The domain www.worksdown.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrant:
Contact Privacy Inc. Customer 0142459499
Registrar:
TUCOWS DOMAINS INC.
Server location:
Northern Ireland, United Kingdom (GB)
Create date:
Sunday, February 28, 2016
Expires date:
Tuesday, February 28, 2017
Updated date:
Sunday, March 13, 2016
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.YumonSystemSL.F, Threat.Win.Reputation.IMP, PUP.YumonSystem.Installer (M), PUP.Softpulse.YumonSystem.Bundler (M), PUP.Softpulse.PluginUpdate.Bundler (M), PUP.Softpulse.YumonSys.Bundler (M), PUP.Bundlore.Wishapp.Bundler (M), PUP.Bundlore.UKRREMBU.Bundler (M), PUP.Vittalia.InstallA.Installer (M)
100.00%
avast!
Win32:SoftPulse-BE [PUP], Win32:SoftPulse-ET [PUP]
33.33%
Avira AntiVirus
APPL/Softpulse.1014112, PUA/SoftPulse.oans, TR/Dropper.Gen
33.33%
VIPRE Antivirus
Threat.5064683, Threat.4150696, Threat.4783235
29.17%
Dr.Web
Adware.SoftPules.3, Adware.SoftPules.3, Trojan.Domaiq.24, Trojan.Domaiq.286
29.17%
AVG
Win.Threat.High, Found Win32/DH{gRIxfX5QgQd5VE8VUYEVgQkcU4ETQYEP}
29.17%
ESET NOD32
Win32/SoftPulse.P potentially unwanted application, Win32/SoftPulse.S potentially unwanted application, Win32/SoftPulse.R potentially unwanted application
29.17%
Kaspersky
Trojan.Win32.Buzus, not-a-virus:AdWare.Win32.SoftPulse
29.17%
Comodo Security
Application.Win32.SoftPulse.D
29.17%
McAfee
Program.SoftPulse
29.17%
Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Signed-Adware.Softpulse
29.17%
Qihoo 360 Security
Malware.QVM18.Gen, Malware.QVM17.Gen
29.17%
AhnLab V3 Security
Win-PUP/SoftPulse, PUP/Win32.SoftPulse
29.17%
Panda Antivirus
Trj/Genetic.gen
29.17%
Sophos
SoftPulse, PUA 'SoftPulse' (of type Adware)
29.17%
The domain www.worksdown.com has been seen to resolve to the following 3 IP addresses.
unallocated.barefruit.co.uk
May 4, 2015
File downloads found at URLs served by www.worksdown.com.
The following 230 files have been seen to comunicate with www.worksdown.com in live environments.
URL:
http://www.worksdown.com/