home

fc19.spaces.ru

Spacenet Technologies Limited

Domain Information

The domain fc19.spaces.ru registered by Spacenet Technologies Limited was initially registered in June of 2006 through RU-CENTER-REG-RIPN. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-REG-RIPN

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Wednesday, June 7, 2006

Expires date:
Saturday, June 7, 2014

ASN:
AS16276 OVH , FR

Root domain:
spaces.ru

Whois:
1 spaces.ru record

The domain fc19.spaces.ru has been seen to resolve to the following 2 IP addresses.

149.202.196.100
ns3022071.ip-149-202-196.eu
June 26, 2016

95.211.218.31
April 14, 2014

File downloads found at URLs served by fc19.spaces.ru.

0 / 68
http://fc19.spaces.ru/f/0/1388778042/44786937/0/.../LightDriver1-spaces.ru.exe  (lightdriver1.exe)

1 / 68      (inconclusive)
http://fc19.spaces.ru/f/080172093058146087126072167102137014104251051106/1368032739/20981796/0/.../CLEO4-spaces.ru.exe  (6db18ef4a39aea18b7ab433ab5615fb1)

1 / 68      (PUP)
http://fc19.spaces.ru/f/0/1390056896/44933098/0/.../stronghold-tsitadel-_torrentino-spaces.r.exe  (1f858c50c115b3956689991fc2be3e93)

The following 4 files have been seen to comunicate with fc19.spaces.ru in live environments.

TCP » 149.202.196.100:80
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 149.202.196.100:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 149.202.196.100:80
lvk2.exe

TCP » 149.202.196.100:80
UCBrowser.exe (UC Browser by UCWeb)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.