home

counter-strike.soft32.de

Domain Information

Server location:
California, United States (US)

ASN:
AS54113 FASTLY - Fastly, US

Root domain:
soft32.de

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Downloader.Bundler.Soft32.Installer (M)
100.00%

The domain counter-strike.soft32.de has been seen to resolve to the following 4 IP addresses.

151.101.20.249
July 23, 2016

23.235.46.249
February 19, 2016

23.235.39.249
December 25, 2015

199.27.76.249
December 25, 2015

File downloads found at URLs served by counter-strike.soft32.de.

0 / 68
http://counter-strike.soft32.de/get/file/id/.../  (Counter-Strike.exe)

0 / 68
http://counter-strike.soft32.de/get/file/id/.../?no_download_manager=1  (Counter-Strike.exe)

1 / 68      (Adware)
http://counter-strike.soft32.de/get/file/id/.../?lp=dsa&tg=at&kw=_cat:soft32.de&mt=b&ad=31523187842&pl=&ds=s&uid=1409045236c753b09701cae4c7e0e640ef2244e9df&_ga=526527699.1409045236&gclid=CjwKEAjw4PCfBRCz966N9pvJ4GASJAAEdM_KqpAOhAISPGtPhnBPhk7n_8lGJ840LpvBbkidQOJg_xoCc5Xw_wcB  (counter strike setup.exe)

1 / 68      (Adware)
http://counter-strike.soft32.de/get/file/id/.../?lp=dsa&tg=ch&kw=_cat:soft32.de&mt=b&ad=31507552682&pl=&ds=s&uid=14132117346b81c0afa94852018894e2f1fa65228b&_ga=795025911.1413211734&gclid=CMqBv_rvqcECFYKWtAodvF0AiQ  (counter strike setup.exe)

1 / 68      (Adware)
http://counter-strike.soft32.de/get/file/id/.../?lp=dsa&tg=ch&kw=_cat:soft32.de&mt=b&ad=31507552682&pl=&ds=s&uid=14132117346b81c0afa94852018894e2f1fa65228b&_ga=795025911.1413211734&gclid=CMqBv_rvqcECFYKWtAodvF0AiQ  (counter strike setup.exe)

1 / 68      (Adware)
http://counter-strike.soft32.de/get/file/id/.../?lp=dsa&tg=ch&kw=_cat:soft32.de&mt=b&ad=31507552682&pl=&ds=s&uid=14132117346b81c0afa94852018894e2f1fa65228b&_ga=795025911.1413211734&gclid=CMqBv_rvqcECFYKWtAodvF0AiQ  (counter strike setup.exe)

0 / 68
http://counter-strike.soft32.de/get/file/id/.../?rel=center  (Counter-Strike.exe)

0 / 68
http://counter-strike.soft32.de/get/file/id/.../  (Counter-Strike.exe)

The following 6 files have been seen to comunicate with counter-strike.soft32.de in live environments.

TCP » 199.27.76.249:443
product support.crx

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.