home

fs19.clicknupload.net

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain fs19.clicknupload.net is registered by proxy through ENOM, INC. and was originally registered in November of 2014. The hosted servers are located in Milton Keynes, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
England, United Kingdom (GB)

Create date:
Wednesday, November 5, 2014

Expires date:
Sunday, November 5, 2017

Updated date:
Sunday, August 14, 2016

ASN:
AS35662 REDSTATION Redstation Limited, GB

Root domain:
clicknupload.net

Whois:
1 clicknupload.net record

The domain fs19.clicknupload.net has been seen to resolve to the following IP address.

80.84.51.242
redstation.com
August 26, 2016

File downloads found at URLs served by fs19.clicknupload.net.

0 / 68
http://fs19.clicknupload.net:182/d/.../Rust.Client.Experimental.Update.v1380.to.v1381.x64-Kortal.exe  (ab9d6cd01d6b076a90016426dca80cd1)

The following 4 files have been seen to comunicate with fs19.clicknupload.net in live environments.

TCP » 80.84.51.242:182
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 80.84.51.242:182
citrio.exe (Citrio by CatalinaGroup)

TCP » 80.84.51.242:182
UCBrowser.exe (UC Browser by UCWeb)

TCP » 80.84.51.242:182
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

URL:
http://fs19.clicknupload.net/

SSL certificate subject:
CN=*.clicknupload.net, OU=PositiveSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.