» d.failsmail.com
Overview
Analysis
IPs Addresses (1)
Downloads (16)
Network (19)
Website Detail
Related Domains (25)

d.failsmail.com

Whois Privacy Corp.

Domain Information

The domain d.failsmail.com registered by Whois Privacy Corp. was initially registered in March of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Salt Lake City, Utah within the United States which resides on the Hosting Services, Inc. network.

Registrant:

Whois Privacy Corp.

Registrar:

TLD REGISTRAR SOLUTIONS LTD

Server location:

Utah, United States (US)

Create date:

Thursday, March 5, 2015

Expires date:

Saturday, March 5, 2016

Updated date:

Thursday, March 5, 2015

ASN:

AS29854 WESTHOST - WestHost, Inc.,US

Root domain:

failsmail.com

Whois:

1 failsmail.com record

Scanner detections:

Detections (94% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.FaglaroEnterprises, PUP.Installer.CandyMandy, PUP.ExpressDownloader.Nedonte.Installer (M), PUP.CandyMandy.Installer (M), PUP.Blisbury.FaglaroE.Bundler (M), PUP.CandyMan.Installer (M)

100.00%

Emsisoft Anti-Malware

Gen:Variant.Strictor.79472, Gen:Variant.Kazy.563143, Gen:Variant.Kazy.586985

46.67%

avast!

Win32:Downloader-TSH [PUP], Win32:Adware-gen [Adw]

40.00%

F-Secure

Gen:Variant.Strictor.79472, Gen:Variant.Kazy.563143, Gen:Variant.Kazy.586985

40.00%

Lavasoft Ad-Aware

Gen:Variant.Strictor.79472, Gen:Variant.Kazy.563143, Gen:Variant.Kazy.586985

40.00%

VIPRE Antivirus

Threat.4783941, Threat.4657539

40.00%

ESET NOD32

Win32/ExpressDownloader.K potentially unwanted application, Win32/ExpressDownloader.J potentially unwanted application

40.00%

MicroWorld eScan

Gen:Variant.Strictor.79472, Gen:Variant.Kazy.563143, Gen:Variant.Graftor.183147

40.00%

K7 AntiVirus

Unwanted-Program

40.00%

Bitdefender

Gen:Variant.Strictor.79472, Gen:Variant.Kazy.563143, Gen:Variant.Kazy.586985

40.00%

Comodo Security

Virus.Win32.Virut.CE, Application.Win32.ExpressDown.ZMIL

40.00%

Avira AntiVirus

APPL/Downloader.Gen4, APPL/Downloader.Gen8

40.00%

G Data

Gen:Variant.Strictor.79472, Gen:Variant.Kazy.563143, Gen:Variant.Kazy.586985

40.00%

AVG

Faglaro Enterprises Limited, Downloader

40.00%

herdProtect (fuzzy)

a variant of 6a8b2e25e583817cb0d069e594fd8dfc326c10b4, a variant of 94c93124c6915f68e44ed18c97c6b5f09344fd53, a variant of 64cbdb280ce39a5f89569fab562e386e0bc384ac

40.00%

The domain d.failsmail.com has been seen to resolve to the following IP address.

199.195.196.180

199.195.196.180.static.midphase.com

November 18, 2015

File downloads found at URLs served by d.failsmail.com.

1 / 68 (PUP)

http://d.failsmail.com/j5GBQmDEvElk2 YNJIj6BXvQuWxEpas4f6uzZEqLxydt8dRjEOjZaRPh3m4Mq4QBR7jIVgLQzF8P0tsfW5p1HVueWh4mzT1dMoZsGSyRctw6hWXibzk/6DptfuRnOQfnOn96/w1jXaYRcU/zA3ZawgpvG8QdTR/fEldizBVdL8cMVXji0RY73udYEtzmUTKo0VI6 qJmLa/lGzS/p35Y/a96VPmTZ0fqk2RLqssHGYLdNEiFi1Yaj48CRdyIULbFiF3nzvNEscn Rr7KrE lYfhFoiGn4aRInqLxaOftzzW97dEq1rbZaYnw2Hyex9hH066CAYDB10/LlY0XyI61Dp2e41xnyfQOP9D/XTKM4XNrjeR/.../XTMxu1iH1Wu58rF nCWhnl (dubturbo_2.0_full_version_pc_downloader.exe)

