| chia.trffclb.com
|
ns1gmz.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
ns4fmx.name.com => 163.114.217.49
ns2jrt.name.com => 163.114.216.49
|
(AS32475) SINGLEHOP |
Leads to malware (ApateWeb) |
2024-06-03
|
| toad.trffclb.com
|
ns1gmz.name.com => 163.114.216.17
ns2jrt.name.com => 163.114.216.49
ns4fmx.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
|
(AS32475) SINGLEHOP |
ApateWeb malware campaign |
2024-05-24
|
| underlinerok.com
|
ns4cfn.name.com => 163.114.217.49
ns1bdg.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
ns2bkr.name.com => 163.114.216.49
|
(AS47846) SEDO |
Malicious domain |
2024-02-29
|
| fep.pr0gmatic.site
|
ns2dqx.name.com => 163.114.216.49
ns4dls.name.com => 163.114.217.49
ns1cvw.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
|
(AS36352) COLOCROSSING |
Malicious domain |
2024-02-29
|
| ert.pr0gmatic.site
|
ns4dls.name.com => 163.114.217.49
ns1cvw.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
ns2dqx.name.com => 163.114.216.49
|
(AS36352) COLOCROSSING |
Malicious domain |
2024-02-29
|
| get.pr0gmatic.site
|
ns2dqx.name.com => 163.114.216.49
ns1cvw.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
ns4dls.name.com => 163.114.217.49
|
(AS36352) COLOCROSSING |
Malicious domain |
2024-02-29
|
| capeflags.xyz
|
ns4cfn.name.com => 163.114.217.49
ns2bkr.name.com => 163.114.216.49
ns3dgr.name.com => 163.114.217.17
ns1bdg.name.com => 163.114.216.17
|
(AS47846) SEDO |
Malicious domain |
2024-02-29
|
| gum.pr0gmatic.site
|
ns4dls.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
ns2dqx.name.com => 163.114.216.49
ns1cvw.name.com => 163.114.216.17
|
(AS36352) COLOCROSSING |
Malicious domain |
2024-02-29
|
| weq.pr0gmatic.site
|
ns2dqx.name.com => 163.114.216.49
ns1cvw.name.com => 163.114.216.17
ns4dls.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
|
(AS36352) COLOCROSSING |
Malicious domain |
2024-02-29
|
| huq.pr0gmatic.site
|
ns2dqx.name.com => 163.114.216.49
ns1cvw.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
ns4dls.name.com => 163.114.217.49
|
(AS36352) COLOCROSSING |
Malicious domain |
2024-02-29
|
| dex.pr0gmatic.site
|
ns2dqx.name.com => 163.114.216.49
ns1cvw.name.com => 163.114.216.17
ns4dls.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
|
(AS36352) COLOCROSSING |
Phishing |
2024-02-29
|
| goatround.com
|
ns2bkr.name.com => 163.114.216.49
ns4cfn.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
ns1bdg.name.com => 163.114.216.17
|
(AS30277) DFW-DATACENTER, US |
Phishing |
2024-01-19
|
| dadiwarm.com
|
ns2fhn.name.com => 163.114.216.49
ns4dmx.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
ns1jsv.name.com => 163.114.216.17
|
(AS398019) DYNU, US |
Malicious domain |
2023-10-17
|
| atgcmstest.com
|
ns2hkt.name.com => 163.114.216.49
ns1jsv.name.com => 163.114.216.17
ns4hny.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
|
(AS212531) INTERNETO-VIZ |
Trojan Qakbot |
2022-11-18
|
| 1chat.activpl-pro.site
|
ns2dqx.name.com => 163.114.216.49
ns4dls.name.com => 163.114.217.49
ns1cvw.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
|
(AS16686)
EDNS |
Phishing |
2022-10-07
|
| 123.chattes.site
|
ns2dqx.name.com => 163.114.216.49
ns4blx.name.com => 163.114.217.49
ns1cvw.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
|
(AS47846) SEDO |
Phishing |
2022-10-03
|
| support-apple-id.systems
|
ns1cwy.name.com => 163.114.216.17
ns4bty.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
ns2cvx.name.com => 163.114.216.49
|
(AS8075) MICROSOFT-CORP---MSN-AS-BLOCK |
Phishing |
2022-05-11
|
| cerealinks.com
|
ns2nsw.name.com => 163.114.216.49
ns4cgs.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
ns1ksz.name.com => 163.114.216.17
|
(AS49392)
ASBAX |
Malicious ad |
2022-04-17
|
| d7-chase.com
|
ns3dgr.name.com => 163.114.217.17
ns2dky.name.com => 163.114.216.49
ns4lqx.name.com => 163.114.217.49
ns1bdg.name.com => 163.114.216.17
|
(AS36351) SOFTLAYER |
Phishing |
2021-11-22
|
| systemservices.network
|
ns1jsv.name.com => 163.114.216.17
