| mtctouch.org
|
ns3ghw.name.com => 163.114.217.17
ns4dmx.name.com => 163.114.217.49
ns2hjl.name.com => 163.114.216.49
ns1bcp.name.com => 163.114.216.17
|
(AS47846) SEDO |
Malicious domain |
2024-02-29
|
| istdream.com
|
ns2fgp.name.com => 163.114.216.49
ns4cpw.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
ns3cjl.name.com => 163.114.217.17
|
(AS47846) SEDO |
Malicious domain |
2024-02-29
|
| umamiportugal.com
|
ns2nsw.name.com => 163.114.216.49
ns4lrt.name.com => 163.114.217.49
ns3cqz.name.com => 163.114.217.17
ns1bcp.name.com => 163.114.216.17
|
(AS32613) IWEB |
Trojan Qakbot |
2023-05-10
|
| developement-server.com
|
ns3dgj.name.com => 163.114.217.17
ns2dfg.name.com => 163.114.216.49
ns1bcp.name.com => 163.114.216.17
ns4hmp.name.com => 163.114.217.49
|
(AS22612) NAMECHEAP-NET |
Trojan Qakbot |
2022-12-14
|
| ayaanuq.com
|
ns3dgj.name.com => 163.114.217.17
ns1bcp.name.com => 163.114.216.17
ns2dfg.name.com => 163.114.216.49
ns4hmp.name.com => 163.114.217.49
|
(AS22612) NAMECHEAP-NET |
Trojan Qakbot |
2022-11-18
|
| posycbd.com
|
ns2fkr.name.com => 163.114.216.49
ns3fqs.name.com => 163.114.217.17
ns4hmp.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
|
(AS47846) SEDO |
FormBook botnet controller |
2022-11-13
|
| ejoartikburada.live
|
ns4dls.name.com => 163.114.217.49
ns3ckl.name.com => 163.114.217.17
ns1bcp.name.com => 163.114.216.17
ns2hkt.name.com => 163.114.216.49
|
(AS8075) MICROSOFT-CORP---MSN-AS-BLOCK |
Alien botnet controller |
2022-06-05
|
| gitlabsupport.space
|
ns2nsy.name.com => 163.114.216.49
ns1bcp.name.com => 163.114.216.17
ns4hny.name.com => 163.114.217.49
ns3fhx.name.com => 163.114.217.17
|
(AS23884) PROENNET-AS |
Cobalt Strike botnet controller |
2022-05-15
|
| apps.cheapestdeals.org
|
ns2fgv.name.com => 163.114.216.49
ns1bcp.name.com => 163.114.216.17
ns3cgw.name.com => 163.114.217.17
ns4cfn.name.com => 163.114.217.49
|
(AS5089) NTL |
Trojan FluBot |
2022-05-04
|
| thehyperverse.net
|
ns4lny.name.com => 163.114.217.49
ns2bkr.name.com => 163.114.216.49
ns3qty.name.com => 163.114.217.17
ns1bcp.name.com => 163.114.216.17
|
() |
|
|
| farmagixion.net
|
ns4lny.name.com => 163.114.217.49
ns3fhx.name.com => 163.114.217.17
ns1bcp.name.com => 163.114.216.17
ns2hkt.name.com => 163.114.216.49
|
(AS36351) SOFTLAYER |
Phishing |
2021-11-22
|
| pilotmaterial.com
|
ns4hny.name.com => 163.114.217.49
ns3nrz.name.com => 163.114.217.17
ns1bcp.name.com => 163.114.216.17
ns2gtx.name.com => 163.114.216.49
|
(AS61317) ASDETUK |
Phishing |
2021-11-22
|
| appleid.com-icloud-my.com
|
ns3dty.name.com => 163.114.217.17
ns2gtx.name.com => 163.114.216.49
ns4bfy.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
|
(AS212913) TIMEHOST-AS, RU |
Phishing |
2021-10-31
|
| apple.com-icloud-my.com
|
ns3dty.name.com => 163.114.217.17
ns2gtx.name.com => 163.114.216.49
ns4bfy.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
|
(AS16509) AMAZON-02 |
Phishing |
2021-10-31
|
| appleid.com-icloud-me.com
|
ns3dty.name.com => 163.114.217.17
ns4bfy.name.com => 163.114.217.49
ns2gtx.name.com => 163.114.216.49
ns1bcp.name.com => 163.114.216.17
|
(AS212913) TIMEHOST-AS, RU |
Phishing |
2021-10-31
|
| checks-marktplaats.com
|
ns1bcp.name.com => 163.114.216.17
ns4kpx.name.com => 163.114.217.49
ns2fhn.name.com => 163.114.216.49
ns3bfm.name.com => 163.114.217.17
|
(AS22612) NAMECHEAP-NET |
Phishing |
2021-10-31
|
| http-icloud.com
|
ns1bcp.name.com => 163.114.216.17
ns2dqx.name.com => 163.114.216.49
ns4dls.name.com => 163.114.217.49
