Why is CCDash making calls to a malicious site?

[soho1]

I have a "virutual office" and use a lot of tools on the internet, including some things like Skype, so it's great to have MalwareByte watching out for me and blocking intruders. However, I just had an interesting scare when I saw an OUTBOUND connection to a malicious site get blocked. The blocked IP is is 62.41.26.253 and I looked it up here:

https://who.is/whois-ip/ip-address/62.41.26.253

So of course, when I saw it was OUTBOUND not inbound, I wanted to know what might have been comprimized. The offending program was CCDash. At first, I thought, did some cash-dash malware get installed? But no, it's the Intel Wi-Fi dashboard, which is odd by itself and I never use Wi-Fi, as I am wired by ethernet all the time.

So can anyone suggest what might be happening, why? and other than the usual virus scans (which all show clean, and I use several programs for this), what should I consider as next steps? The port number was 8.

 

[GokAy]

MBAM doesn't block intruders, a firewall does Also MBAM is not an AV, do you have a dedicated AV software? MSE will suffice in your case.

The IP is for WebPhone - Save on Calls with VoIP, the link gets loaded but entering the IP result in the behavior you describe. However, I am not exactly sure what's going on. I will ask for moving this to Security section, as it is better suited there.

 

[soho1]

MBAM doesn't block intruders, a firewall does MBAM is not an AV, do you have a dedicated AV software? MSE will suffice in your case.

Yes, let's move this thread there.

As to threat management software, I run MalwareBytes Premium which reported the threat, indicated the threat was blocked, identified the domain, IP, port, direction of the connect request and process name involved.

I also run MSE actively in parallel and have verified separately with Avast and Kaspersky all of which claim the PC is clean.

 

[GokAy]

MBAM Premium and MSE is a good combination. If Avast and Kaspersky are installed they will cause conflict and issues (tomorrow if not today). Uninstall them with their respective clean uninstallers (search their site).

I will be watching this thread in case I can be of help.

 

[soho1]

MSE and MBAM are installed and run actively. The others I run from a server on my network. But we digress.