www.pchealth.co

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.pchealth.co is registered by proxy through GODADDY.COM, INC. and was originally registered in June of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, INC.

Server location:
Arizona, United States (US)

Create date:
Wednesday, June 11, 2014

Expires date:
Friday, June 10, 2016

Updated date:
Thursday, June 11, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.T, Win32.Generic
100.00%

Qihoo 360 Security
Malware.QVM05.Gen
50.00%

Dr.Web
infected with BackDoor.Infector.133, Adware.Downware.8416
50.00%

Sophos
Install Core Click run software
50.00%

G Data
Win32.Application.PCHealthBoost
50.00%

Vba32 AntiVirus
Signed-Riskware.PCHealthBoost
50.00%

AVG
BoostSoftwareInc
25.00%

The domain www.pchealth.co has been seen to resolve to the following 3 IP addresses.

ip-184-168-221-32.ip.secureserver.net
April 9, 2016

November 17, 2014

November 17, 2014

File downloads found at URLs served by www.pchealth.co.

1 / 68      (PUP)
http://www.pchealth.co/download.php  (pchealthboost-setup.exe)

1 / 68      (PUP)
http://www.pchealth.co/download.php  (pchealthboost-setup.exe)

6 / 68      (PUP)
http://www.pchealth.co/download.php  (pchealthboost-setup.exe)

7 / 68      (PUP)
http://www.pchealth.co/download.php  (pchealthboost-setup.exe)

The following 49 files have been seen to comunicate with www.pchealth.co in live environments.

 
Latest 20 of 52 files

URL:
http://www.pchealth.co/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

30 of 40 related domains