www.how2remove-virus.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.how2remove-virus.com is registered by proxy through GODADDY.COM, LLC and was originally registered in November of 2013. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Sunday, November 17, 2013

Expires date:
Thursday, November 17, 2016

Updated date:
Monday, November 9, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

The domain www.how2remove-virus.com has been seen to resolve to the following 2 IP addresses.

ip-50-63-134-210.ip.secureserver.net
March 3, 2015

n1nlhg67c129.shr.prod.ams1.secureserver.net
February 5, 2014

File downloads found at URLs served by www.how2remove-virus.com.

0 / 68
http://www.how2remove-virus.com/download  (spyhunter-installer.exe)

0 / 68

11 / 68    (false positives)
http://www.how2remove-virus.com/download  (spyhunter-installer.exe)

1 / 68      (inconclusive)
http://www.how2remove-virus.com/.../  (spyhunter-installer.exe)

1 / 68      (inconclusive)
http://www.how2remove-virus.com/download  (spyhunter-installer.exe)

1 / 68      (inconclusive)

1 / 68      (inconclusive)

1 / 68      (inconclusive)

1 / 68      (inconclusive)

The following 2 files have been seen to comunicate with www.how2remove-virus.com in live environments.

URL:
http://www.how2remove-virus.com/

Title:
“Removal Instructions”

Web server:
nginx/1.0.15 (PHP/5.4.12)