Cleaner by Oppoos.com)

TCP » 23.62.6.179:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.179:80
browser.exe (Browser)

TCP » 184.51.126.107:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.144:443
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 181 files

URL:
http://dde.de.abadabout-home.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.