1 / 68 (PUP)

http://d.failsmail.com/j5HjQ3GN A80jP8IPI3neyjPoCV7pOR6JvTufyv7xyN/vpE5R6K2MkLp3nleqpAFSLWWOEaZiQ4L1cxJWYRoEFXRNFE2lHokLpt C3eMeeYvmGbpN3Q36DlpO/s e37wMXlL4xBpFM41Ml/6C3RuwAJ1VswtTlaWRgJJywl3KMNDHnGZswR5lbcEf5G7CmHl 10Kr/MzMfbydD/3qH5Rt/wvVuKXZ1y lGUOupk7EIeWakKFhVMd05ARHNL5IKef2VHgmeQT6I/.../yGbXqIka3vqEEJCY3BiUxtgcnMn1Up b9gQ2hPANMYT0XGueoSx8yOh2Ifnucg== (smilefiles_downloader.exe)

1 / 68 (Adware)

http://d.failsmail.com/j5HjQ3GN A80g/8PPo7mcSjPoCV7pOR6JvTufyv7xyN/vpE5R6K2MkLp3nleqpAFSLWWOEaZiQ4L1cxJWYRoEFXRNFE2lHokLpt C3eMeeYvmGbpN3Q36DlpO/s e37wMXlL4xBpFM41Ml/6C3RuwAJ1VswtTlaWRgJJywl3KMNDGXWZsAV8lbcBeZG Dne272M9puEoZKmvcj6roy5Z4Kx0UuGUYQvil2BV7ZJqQtbIa0GFhFlOzcMFQKzyTu2Ugwnr0aER/.../yGbX tBB3arRE8KR2EjCkNgez8z1V8jPo1Mx1PleZNX7C2ueoSx8yOh2Ifnucg== (smilefiles_downloader.exe)

1 / 68 (Adware)

http://d.failsmail.com/j5GVWGnVpFRo649Ta9u6HDzjkCl1rLA4fpuPAFeXhTxpook4Q7S2PUmmshtPi5wWY5mqQgDYqShpz6IiW4skQQezIEV6hjtVc6tJLBWqXs5rzizYKGlprSJ3IL5uOhehZjQRoVQ2Wu4EfUmiWygBl1skAIECQUvfGEFP8BNMfIBYWDfW5FYg2NlANM/vBWPl7VA8pPl9aO3iIC6Q8icSp6M4DbLDNBq1wyBDvMU1V5fKLyqE3RUXn8QdQLrpTvOW3wDalK4Z6pCZGuLC l7lZ70j/Hfvsak8 LWtIei9lD3svJcxl/H2c4fnxSLdq9MaiKWNQZSW2E7DkNlOz570V8rJpg871fsMNdf4DCzNsH5N9PMrdf28JTCnvDsn/.../qPD8WtS5jV NfIRqiUS0= (pokemon_black_2_english_rom_download_for_desmume_(pc___mac)_(v2.5_ds_rom)_zip_downloader.exe)

1 / 68 (Adware)

http://d.failsmail.com/j5GERHLVpxBS0a5XZNe9LGnF/gZhsLwlWYqYZEzwz2U4uJZqE TbbBbi2W4e4dcQW76cAw/RyVsF18xcHJhgAUqCYAUdmW1GddJ5DSued oto2H ImUks3BnceY5YxyieHhB5D14RugSKVn3D3lV0AB5QYkRT1SNAkBO8BlHNN0KXjyK12NvyeNVIeDpVDig5WM7qK9wf7/yNwKm6nVY67B9XO MZUfqk2BLqssHGYLdNEjQhQUa04IFG9iJXrHBi1S1xvJGucjwTbier0qhZv5FpCGn4aRInqLxaOftzzW97dEqz6GPa5T7yWqJ7O5KiqGHENTS2EWSmYwYy5/.../mAYhWyim8ApIItXuXAUBfrzA== (aspen_technology_aspenone_v8.6_downloader.exe)

