Domain > softsoft.ru

More information on this domain is in AlienVault OTX

Files that talk to softsoft.ru

MD5	A/V
b557acb44b99280651279397f811562c	[Artemis!B557ACB44B99] [PUP.Optional.InstallCore] [WS.Reputation.1] [TROJ_SPNR.30D314] [PUA.InstallCore!] [Adware.InstallCore.101] [Downware.InstallCore] [Adware.Win32.InstallCore.BL] [Win32/InstallCore.BL] [PE:Malware.InstallCore!6.4] [W32/InstallCore.BL!tr] [PUP/MultiToolbar.A]
1c161ce1b5f07209f5b39a77d1da1070	[Artemis!1C161CE1B5F0] [PUP.Optional.InstallCore] [WS.Reputation.1] [TROJ_SPNR.30D314] [PUA.InstallCore!] [Adware.InstallCore.101] [Downware.InstallCore] [PUP/MultiToolbar.A] [Win32/InstallCore.BL] [PE:Malware.InstallCore!6.4] [W32/SPNR.30D314!tr] [Adware.Win32.InstallCore.BL]
4947ecf1cc5356ed0c25cf39275f4291	[Artemis!4947ECF1CC53] [PUP.Optional.InstallCore] [WS.Reputation.1] [TROJ_SPNR.30D314] [PUA.InstallCore!] [PE:Malware.InstallCore!6.4] [Adware.InstallCore.101] [Downware.InstallCore] [Adware.Win32.InstallCore.bBL] [Win32/InstallCore.BL] [W32/InstallCore.BL!tr] [PUP/MultiToolbar.A]
72bccbaa9cc2ead2154b14a7cca7ac16	[Artemis!72BCCBAA9CC2] [PUP.Optional.InstallCore] [WS.Reputation.1] [TROJ_SPNR.30D314] [PUA.InstallCore!] [PE:Malware.InstallCore!6.4] [Adware.InstallCore.101] [Downware.InstallCore] [PUP/MultiToolbar.A] [Win32/InstallCore.BL] [W32/InstallCore.BL!tr] [Adware.Win32.InstallCore.BL]
be99afd66424fe141cd528321a7953d2	[Artemis!BE99AFD66424] [PUP.Optional.InstallCore] [WS.Reputation.1] [PUA.InstallCore!] [Adware.InstallCore.101] [TROJ_SPNR.30D314] [Downware.InstallCore] [PUP/MultiToolbar.A] [Win32/InstallCore.BL] [PE:Malware.InstallCore!6.4] [Riskware/InstallCore] [Adware.Win32.InstallCore.BL] [Win32/Virus.Adware.94c]
3d7b745ca5972e8aa617827508a3cc31	[PUP.Optional.InstallCore] [PUA.InstallCore!] [TROJ_SPNR.30D314] [Adware.InstallCore.101] [Downware.InstallCore] [Win32/InstallCore.BL] [PE:Malware.InstallCore!6.4] [PUP/MultiToolbar.A]
45ea1a92b74b1425da0d31f21ef9e345	[PUP.Optional.InstallCore] [Adware.InstallCore.101] [Adware/MultiToolbar] [Win32/InstallCore.BL] [PE:Malware.InstallCore!6.4]

DNS Resolutions

Date	IP Address
2012-12-17	68.169.45.175 (ClassC)
2013-01-24	178.236.4.60 (ClassC)
2014-07-11	141.101.117.78 (ClassC)
2024-09-08	172.67.160.35 (ClassC)
2024-11-24	172.67.132.168 (ClassC)
2025-01-30	104.21.64.1 (ClassC)
2025-05-15	104.21.16.1 (ClassC)
2025-06-27	104.21.96.1 (ClassC)
2025-09-02	104.21.48.1 (ClassC)
2025-09-11	104.21.80.1 (ClassC)
2026-02-26	104.21.4.249 (ClassC)

HTTP/1.1 403 ForbiddenDate: Wed, 26 Jun 2024 21:06:23 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCac

!DOCTYPE html>!--if lt IE 7> html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>    html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>    html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!--> html classno-js langen-US> !--!endif-->head>title>Attention Required! | Cloudflare/title>meta charsetUTF-8 />meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta http-equivX-UA-Compatible contentIEEdge />meta namerobots contentnoindex, nofollow />meta nameviewport contentwidthdevice-width,initial-scale1 />link relstylesheet idcf_styles-css href/cdn-cgi/styles/cf.errors.css />!--if lt IE 9>link relstylesheet idcf_styles-ie-css href/cdn-cgi/styles/cf.errors.ie.css />!endif-->style>body{margin:0;padding:0}/style>!--if gte IE 10>!-->script>  if (!navigator.cookieEnabled) {    window.addEventListener(DOMContentLoaded, function () {      var cookieEl  document.getElementById(cookie-alert);      cookieEl.style.display  block;    })  }/script>!--!endif-->/head>body>  div idcf-wrapper>    div classcf-alert cf-alert-error cf-cookie-error idcookie-alert data-translateenable_cookies>Please enable cookies./div>    div idcf-error-details classcf-error-details-wrapper>      div classcf-wrapper cf-header cf-error-overview>        h1 data-translateblock_headline>Sorry, you have been blocked/h1>        h2 classcf-subheadline>span data-translateunable_to_access>You are unable to access/span> softsoft.ru/h2>      /div>!-- /.header -->      div classcf-section cf-highlight>        div classcf-wrapper>          div classcf-screenshot-container cf-screenshot-full>                          span classcf-no-screenshot error>/span>                      /div>        /div>      /div>!-- /.captcha-container -->      div classcf-section cf-wrapper>        div classcf-columns two>          div classcf-column>            h2 data-translateblocked_why_headline>Why have I been blocked?/h2>            p data-translateblocked_why_detail>This website is using a security service to protect itself from online attacks. The action

Port 443

HTTP/1.1 403 ForbiddenDate: Wed, 26 Jun 2024 21:06:23 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Con

Subdomains

Date	Domain	IP
img.softsoft.ru	2013-04-01	216.137.33.125

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > softsoft.ru

Is this malicious?

Files that talk to softsoft.ru

DNS Resolutions

Port 80

Port 443

Subdomains