ns3jnr.name.com => 163.114.217.17
|
(AS47846) SEDO |
Phishing |
2021-10-31
|
| com-e4re2.support
|
ns3ghw.name.com => 163.114.217.17
ns2hjl.name.com => 163.114.216.49
ns4jpz.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
|
(AS31898) SPRY |
Phishing |
2021-10-31
|
| verify-information.systems
|
ns1bcp.name.com => 163.114.216.17
ns2dky.name.com => 163.114.216.49
ns4qxz.name.com => 163.114.217.49
ns3gmt.name.com => 163.114.217.17
|
(AS20473) CHOOPA |
Phishing |
2021-10-31
|
| app-verify-locked.systems
|
ns1bcp.name.com => 163.114.216.17
ns3gmt.name.com => 163.114.217.17
ns2dky.name.com => 163.114.216.49
ns4qxz.name.com => 163.114.217.49
|
(AS20473) CHOOPA |
Phishing |
2021-10-31
|
| cancel-google.com
|
ns4htz.name.com => 163.114.217.49
ns3fqs.name.com => 163.114.217.17
ns2fln.name.com => 163.114.216.49
ns1bcp.name.com => 163.114.216.17
|
(AS47846) SEDO |
Phishing |
2021-10-31
|
| erasegoogle.com
|
ns4htz.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
ns3fqs.name.com => 163.114.217.17
ns2fln.name.com => 163.114.216.49
|
(AS47846) SEDO |
Phishing |
2021-10-31
|
| t1.xofinity.com
|
ns2cvx.name.com => 163.114.216.49
ns4lpv.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
ns3cjl.name.com => 163.114.217.17
|
(AS60068) CDN77 |
NetBounce botnet controller |
2021-08-17
|
| 1736ad84-c205-46f3-8c22-e77036061a4a.certbooster.com
|
ns4lpv.name.com => 163.114.217.49
ns3cjl.name.com => 163.114.217.17
ns1bcp.name.com => 163.114.216.17
ns2cvx.name.com => 163.114.216.49
|
(AS60068) CDN77 |
NetBounce botnet controller |
2021-08-17
|
| httpss-icloud.com
|
ns4dls.name.com => 163.114.217.49
ns2dqx.name.com => 163.114.216.49
ns1bcp.name.com => 163.114.216.17
ns3jnr.name.com => 163.114.217.17
|
(AS47846) SEDO |
Phishing domain |
2021-07-14
|
| crypto-cloud.live
|
ns2lns.name.com => 163.114.216.49
ns3cjl.name.com => 163.114.217.17
ns4blx.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
|
(AS16342) TOYA |
Malicious domain |
2021-04-13
|
| thandiphotography.com
|
ns4cfn.name.com => 163.114.217.49
ns1bcp.name.com => 163.114.216.17
ns3cjl.name.com => 163.114.217.17
ns2cvx.name.com => 163.114.216.49
|
(AS132768) FIVENETWORK-AS-IN |
Malicious domain |
2021-04-13
|
| 8402d53c-17e9-4250-8011-20f28f5d404f.certbooster.com
|
ns1bcp.name.com => 163.114.216.17
ns2cvx.name.com => 163.114.216.49
ns3cjl.name.com => 163.114.217.17
ns4lpv.name.com => 163.114.217.49
|
(AS60068) CDN77 |
Trojan |
2021-03-25
|
| astyledesigner.com
|
ns1bcp.name.com => 163.114.216.17
ns2fln.name.com => 163.114.216.49
ns3ghw.name.com => 163.114.217.17
ns4sxy.name.com => 163.114.217.49
|
(AS46606) BLUEHOST |
Trojan Dridex |
2021-03-16
|
| dl.installcdn-aws.com
|
ns1bcp.name.com => 163.114.216.17
ns2cvx.name.com => 163.114.216.49
ns3cjl.name.com => 163.114.217.17
ns4lpv.name.com => 163.114.217.49
|
(AS60068) CDN77 |
Trojan ArkeiStealer |
2021-03-14
|
| secure.xemmex.com
|
ns1bcp.name.com => 163.114.216.17
ns2dhj.name.com => 163.114.216.49
ns3jwx.name.com => 163.114.217.17
ns4jnz.name.com => 163.114.217.49
|
(AS16276) OVH |
Trojan Dridex |
2020-11-25
|
| xaydungtiendung.com
|
ns1bcp.name.com => 162.88.61.47
ns2bkr.name.com => 162.88.60.47
ns3gnv.name.com => 162.88.61.49
ns4ksy.name.com => 162.88.60.49
|
(AS20473) CHOOPA |
Trojan Emotet |
2020-01-29
|
| lankamurasu.com
|
ns1bcp.name.com => 162.88.61.47
ns2fln.name.com => 162.88.60.47
ns3jkl.name.com => 162.88.61.49
ns4bfy.name.com => 162.88.60.49
|
(AS15169) GOOGLE |
Trojan JS |
2019-07-18
