| click.redsaltco.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS32475) SINGLEHOP |
ApateWeb malware campaign (Redirects to malware) |
2024-06-03
|
| ms.redsaltco.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS32475) SINGLEHOP |
Leads to malware (ApateWeb) |
2024-06-03
|
| redsaltco.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS24560) AIRTELBROADBAND-AS-AP |
Leads to malware (ApateWeb) |
2024-06-03
|
| bty667.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS16509) AMAZON-02 |
Fake Casino |
2024-03-03
|
| bty663.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS16509) AMAZON-02 |
Fake Casino |
2024-03-03
|
| cryptovip.vip
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-03
|
| mail.usa-sprouts.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-02
|
| webmail.usa-sprouts.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-02
|
| cpanel.usa-sprouts.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-02
|
| facebook.robe.de.mariee.serveo.net
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS14061) DIGITALOCEAN-ASN |
Malicious domain |
2024-03-03
|
| forexfactory.ltd
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS26496) PAH-INC |
Malicious domain |
2024-03-03
|
| webmail.albaitalsagheernursery.com.fpb.xxa.temporary.site
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-03
|
| hvcn4e5ahgdy98.shop
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS18450) WEBNX |
Malicious domain |
2024-03-02
|
| daili.alibabasc.xyz
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS64050)
BCPL-SG |
Malicious domain |
2024-03-02
|
| chat.elinkwell.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-02
|
| chat.366gpt.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-02
|
| cpanel.otgcoffeeco.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-02
|
| yyq9.xyz
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-02
|
| g0nw.xyz
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-02
|
| mbkbooking.live
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS138915) KAOPU-HK Kaopu Cloud HK Limited, HK |
Malicious domain |
2024-03-02
|
| sally-shop.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS45102) CNNIC-ALIBABA-CN-NET-AP |
Malicious domain |
2024-03-02
|
| mme0.xyz
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-02
|
| demo.store.shop.new.cdn.secure.gitlab.demo.img.castellana.mystorelty.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS13335) CLOUDFLARENET |
Malicious domain |
2024-03-02
|
| wiki.store.shop.new.cdn.secure.gitlab.demo.img.castellana.mystorelty.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS13335) CLOUDFLARENET |
Malicious domain |
2024-03-02
|
| docs.cloud.uk.hfusupportcentre.cmap.new.dashboard.secure.en.api.img.castellana.mystorelty.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS13335) CLOUDFLARENET |
Malicious domain |
2024-03-02
|
| wwe8.xyz
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-02
|
| zillex11.vip
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS64050)
BCPL-SG |
Malicious domain |
2024-03-02
|
| staging.store.shop.gitlab.docs.staging.ns.auth.lilo.xlog.page
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
() |
|
|
| cpcontacts.loshelechoslodge.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS398101) GO-DADDY-COM-LLC, US |
Malicious domain |
2024-02-29
|
| cpanel.loshelechoslodge.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS398101) GO-DADDY-COM-LLC, US |
Malicious domain |
2024-02-29
|
| flyingtigerbusiness.top
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS13335) CLOUDFLARENET |
Malicious domain |
2024-03-01
|
| mail.cjglobalgroupinc.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
| cpcontacts.cjglobalgroupinc.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
| cpanel.cjglobalgroupinc.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
| cpanel.thebighaas.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
| imkn.shop
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS147008) DIANJIANG-AS-AP |
Malicious domain |
2024-03-01
|
| coinexiss.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS30148) SUCURI-SEC |
Malicious domain |
2024-03-01
|
| cpanel.lskdsingapore.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS26496) PAH-INC |
Malicious domain |
2024-03-01
|
| webmail.dynamicsfitnesspros.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS213058) PIHL-AS, RU |
Malicious domain |
2024-03-01
|
| cpanel.dynamicsfitnesspros.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS213058) PIHL-AS, RU |
Malicious domain |
2024-03-01
|
| cpcontacts.zmnatural.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS49581) FERDINANDZ |
Malicious domain |
2024-03-01
|
| cpanel.zmnatural.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS49581) FERDINANDZ |
Malicious domain |
2024-03-01
|
| cpanel.bulaba.in
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS26496) PAH-INC |
Malicious domain |
2024-03-01
|
| modloftoutlet.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS13335) CLOUDFLARENET |
Malicious domain |
2024-03-01
|
| cpanel.architectmilton.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
| rangerups.com
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS16509) AMAZON-02 |
Malicious domain |
2024-03-01
|
| cpcontacts.architectmilton.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
| careerfinder.essentialhospitals.org
|
ns03.domaincontrol.com => 97.74.101.2
ns04.domaincontrol.com => 173.201.69.2
|
(AS14618) AMAZON |
Malicious domain |
2024-03-01
|
| mail.architectmilton.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
| mail.elizamac.com
|
ns04.domaincontrol.com => 173.201.69.2
ns03.domaincontrol.com => 97.74.101.2
|
(AS19871) MONST-1 |
Malicious domain |
2024-03-01
|
