www.nmwpc.com

Private Registration

Domain Information

The domain www.nmwpc.com registered by Private Registration was initially registered in April of 2015 through TURNCOMMERCE, INC. DBA NAMEBRIGHT.COM. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the IT7 Networks Inc network.
Registrar:
TURNCOMMERCE, INC. DBA NAMEBRIGHT.COM

Server location:
Arizona, United States (US)

Create date:
Friday, April 17, 2015

Expires date:
Monday, April 17, 2017

Updated date:
Thursday, January 21, 2016

ASN:
AS25820 IT7NET - IT7 Networks Inc,CA

Root domain:

Scanner detections:
Detections  (57% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ParetoLogic.Optional.Installer.Meta (L)
80.00%

Dr.Web
riskware program Program.Unwanted.686, Trojan.KillProc.36496
40.00%

F-Secure
Gen:Adware.BrowseFox.1
20.00%

Bkav FE
W32.NeshtaB.PE
20.00%

MicroWorld eScan
Win32.Neshta.A
20.00%

nProtect
Virus/W32.Neshta
20.00%

Quick Heal
W32.Neshta.C8
20.00%

McAfee
W32/HLLP.41472.e
20.00%

VIPRE Antivirus
Virus.Win32.Neshta.a
20.00%

K7 AntiVirus
Virus
20.00%

NANO AntiVirus
Virus.Win32.Neshta.cdby
20.00%

AVG
Win32/DH
20.00%

Qihoo 360 Security
QVM41.1.Malware.Gen
20.00%

The domain www.nmwpc.com has been seen to resolve to the following IP address.

138.128.214.213.16clouds.com
July 1, 2015

File downloads found at URLs served by www.nmwpc.com.

0 / 68
http://www.nmwpc.com/download.php  (spyhunter-installer.exe)

1 / 68      (PUP)
http://www.nmwpc.com/wp-content/themes/.../regcurepro.php  (regcureprosetup_f4d2af76-1288-49d7-8c1c-750ea2f7035f_.exe)

11 / 68    (false positives)
http://www.nmwpc.com/download.php  (spyhunter-installer.exe)

1 / 68      (PUP)
http://www.nmwpc.com/wp-content/themes/.../regcurepro.php  (regcureprosetup_c6d504e8-ef69-4b66-8f2b-6066a23d15e6_.exe)

3 / 68      (PUP)
http://www.nmwpc.com/wp-content/themes/.../regcurepro.php  (regcureprosetup_edcdfb75-9201-4924-b750-0fd0009942d1_.exe)

0 / 68
http://www.nmwpc.com/download.php  (spyhunter-installer.exe)

1 / 68      (PUP)
http://www.nmwpc.com/wp-content/themes/.../regcurepro.php  (regcureprosetup_52559eaf-95c8-44eb-99f6-c27a0c09c080_.exe)

URL:
http://www.nmwpc.com/

Title:
“Virus Removal Guides - how to remove ?”

Web server:
nginx (PHP/5.3.28)

Facebook:
Likes:  4
Shares:  7
Comments:  3

Statistics are for the previous month.