Is counterreaction.net safe?

The scan of counterreaction.net on 20 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with counterreaction.net?

14 analysed samples communicate with this URL, including Phishing.

How was counterreaction.net checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

counterreaction.net - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned counterreaction.net and returned a unknown verdict (score 0). The page resolved to 162.241.252.59 on Unified Layer in US. The domain was registered 4843 days ago through Bluehost Inc.. 1 domain and 1 IP were contacted. 14 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 0) · Confidence 0%
Scanned URL: http://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/160bbda9b6876f---mosuxirarolozagilu.pdf
Domain: counterreaction.net · IP: 162.241.252.59 · AS46606 · US
Server: Apache
Page title: 404 Not Found
HTTP status: 404 · text/html; charset=iso-8859-1
Registrar: Bluehost Inc. · domain age 4843 days · created 2013-05-17
Scan tier: fast · observed 2026-08-20 18:11:36 UTC

Redirect chain

http://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/160bbda9b6876f---mosuxirarolozagilu.pdf
https://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/160bbda9b6876f---mosuxirarolozagilu.pdf

Malware communicating with this URL (14)

These samples were observed contacting or being served from counterreaction.net. Each links to its full analysis.

Phishing - referenced · 6e2a8368fa3af28309c549f8d23d70f5 · first seen 2026-08-20
Phishing - referenced · b3b31b9e853fb84450504c7ce9d905ed · first seen 2026-08-19
Phishing - referenced · f011811c23f2ce0bf14835d481132e6f · first seen 2026-08-17
Phishing - referenced · 454b454485c61011ba53bec272b40d28 · first seen 2026-08-17
Phishing - referenced · afba426ea96135d9ced9301b611a6d09 · first seen 2026-08-16
Phishing - referenced · 4e65bc4b98714b135921c032c643bfc6 · first seen 2026-08-15
Phishing - referenced · a54fde2b78b7d67ca67ff4f69e382579 · first seen 2026-08-15
Phishing - referenced · caca7b231c549943a7393cd7dbe46ad5 · first seen 2026-08-15
Phishing - referenced · 1bdc574cd9bbd864d0353453c51a2a5d · first seen 2026-08-15
Phishing - referenced · f3cdcb12217431d099ea8d9934639621 · first seen 2026-08-15
Phishing - referenced · 6f085ef1b8a83ea0edd80bb926ef566a · first seen 2026-08-13
Phishing - referenced · 170d9b28f1974855ffb1fc01e76cf77e · first seen 2026-08-13
Phishing - referenced · 3704f6ff9e2472a28baa8314f3573e56 · first seen 2026-08-12
Phishing - referenced · 2368969d7190978d82a7eae692fd58c0 · first seen 2026-08-12

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Detected technologies

Apache

Contacted infrastructure

162.241.252.59 - AS46606 Unified Layer (United States)

Observed indicators

counterreaction.net
162.241.252.59
https://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/160bbda9b6876f---mosuxirarolozagilu.pdf

Other scans of counterreaction.net (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - unknown · https://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/1614669f84
15 Aug 2026 - unknown · https://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/16143b68bb

Questions about counterreaction.net

Is counterreaction.net safe?: The scan of counterreaction.net on 20 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with counterreaction.net?: 14 analysed samples communicate with this URL, including Phishing.
How was counterreaction.net checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of counterreaction.net

Scanned on MalwareAnalyzer by Cyble · Open interactive scan