home

www.anysend.com

ClickMeIn Limited

Domain Information

The domain www.anysend.com registered by ClickMeIn Limited was initially registered in November of 2010 through DOMAIN.COM, LLC. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Salt Lake City, Utah within the United States which resides on the Hosting Services, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Utah, United States (US)

Create date:
Wednesday, November 10, 2010

Expires date:
Thursday, November 10, 2016

Updated date:
Thursday, August 13, 2015

ASN:
AS29854 WESTHOST - WestHost, Inc.

Root domain:
anysend.com

Whois:
5 anysend.com records

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ClickMeInLimited.F, PUP.installCore.ClickMeIn.Installer (M), PUP.installCore.ClickMeI.Installer (M), PUP.AnySendP.Installer (M), PUP.Softpulse.Appsecur.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.NewMedia.NMH.Bundler (M), PUP.installCore (M)
100.00%

Dr.Web
Trojan.Packed.24524, Adware.InstallCore.110
14.29%

ESET NOD32
Win32/InstallCore.JA potentially unwanted application, Win32/InstallCore.BX potentially unwanted application
10.20%

avast!
Win32:Adware-gen [Adw]
8.16%

ESET NOD32
Win32/InstallCore.IE (variant), Win32/InstallCore.JA (variant)
4.08%

Zillya! Antivirus
Adware.Agent.Win32.8971
4.08%

Vba32 AntiVirus
Downware.InstallCore
4.08%

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
4.08%

SUPERAntiSpyware
PUP.InstallCore/Variant
2.04%

Avira AntiVirus
ADWARE/InstallCore.Gen9
2.04%

Sophos
AnyProtect
2.04%

The domain www.anysend.com has been seen to resolve to the following 5 IP addresses.

206.190.150.70
dl6.clickmein.com
December 27, 2013

173.193.202.79
dl4.clickmein.com
December 27, 2013

174.36.55.71
dl2.clickmein.com
December 27, 2013

173.193.214.228
dl5.clickmein.com
December 27, 2013

199.189.107.164
dl3.clickmein.com
December 27, 2013

File downloads found at URLs served by www.anysend.com.

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=dXJsPXt7aHR0cDovL2QzODltNGw1YjV3bGNiLmNsb3VkZnJvbnQubmV0L2FzbHBtb3YuaHRtbD9jaD1hc19tdG0xJmF1dG89MSZzdWIxPTEwNTc5MSZzdWIyPTE3NjY4MSZzdWIzPTIwc2tudzBWNkZXSzhFVHkwM2VkQ0QxdlVJTEswMDAuJmNlX2NpZD0yMHNrbncwVjZGV0s4RVR5MDNlZENEMXZVSUxLMDAwLn19  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=9428c3fb486da91e0c684f7fd434e27d&r=as_dl_default&pr=def&fn=Single_JoeyY_OnCall36_2 via AnySend.exe&packageID=C8175D489512AC720B3F94DACD68EF69  (7ad99110a123feb4eb3dcdb7990064c0)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDE0ZC5kUFZwbFpwM3NFOC4yMXZNeUJvMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU3NzEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R2IxbFlWa2xUTUpQMXA0d0luMXZVemxoMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=&r=vuu_uninstall&pr=si  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1oyWFRqT0tJaHI0M1R2eUFPMXZPWUdrMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1T0oydzJTcVVNSzY2MXJ0dThKMXZOWTdkMDAwLg==  (setup.exe)

4 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1o0ZXdNUUhvR2xoMUkzTzcxMXZOOE9jMDAwLg==  (setup.exe)

3 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1o0WmJqZ010bWpnMUVTQ2lIMXZOc2RxMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDExd3Z2VFRGOVByM2VacmxPMXZ5SU1IMDAwLg==  (anysendsetup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1oyWDkuLkI3ZGFOMFJoUlBZMXZSeXNtMDAwLg==  (setup.exe)

4 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1o1ODc1UUx6OG9MMURscG9sMXZPRjF5MDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDExbk9WV3hielNRM3FSTEVtMXZVYzNqMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1oxYkhrYTRDWDd1MURtc1d0MXZLQmlVMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=a10f3215b27e6f4544187dfbf6910d40&r=as_dl_default&pr=def&fn=N.PrOg.EmmO via AnySend.exe&packageID=242166ADC0EBBC38A8A2C8CADFB52740  (0239fdca46326963e810ad28835c5255)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1o0QWQzYUJjV2JpMXdsdHB2MXZSVmtLMDAwLg==  (setup.exe)

