home

fs020.clicknupload.net

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain fs020.clicknupload.net is registered by proxy through ENOM, INC. and was originally registered in November of 2014. The hosted servers are located in Milton Keynes, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
England, United Kingdom (GB)

Create date:
Wednesday, November 5, 2014

Expires date:
Saturday, November 5, 2016

Updated date:
Sunday, November 1, 2015

ASN:
AS35662 REDSTATION Redstation Limited, GB

Root domain:
clicknupload.net

Whois:
1 clicknupload.net record

The domain fs020.clicknupload.net has been seen to resolve to the following IP address.

80.84.51.242
redstation.com
July 17, 2016

File downloads found at URLs served by fs020.clicknupload.net.

0 / 68
http://fs020.clicknupload.net:182/d/.../sHaRewbb_idm625b14pre.zip  (f8f8dda1579e1bfce9dc72dbba26e33a)

The following 4 files have been seen to comunicate with fs020.clicknupload.net in live environments.

TCP » 80.84.51.242:182
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 80.84.51.242:182
citrio.exe (Citrio by CatalinaGroup)

TCP » 80.84.51.242:182
UCBrowser.exe (UC Browser by UCWeb)

TCP » 80.84.51.242:182
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

URL:
http://fs020.clicknupload.net/

SSL certificate subject:
CN=*.clicknupload.net, OU=PositiveSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.