|
| files.fobito.com
|
ns1bcp.name.com => 162.88.61.47
ns2cvx.name.com => 162.88.60.47
ns3cjl.name.com => 162.88.61.49
ns4htz.name.com => 162.88.60.49
|
(AS43391) HOSTCINI |
Android malware |
2019-03-22
|
| 7uptheme.com
|
ns1bcp.name.com => 162.88.61.47
ns2bkr.name.com => 162.88.60.47
ns3cqz.name.com => 162.88.61.49
ns4dls.name.com => 162.88.60.49
|
(AS16276) OVH |
Exploit |
2019-03-17
|
| oxfordseniors.in
|
ns3cjl.name.com => 162.88.61.49
ns2cvx.name.com => 162.88.60.47
ns4cfn.name.com => 162.88.60.49
ns1bcp.name.com => 162.88.61.47
|
(AS58438) APNANET4-IN |
Trojan Emotet |
2018-10-18
|
| lms.oxfordseniors.in
|
ns3cjl.name.com => 162.88.61.49
ns2cvx.name.com => 162.88.60.47
ns4cfn.name.com => 162.88.60.49
ns1bcp.name.com => 162.88.61.47
|
(AS58438) APNANET4-IN |
Trojan Emotet |
2018-10-18
|
| sachindutta.com
|
ns1bcp.name.com => 162.88.61.47
ns2fgp.name.com => 162.88.60.47
ns3jnr.name.com => 162.88.61.49
ns4lqx.name.com => 162.88.60.49
|
(AS58640) NEXTRA-IN |
Trojan |
2018-07-15
|
| wiranggatech.com
|
ns1bcp.name.com => 162.88.61.47
ns2fln.name.com => 162.88.60.47
ns3fhx.name.com => 162.88.61.49
ns4fqz.name.com => 162.88.60.49
|
(AS33387) DATASHACK |
Trojan Ransom |
2018-05-17
|
| www.wiranggatech.com
|
ns1bcp.name.com => 162.88.61.47
ns2fln.name.com => 162.88.60.47
ns3fhx.name.com => 162.88.61.49
ns4fqz.name.com => 162.88.60.49
|
(AS33387) DATASHACK |
Trojan Ransom |
2018-05-14
|
| customcymbalnuts.com
|
ns1bcp.name.com => 162.88.61.47
ns2kry.name.com => 162.88.60.47
ns3npv.name.com => 162.88.61.49
ns4qxz.name.com => 162.88.60.49
|
(AS206564) PLUSLINE-SCRUB, |
Phishing |
2018-05-02
|
| endofdeath.com
|
ns1bcp.name.com => 108.168.138.45
ns2hjl.name.com => 98.124.246.1
ns3jkl.name.com => 98.124.246.2
ns4hny.name.com => 98.124.246.1
|
(AS26496) PAH-INC |
Compromised website |
2016-12-11
|
| andrewhy.de
|
ns1bcp.name.com => 108.168.138.45
ns2fgv.name.com => 98.124.246.1
ns3dgj.name.com => 98.124.246.2
ns4lrt.name.com => 98.124.246.1
|
(AS62567) DIGITALOCEAN-ASN-NY2 |
Compromised website |
2016-12-11
|
| kleidungaufdeutsch.de
|
ns1bcp.name.com => 108.168.138.45
ns2cqs.name.com => 98.124.246.1
ns3gnv.name.com => 98.124.246.2
ns4hny.name.com => 98.124.246.1
|
(AS20473) CHOOPA |
Trojan JS |
2016-10-24
|
| detikindonesia.com
|
ns1bcp.name.com => 108.168.138.45
ns2cqs.name.com => 98.124.246.1
ns3gnv.name.com => 98.124.246.2
ns4hny.name.com => 98.124.246.1
|
(AS20473) CHOOPA |
Trojan JS/HTML |
2016-10-24
|
| dev.hartis.org
|
ns1bcp.name.com => 162.88.61.47
ns3npv.name.com => 162.88.61.49
ns2lns.name.com => 162.88.60.47
ns4cpw.name.com => 162.88.60.49
ASPMX.L.GOOGLE.com => 74.125.133.27
|
(AS47583) HOSTING-MEDIA |
Trojan Ransom Locky |
2016-08-09
|
| biibo.com
|
ns1bcp.name.com => 108.168.138.45
ns2kry.name.com => 98.124.246.1
ns3gmv.name.com => 98.124.246.2
ns4htz.name.com => 98.124.217.1
|
(AS54290) HOSTWINDS |
Phishing |
2016-06-30
|
| mintmiles.com
|
ns1bcp.name.com => 108.168.138.45
ns2kry.name.com => 98.124.246.1
ns3gmv.name.com => 98.124.246.2
ns4htz.name.com => 98.124.217.1
|
(AS54290) HOSTWINDS |
Phishing |
2016-06-28
|
| mdosh.com
|
ns1bcp.name.com => 108.168.138.45
ns2kry.name.com => 98.124.246.1
ns3gmv.name.com => 98.124.246.2
ns4htz.name.com => 98.124.217.1
|
(AS54290) HOSTWINDS |
Phishing |
2016-06-28
|
| dgtlmktg.com
|
ns1bcp.name.com => 108.168.138.45
ns2kry.name.com => 98.124.246.1
ns3gmv.name.com => 98.124.246.2
ns4htz.name.com => 98.124.217.1
|
(AS54290) HOSTWINDS |
Phishing |
2016-06-28
|
