The domain www.hot-jump.info is registered by proxy through GoDaddy.com, LLC (R171-LRMS). This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
Domains By Proxy, LLC
Registrar:
GoDaddy.com, LLC (R171-LRMS)
Server location:
Arizona, United States (US)
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.PluginUpdateSL.K, Threat.Softpulse.Bundler, PUP.Softpulse.PluginUpdate.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.NewPlayer.Installer.Meta (M), PUP.Softpulse (M)
95.83%
VIPRE Antivirus
Threat.4783235, Threat.4150696
41.67%
McAfee
Socrydo, SoftPulse
41.67%
Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.BundleInstaller.A
41.67%
K7 AntiVirus
Unwanted-Program
41.67%
G Data
Win32.Adware.Softpulse, Win32.Application.Softpulse, Adware.Agent.OLP, Gen:Variant.Adware.Zusy.107390, Gen:Variant.Adware.Graftor.154268
41.67%
AVG
Generic, Found Win32/DH{gRJ UIEHeVRPFVGBFYEJHFOBE0GBDw}
41.67%
Agnitum Outpost
PUA.Agent, Riskware.Agent, PUA.Downloader
37.50%
Avira AntiVirus
APPL/Softpulse.H, APPL/Softpulse.Gen8, APPL/Downloader.Gen8, TR/Dropper.Gen
37.50%
Panda Antivirus
Trj/Genetic.gen, Trj/Downloader.WKR, Trj/Zbot.M
37.50%
NANO AntiVirus
Trojan.Win32.Buzus.denqpy, Riskware.Win32.SoftPulse.deniau, Trojan.Win32.Buzus.dejvde, Riskware.Win32.SoftPulse.dfhrtw, Trojan.Win32.SoftPulse.dfwfat
37.50%
Vba32 AntiVirus
BScope.Adware.Softpulse, AdWare.Agent
37.50%
IKARUS anti.virus
PUA.SoftPulse, not-a-virus:AdWare.Agent, Trojan.Win32.Buzus
33.33%
avast!
Win32:GenMalicious-RJ [PUP], Win32:GenMalicious-NP [PUP], Win32:SoftPulse-AH [PUP], Win32:PUP-gen [PUP]
33.33%
Dr.Web
Trojan.DownLoader11.30734, Trojan.DownLoader11.29457, Trojan.MulDrop5.40191, Trojan.DownLoader11.35292, Trojan.DownLoader11.28135
33.33%
The domain www.hot-jump.info has been seen to resolve to the following 5 IP addresses.
ip-50-63-202-88.ip.secureserver.net
November 1, 2014
File downloads found at URLs served by www.hot-jump.info.
The following 6 files have been seen to comunicate with www.hot-jump.info in live environments.
URL:
http://www.hot-jump.info/