home

fs06n4.sendspace.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

SendSpace is a file distribution service that bundles unwanted malware/adware in its download manager. This malware is inserted by WebPick Internet Holdings and utilizes the company's InstalleRex platfom using the JustPlugIt toolbar extensions along with other potentially unwanted offers. In addition the download manager provides minimal user consent to opt-out of the offers. The domain fs06n4.sendspace.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2005. The hosted servers are located in Chicago, Illinois within the United States which resides on the nLayer Communications, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Illinois, United States (US)

Create date:
Thursday, July 14, 2005

Expires date:
Sunday, July 14, 2019

Updated date:
Monday, February 10, 2014

ASN:
AS4436 AS-GTT-4436 - nLayer Communications, Inc.,US

Root domain:
sendspace.com

Whois:
2 sendspace.com records

The domain fs06n4.sendspace.com has been seen to resolve to the following IP address.

69.31.136.29
ip-69-31-136-29.nlayer.net
February 3, 2014

File downloads found at URLs served by fs06n4.sendspace.com.

0 / 68
https://fs06n4.sendspace.com/dl/479a6e750ed9f2271859bdfcd773ec74/57a98e7229e10b62/.../KMSpico-v10.2.0.zip  (5b7d113a8cefedcf046b16ecbf901419)

0 / 68
https://fs06n4.sendspace.com/dl/ebe5da3a7aee93c1af9f8fca957cf2d1/579aab3861de855e/.../gerador de armas vip.exe  (67428fa0f56d1dc596d6bf690be8f8d0)

0 / 68
https://fs06n4.sendspace.com/dl/c926c538df81c2470f163b4d8dd2a3a3/57a6a3050431a57c/.../dj smuv Non Exclusive Non Profit License.txt  (6d3bec1d9b6253cf0d7cbab0f095d773)

0 / 68
https://fs06n4.sendspace.com/dl/559cca4d7cc71db5a1285b24a6983e92/56c6240b48fa8019/.../DEMO Fixed v1.1.exe  (31a55df01ad2521edf3642d7387d05f7)

0 / 68
https://fs06n4.sendspace.com/dl/06adf552613abc487716fd842181dfda/57a29ccf1616d15a/.../Galinha,Galo-Redwork.zip  (b50991a0e92234981862821413e75616)

0 / 68
https://fs06n4.sendspace.com/dl/a68126915c04e211b58e7619d5f1bce3/568532bc4ba8d7a7/.../AutoDelear213.exe  (a8758f1d37ae67e680a31d023359d1df)

0 / 68
https://fs06n4.sendspace.com/dl/6fe3652189fc9d83c9040d42153247ce/57990fa30042a89f/.../Hack crossfire v13.exe  (f6b2076940399cfbaa3e83a12aa2fde5)

0 / 68
https://fs06n4.sendspace.com/dl/98670265fab6f14798a0c1c8216676a3/56aa14e00ab2076f/.../DBZ Xenoverse 5.0.0.0.rar  (920ff3949d9be090cffd4c276d03765c)

0 / 68
https://fs06n4.sendspace.com/dl/8ebffadfa128e5970971de50784e0a8c/5796997e32ade35b/.../Dork Diaries 6_ Tales From a No - Rachel Renee Russell.epub  (765a93b7-c366-6b3e-a8ec-7fc23796c1ce_1d1e79168793004)

9 / 68      (Malware)
https://fs06n4.sendspace.com/dl/b037b38e8100af98a850c7d5ed6a6fa9/57759fae061c7989/.../Teleport V6 TH.EXE  (3f92e61ae49a92536cb89a5eabd42be6)

0 / 68
https://fs06n4.sendspace.com/dl/92b5a8305ff1bbd11eaf6403296c2d1c/577359d045aef4e5/.../Elysian free version.dll  (prysm v0.3.0.vmp.dll)

0 / 68
https://fs06n4.sendspace.com/dl/9842eaa80591a489851b8a362d3be0ce/5652f684571e2dc2/.../Video_Player_ENU_V1.2.14_20130320_2883.exe  (aaacf319ca6f6b0eb8c371fcc01c19c3)

0 / 68
https://fs06n4.sendspace.com/dl/e82dbdb0fb31a9bfc658a6c309cb40b5/5790635f75af8540/.../1462 Name Alpha.zip  (b00a0e8e8bd6737de70236ea9267eeea)

0 / 68
https://fs06n4.sendspace.com/dl/7e637a0e7f98f5401042bd5d90879cb6/574ba5513c9a4aa8/.../NPEB01899--150120180736.zip  (af965131bd3827a8c8676110fb26c84f)