0 / 68

http://d.failsmail.com/j5G2VmTV4lFnx6JRIculInrUtCo5pqwneu wIGyhhHVqv9hmFuLcYhLl2m8S/oIWTLWRWgPQyVkP3cpJSolzB1CJdygrlDRIYIB/HiyeeOARiGz3Nz0qrTVodOwxNRC1KmhWyAp/Wu9bYEX6C3xCzQtoG8QdTR/fEldizBVdL8cMVXji0RY73udYEtzmUTKo0VI6 qJmLa/lGzS/p3lR5LB9VuCMaV31lGVb d85LovPLx3a0AMa2dNVRNqLWuDE21qzkaMU7532Qbic/0DwM69Jp2H09fg2lcy7Y721xH3478Rj36GPa5T7yWqJ7O5KiqGHENTS2EWSmYwZwp/zFYqRpgUk26xCO4H/.../qAZEfp3Ggf8p0wWKzMUh3lwl4= (safe_jason_statham_full_movie.zip)

1 / 68 (PUP)

http://d.failsmail.com/j5GhUnTZql4t1a5LY86wN2fTu2xxr70uMLCuciv802Qq 9ZkFeHPKFO2hDsX6cFTHerGVhSQmBlCipgdZYFlTg3KcQUjlm8SJat5BjqdLLZon3nuMWskunBwefwFYE7gKjFR/wdxTegIcVmxCXdchRp4RvgRT0zFAlZEki97Z8EbTSno4Vwg2O1rI9C3CHe36k8KruJ9bPu4dW/2tHpV67B9VeeEJQiEzjUet5dvRobNZEGG1FdK3YZWSNeKWbHFjl zzvcR7Mn2Eb3G 17kYvM/3SG 56RuuKL bq61lTWu/spzl/PdRI/.../9Eye qVOFCk1GoV7dpm (device_activation_code_downloader.exe)

1 / 68 (PUP)

http://d.failsmail.com/j5GHQnHZp151x Z7c9awLmffpmxBuao/c6muZE6giD11pYswCbGHPw2ZgjtPtJgNSfeTCEDLmEB1i5AfVo15WGmDdxsm1n0Ie8U5TXLLJrF7xSChIXV74jI5LL9qOxSqbypV9hBkR/4US0T7VysX1xx9U8EbQ2bfD1RYkk8OIt8XTy6KsxY93/VrJdD5TGy35lk0o EuPL 4JzKivDwFoMEvCqLMJBuimwE dg9EI/xPxmO0QsmhdlZTcnODPKs1xy4zvteuMr3WrzK lajM/xa4GaN6Ph4vrn/.../3RYBHizy8btcs0T6HMBU 4xVAF2cFSBdXIDQneYEoL3zxHIcJvGCLFPxt9m3elPpNn828xKrJhPQ== (business_dynamics_systems_thinking_and_modeling_for_a_complex_world_downloader.exe)

1 / 68 (PUP)

http://d.failsmail.com/j5GIQnHZqhYrmZlXb5WQMXqRmiE/jLA4YqGzJnSvzHYs9NIjSv2sP0 ghDBE/cNaA6yRAR nlgRYgY9JTps8QgreMk92wDtJc9J CiiRdb5/zCWzZDUurSZlb/s0bVPMN2gYpERkW/oAckT8NWxI0wshDYERTFDIHRkMiQ5MMuwWQzbDv0Qh3udQPtHvTH g4VFzs/YzBqj5MTO76DFchs1qF7LDPDa4yj0OtPU2Ht6eegGDwT8Qm4tVTdeUWrDDkF2yz xBus3gAeygohnia/.../j8Q2aw4BKlI6iUoqR8BFywqZfc9e5YGPc7HE5mqcmfKTkfCDz7Wlu9YJhOKeALh 03ToVsNRqEurIUx66wlAA0ppZBYbIDgjZMURb3mFBdNZ5FDSAME55wSa6 (music---the-art-of-listening-(7th-edition)-pdf-gooner_downloader.exe)

