home

www.spyhunter4download.com

Name Management Group

Domain Information

The domain www.spyhunter4download.com registered by Name Management Group was initially registered in August of 2014 through GODADDY.COM, LLC. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
WILLAMETTENAMES.COM LLC

Server location:
Arizona, United States (US)

Create date:
Saturday, August 16, 2014

Expires date:
Sunday, August 16, 2015

Updated date:
Saturday, August 16, 2014

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:
spyhunter4download.com

Whois:
2 spyhunter4download.com records

The domain www.spyhunter4download.com has been seen to resolve to the following 3 IP addresses.

167.114.156.214
ns513839.ip-167-114-156.net
May 31, 2016

85.17.25.242
August 26, 2014

184.168.27.82
p3nw8shg347.shr.prod.phx3.secureserver.net
February 2, 2014

File downloads found at URLs served by www.spyhunter4download.com.

1 / 68      (Adware)
http://www.spyhunter4download.com/download.php  (setup.exe)

2 / 68      (inconclusive)
http://www.spyhunter4download.com/download.php  (SHDownloader.exe)

1 / 68      (inconclusive)
http://www.spyhunter4download.com/download.php  (SHDownloader.exe)

The following 38 files have been seen to comunicate with www.spyhunter4download.com in live environments.

TCP » 167.114.156.214:3333
webproxy.exe

TCP » 167.114.156.214:80
setup_info.exe

TCP » 85.17.25.242:80
sm.exe (System Monitor)

TCP » 167.114.156.214:80
tencent.exe (by Tencent)

TCP » 167.114.156.214:80
rs.exe

TCP » 167.114.156.214:80
loader.exe (Updater by SOFTWARE AGILITY LIMITED)

TCP » 167.114.156.214:80
win.exe (SendStat Module)

TCP » 167.114.156.214:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.27.82:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 167.114.156.214:80
ProxyFinder.EXE (Proxy Finder Enterprise Edition Application)

TCP » 167.114.156.214:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 167.114.156.214:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 167.114.156.214:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 167.114.156.214:80
deamon.exe

TCP » 167.114.156.214:80
run_css.exe

TCP » 167.114.156.214:1177
pirater facebook v1.0.exe

TCP » 167.114.156.214:80
Updater.exe (Updater)

TCP » 167.114.156.214:80
internet tv.exe

TCP » 167.114.156.214:80
kingtranslatesetup.exe (KingTranslate by Bandoo Media Inc)

TCP » 167.114.156.214:80
kingtranslatesetup-r0-n-bc.exe (KingTranslate by Koyote-Lab)

 
Latest 20 of 44 files

URL:
http://www.spyhunter4download.com/

Title:
“spyhunter4download.com”

Web server:
Apache

Twitter:
Shares:  721

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.