4 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1ozQllHWGwzTVRmMXh4TDc3MXZNbmI5MDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDEwaEdpQ2FRT2ZpM2kuMkJXMXZBQ0tKMDAwLg==  (anysendsetup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDE1MUhndFZJU1hSM3E2R1J3MXZBc09SMDAwLg==  (anysendsetup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1oyR0JIa29jckhoMXdod3VuMXZTWVoyMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU3OTEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1V0Q0Q285YUkyN3NKMXY3c3p3MXZUSEl1MDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDExN29mcXVGM1lKM2ZiNG1IMXZLSXJXMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1o0OThyTDZWRm81MXNqeU9rMXZBYkZ5MDAwLg==  (anysendsetup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDEyb3d2Ljhuc0REM3NVdGZ5MXZVSk50MDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=b85cc49c3cb1be216934e480ad8aa34e&r=as_dl_aff&pr=def&fn=JCLT via AnySend.exe&packageID=E2349B00CB5ECF63CADCF5AA3FADC68C&a=XCw6mc5DmzP0glLl5K4F&visid=1900445978a7105f98ac9fd3610yU5t3  (b48542ed8cc8738c44c606757f2e077f)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4NDEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1R1oxVlY1ZVFNakNiM3N6RlM5MXZJcGI4MDAwLg==  (anysendsetup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDEwRDlQZU13emZhM3F1VkZ2MXZRNVpOMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1TDEwUW9MUjI0aVdxM3FuRUJHMXZTTG1CMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU3OTEmc3ViMj0xNzY2ODEmc3ViMz0yMHI1V0Q0Q285YUkyN3NKMXY3c3p3MXZUSElqMDAwLg==  (setup.exe)

1 / 68      (Adware)
http://www.anysend.com/dl.php?data=null&anyprotect_id=1&r=as_mtm1_nc&pr=si&prm=b3JnY2g9YXNfbXRtMSZhdXRvPTEmc3ViMT0xMDU4MjEmc3ViMj01ODY1MSZzdWIzPTIwc0FIaDNYeWVCWDc3QnUzdDZ4N2UxdldrZngwMDAu  (setup.exe)

 
Latest 30 of 124 download URLs

The following 12 files have been seen to comunicate with www.anysend.com in live environments.

TCP » 199.189.107.164:80
yellowsendsvc.exe

TCP » 199.189.107.164:80
anysendsvc.exe

TCP » 199.189.107.164:80
vuupclicense.exe (VuuPC License by VuuPC Limited)

TCP » 199.189.107.164:80
client.exe

TCP » 199.189.107.164:80
anysend.exe (AnySend by AnySend.com)

TCP » 173.193.202.79:80
vopackage.exe

TCP » 173.193.214.228:80
vopackage.exe

TCP » 173.193.214.228:80
anysendui.exe

TCP » 173.193.214.228:80
nsidf1a.tmp (Online Backup! by CMI Limited)

TCP » 199.189.107.164:80
latestanysendsetup1.0.0.49.exe (AnySend by AnySend.com)

TCP » 199.189.107.164:80
nsw3bbf.tmp (VuuPC by VuuPC Limited)

TCP » 206.190.150.70:80
setup_132.exe

TCP » 206.190.150.70:80
anysendsvc.exe

TCP » 206.190.150.70:80
anysendui.exe

URL:
http://www.anysend.com/

Google Analytics:
UA-30594637

Title:
“Send Large Files for FREE. AnySize, AnyFile, AnyWhere | AnySend”

Description:
“Send Large Files for FREE. Send AnyFile, AnySize, AnyWhere. Sending files was never so easy. Send unlimited size, Send as much as you wantSend & Share your files or folders & it's totaly FREE. Start using AnySend.com!”

Web server:
nginx

Facebook:
Likes:  84
Shares:  97
Comments:  19

Statistics are for the previous month.

clickmein.com

vuupc.com

biphysics.com

scirbs.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.