1 / 68 (Adware)

24 / 68 (PUP)

http://d.failsmail.com/j5GQW3bCqHZp2uYNJI76IHzdtiw0tKp2J/Dvdyrx12Ev/MMkV7KAPxvl3W8Z4MJRCKyUFUaOnBlpjZlSCc51AV KYx4hr30CNpEwSmybfeotlyi2dHR9 AlscvwuNVX7O21B5Ax1XbUFe0C5HnxC/A1zQMkGUkCWI3cb3R9JLewdQCzU6W8n1LsEa8vuSw6q/gFk8KZubPm4fXP r3BHpv8TDbbROFTtxGZYuZltFIXIOBCFiwQY3IUBGNbZCuTKjVzjlvFJ692zFbC8gl79ZPMZ yGx4e02 7W7f6jnxWa9 Pp hq2bLMDmzHGOpYka3KSTU8/Diw2dwcQSmM3wUZ2dpgU30foJNYSsD2zb4HY/.../jsciH1uHw8uI4havHUZBvn0A== (ultramon_2.6_crack_downloader.exe)

23 / 68 (PUP)

http://d.failsmail.com/j5GEQ27RuhBF271cZZOWIj JsyE5k7w5YK2 KjGFgD1rrYlxVqPUahLm2mYd6cRRHvqGElCJnVYH1M1aDtE3VU6NdwMslXskL5AwS2yMY IomnzkDXRg zM5JKk5ZEjwNTEUsRZ0WsQOe17rV29UwQJ1W8wTREqFFUtQiQ5MMuwdQzDZ9kIwhtNna83vWT2c7VA8pPkfN6SrdHu7/js uu5xUOeMYVnoiGVd7IRgQ8XbPSqP0xMR1oFTGIyCXOCViV zx/BFscv3RLvP U6oNq8Zpze3sKA68PH8MpnAh3 5scB5xPPIb9u5nDma6t5Hm//BeJvEhBnBgs9OlMz8Asea8A8kxPRaIN oRjeM4Cc72LN caW8cyL26H4r8YVjeqiAZ0ezjz0RtYs HP6BDFyoyFYB2c5S (atlas_copco_ga15ff_service_manual_downloader.exe)

23 / 68 (PUP)

http://d.failsmail.com/j5GzUmHEpkkt2axYY9v6KGvFsiJ85q04K/XpfSL40WQq/tBxUaWLMkLp3G8a68lQHPqFBkCUlw5Eu5QLB9snB0yNYxErk1YPP4RoQnLecu8nn366YyZt7yVbdeApfBznNmlE8xF TO9Id0LyTGxV0DF/WtIcVEvSS3FuiQhNIN8hTyne4VsW1ekJfZn XCKc50xo9qV0d/qmdHP9qXlP4KxqELb9OAiozmla6M87SdfPOkLUhFBL3o5UTN MWLLFh1nkkvBA7Mv/RauKq0XSS gQ8jq37r9ot/CgO/.../foLyOl7H8r7pE8bLjYZhHp3mI= (vector_magic_keygen_downloader.exe)

22 / 68 (Adware)

http://d.failsmail.com/j5G2Q3DRoFxuwOBLa9S6bnTIsGp/pasiYumuO3Wrin5so4hxVqPUahLm220T7MNXHfqGElCJnVYH1M1bAt0wVU6NdwMslXskL5AwTGyMY IomnzkDXRg zM5L6k5ZEjwNTEUsRZ0WsQOe17rV2xZxg94RskXVBfIGUkb2x5bHtARWSvD8El07tUSP9rrVA6g4lU2rM0uNvamYimr6RcIo6N6U/mVZEfqlmND7ZhsV5bPAx2GwQhE3IUGRImDUOeViA3gwvYU6M7wQenLrxupOqtOojSxtaoto WgTJKuzXTj6csxgfHdJtKy3W2F/MRAmsPcQ8 Sjg2ExdNLx5z3AciKsQphgu9QY83wC2mMtSI53 ciJfa8ciT87Cl 8NMwe//dZRfpiG8XsNx5WreDFxPtxl4F2Q== (straight-talk-zte-merit-stock-rom_downloader.exe)