0 / 68
https://fs06n4.sendspace.com/dl/02c9661189df487376c591f5023ad2af/578f38aa213aeb54/.../Dani Mocanu - Am bani de ma enerveaza @ PeMuzica.Com.mp3  (f3007568-f4f6-19fa-a0fb-0c3fb5a4739b_1d1e32b83eceeb4)

0 / 68
https://fs06n4.sendspace.com/dl/6df47297b9fddf06a79e8d73e5efca09/578c219c60d109af/.../Microsoft Office Professional Plus 2013 Activator 32-64bit.rar  (dfe876be1eff2f52b5d1e2cda18b52e9)

0 / 68
https://fs06n4.sendspace.com/dlpro/825b36b1bba08e7254bd5fa4d0d93cf4/5781d944/.../TCustomz Best Of HipHop DrumKit DEMO.rar  (4a8e2b8360dd99225fd937b693170b71)

0 / 68
https://fs06n4.sendspace.com/dl/9038a9faf56911e2918bc6c8b6df31c2/5789c3654f7c07ac/.../281 - Az Yet - Hard To Say I'm Sorry.mp3  (19d34ed6-7f53-1425-b6fd-1fff907b7900_1d1dfea86d7b32d)

0 / 68
https://fs06n4.sendspace.com/dl/e892dc90ea0397e6e85f3f0481db946c/5788eeeb3acd6e40/.../talk dirty 2.mp3  (54c5e286-e44f-dd9b-ece4-1920afe3b1da_1d1df6bf1e79031)

0 / 68
https://fs06n4.sendspace.com/dl/50eed727ef4fa3471c1b3d09faa4c2a1/566c0f3d0805ab47/.../Dump 2.zip  (a99582137d2aa4eb62449aba29ef598a)

0 / 68
https://fs06n4.sendspace.com/dl/f94c78ff61798c99be0c7f2c9f4d2eb4/5787fa7763f6828c/.../061 - All-4-One - I Can Love You Like That.mp3  (64c5577c-a63b-64bc-4a99-15513538dbe6_1d1deda302e2c02)

0 / 68
https://fs06n4.sendspace.com/dl/3fab236db3d3aea7a7d900c3b46527c0/5787faeb7dc3d6a4/.../075 - Blackstreet - Before I Let You Go.MP3  (c1561f02-fa74-4da1-520b-cafefea745c0_1d1deda74e841c0)

0 / 68
https://fs06n4.sendspace.com/dl/fc1d5146fc12e730ab6897846e43c65b/5788298b2280fdcb/.../173 - Mark Morrison - Return Of The Mack.mp3  (dda2b042-6ad1-cfe4-c861-e8ee11d35189_1d1def63db3958b)

35 / 68    (Malware)
https://fs06n4.sendspace.com/dl/04c5781b0675db05c05ee1ee7d454824/5769f0df30bdad22/.../onlcrit_dota2.exe  (250002cb074444e5221161d37e080332)

0 / 68
https://fs06n4.sendspace.com/dl/75a94520e4bcf0646b1a6215938b9d57/566838e263ecdb74/.../HELLENIC SPIRIT.rar  (6bb0d7fccfe698047546f253be5cd084)

0 / 68
https://fs06n4.sendspace.com/dl/f22cb195a6b0575ddefc4da49acda0d3/571babb6272a0cea/.../Teleport V6 TH.EXE  (47f9297a14d24bde03a4ad6c4fdd0896)

0 / 68
https://fs06n4.sendspace.com/dl/64b311a15fc718ae503c40efacb21677/5778e5173b1ca5c8/.../ThePanPrzygody Show! Episode Two v2.3.rar  (2fed33c0a077337eb9319aaf82857728)

1 / 68
https://fs06n4.sendspace.com/dl/7047486a55bf5da7654eb18dc946fa34/56d32c5c1e1d1d06/.../Pastebin D3vSpider.exe  (98495ea87f6ba103de2f50a61d955ad8)

3 / 68      (inconclusive)
https://fs06n4.sendspace.com/dl/6ec65ac8c25a914f89b7f12eac8f7a2e/573eb9121113dc70/.../cheat.exe  (emulator.exe)

2 / 68      (inconclusive)
https://fs06n4.sendspace.com/dl/3fbb1a0e6bbff7b8a27bebd977d773ca/574e67f25f48a268/.../the-installer-fb.scr  (d75b7cc4644257abf00b925968819872)

 
Latest 30 of 106 download URLs

The following file have been seen to comunicate with fs06n4.sendspace.com in live environments.

TCP » 69.31.136.29:443
cogfefrao.exe

URL:
http://fs06n4.sendspace.com/

SSL certificate subject:
CN=*.sendspace.com, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
nginx

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.