18 / 68 (Adware)

http://d.failsmail.com/j5GReFLxkxBK9Y9sIfm9LyXspyh2tbo/Ze NHDGYjSZ5pYskCYeANUK7miwB79ogQbGFBkaJmwdTz6oGVIxuBE3HMlwBn2QLJ4BkHSadTvknjDPzIT0ov2QzLbloOxejeH9Q9Qt0FKpWJBmqUi0X0w9uQckXUmbCEhkOiQ5aINUYRSbo9kk53rsBa9zmUTKosw1zs/YzBqP5Nyny7iAEsvo/C7LWfgq0y3IZu9kHEozbMgGVy10suJAWGI7WN Kf1w/uqKwftMvgAOmMlRHhPvhEuzLgrqg75aqsO yu1HKB5MRkiq2QK9Kjny3brYAV2/rWQcKTgUrAkY4WzJr4AJubpgQx0 9OZ4mOdyzUtn5r0vMkc7TkfzC0ryB vYInQaWBahDnzylHuoliG zEVxb6gVpTxpIOT9nJWAnQY0Jb3GYTIMA GnDBOUt8yimwK5oitWRjKbhlZTv/.../HKBb (topaz_labs_all_products_ps_plugins_windows_7_compatible_windows_7_compatible_zip_downloader.exe)

18 / 68 (Adware)

http://d.failsmail.com/j5GGRWPTohBF2KRcYcy0ImOXkzJhqbYlPfbzejy8km4v NdhEeXeYxPgyyxfupgHE 3FVwfQzVIQlJwdToZkAWGFYUpx1n0JJ5JrFimnZfo mSiydGN14jVvIL58fEXgAWRK5BYtXfMDdUnsBH1FjQ1zWIEGREr0FUtIwQ5aOI4rf2PF51El5OVYJNzhZz sswxzs/YzBqLmeWj/tHlX5bB9VeOMYl3pgCEMgMI5AouTaEHehllNjYYFT9yOW eSi1ThwqBGuJ3yRrvK BqhZfda4Gbvw9EtuuOgarSuwnKqsYgmxODbdILhzmu18dUe3KuTVZPO3RbHlYwWwo61Dp KrlJ7jfAMYNf5BzzZ5nJrhOR3dqW4Ly/.../Ndleq3UNhfozytJppliG vIVBc= (crack_clickteam_fusion_2.5_downloader.exe)

The following 19 files have been seen to comunicate with d.failsmail.com in live environments.

TCP » 199.195.196.180:80

EFupdater.exe (Express Files Updater by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe

TCP » 199.195.196.180:80

EFupdater.exe (Express Files Updater by http://www.express-files.com/)

TCP » 199.195.196.180:80

ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe

TCP » 199.195.196.180:80

uninstall433109428.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe (Express Files Updater by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe (Express Files Updater by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe (Express Files Updater by http://www.express-files.com/)

TCP » 199.195.196.180:80

ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe

TCP » 199.195.196.180:80

ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe

TCP » 199.195.196.180:80

ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 199.195.196.180:80

EFupdater.exe (Express Files Updater by http://www.express-files.com/)

TCP » 199.195.196.180:80

uninstall.exe (ExpressFiles Application by http://www.express-files.com/)

URL:

http://d.failsmail.com/

Web server:

nginx/1.2.1

Related Domains

yourfiledownloader.biz

yourfiledownloader.com

yourfiledownloader.info

yourfiledownloader.net

yourfiledownloader.org

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.