ns2bls.name.com => 163.114.216.49
ns3dgr.name.com => 163.114.217.17
ns4fpy.name.com => 163.114.217.49
|
(AS132839) POWERLINE-AS-AP |
Cobalt Strike botnet controller |
2021-11-14
|
| microsoft.systemservices.network
|
ns1jsv.name.com => 163.114.216.17
ns2bls.name.com => 163.114.216.49
ns3dgr.name.com => 163.114.217.17
ns4fpy.name.com => 163.114.217.49
|
(AS132839) POWERLINE-AS-AP |
Cobalt Strike botnet controller |
2021-11-14
|
| d8-citi.com
|
ns1bdg.name.com => 163.114.216.17
ns2fln.name.com => 163.114.216.49
ns3dgr.name.com => 163.114.217.17
ns4hny.name.com => 163.114.217.49
|
(AS14061) DIGITALOCEAN-ASN |
Phishing |
2021-11-06
|
| updateyourcard.com
|
ns2glx.name.com => 163.114.216.49
ns1psw.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
ns4gvx.name.com => 163.114.217.49
|
(AS47846) SEDO |
Phishing |
2021-10-31
|
| findmy-device-info-ids-support-source.com
|
ns1dhq.name.com => 163.114.216.17
ns4jnz.name.com => 163.114.217.49
ns3dgr.name.com => 163.114.217.17
ns2dhj.name.com => 163.114.216.49
|
(AS36351) SOFTLAYER |
Phishing |
2021-10-18
|
| wallet-account-app.digital
|
ns3dgr.name.com => 163.114.217.17
ns4blx.name.com => 163.114.217.49
ns1fkl.name.com => 163.114.216.17
ns2btz.name.com => 163.114.216.49
|
(AS14061) DIGITALOCEAN-ASN |
Phishing |
2021-09-10
|
| wallet-account.digital
|
ns2btz.name.com => 163.114.216.49
ns4blx.name.com => 163.114.217.49
ns1fkl.name.com => 163.114.216.17
ns3dgr.name.com => 163.114.217.17
|
(AS14061) DIGITALOCEAN-ASN |
Phishing |
2021-08-18
|
| phumicloud.com
|
ns2nsw.name.com => 163.114.216.49
ns3dgr.name.com => 163.114.217.17
ns4fmw.name.com => 163.114.217.49
ns1dhl.name.com => 163.114.216.17
|
(AS47846) SEDO |
Phishing domain |
2021-07-14
|
| gogopayltd.com
|
ns1dnx.name.com => 162.88.61.47
ns2dqr.name.com => 162.88.60.47
ns3dgr.name.com => 162.88.61.49
ns4cgs.name.com => 162.88.60.49
|
(AS63949) LINODE-AP |
Trojan Emotet |
2020-01-29
|
| impressivecasino.com
|
ns1gmz.name.com => 162.88.61.47
ns2fgp.name.com => 162.88.60.47
ns3dgr.name.com => 162.88.61.49
ns4kpx.name.com => 162.88.60.49
|
(AS16276) OVH |
VirTool JS Obfuscator.HH |
2019-11-17
|
| arba7google.com
|
ns1hwy.name.com => 162.88.61.47
ns2nsw.name.com => 162.88.60.47
ns3dgr.name.com => 162.88.61.49
ns4fmx.name.com => 162.88.60.49
|
(AS15169) GOOGLE |
Trojan HTML |
2019-04-16
|
| www.arba7google.com
|
ns1hwy.name.com => 162.88.61.47
ns2nsw.name.com => 162.88.60.47
ns3dgr.name.com => 162.88.61.49
ns4fmx.name.com => 162.88.60.49
|
(AS15169) GOOGLE |
Trojan JS |
2019-04-13
|
| affordablephpdeveloper.com
|
ns1vwx.name.com => 162.88.61.47
ns2nsw.name.com => 162.88.60.47
ns3dgr.name.com => 162.88.61.49
ns4jnz.name.com => 162.88.60.49
|
(AS16276) OVH |
Exploit |
2019-03-17
|
| beautifulclothings.com
|
ns1fkl.name.com => 108.168.138.47
ns2dhj.name.com => 98.124.246.1
ns3dgr.name.com => 98.124.246.2
ns4lny.name.com => 98.124.246.1
|
(AS26496) PAH-INC |
Trojan JS/HTML |
2017-01-04
|
| ourprestonthomas.com
|
ns1mpz.name.com => 184.172.60.182
ns2cvx.name.com => 98.124.246.1
ns3dgr.name.com => 98.124.246.2
ns4fmx.name.com => 98.124.217.1
|
(AS13693) NTS-ONLINE |
Trojan JS |
2016-06-18
|
| xwhile.com
|
ns1kwy.name.com => 108.168.138.43
ns2clp.name.com => 98.124.246.1
ns3dgr.name.com => 98.124.246.2
ns4fqz.name.com => 98.124.217.1
|
(AS) |
Virus Virut domain (offline) |
2016-06-04
|
| luxury-bag.us
|
ns1cmt.name.com => 184.172.60.183
ns4dmx.name.com => 98.124.217.1
ns2hkt.name.com => 98.124.246.1
ns3dgr.name.com => 98.124.246.2
|
(AS57858) Inter Connects Inc |
Fraud / Scam (Counterfeit products) |
2015-04-22
|
| ciclocinemacatolico.com
|
ns1hwy.name.com => 108.168.138.41
ns2cqs.name.com => 98.124.246.1
ns3dgr.name.com => 98.124.246.2
ns4lny.name.com => 98.124.216.41
|
(AS33182) DIMENOC |
Trojan HTML |
2014-10-27
|
| equetystle.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| eatferorb.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| dresqsyslipk.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| crasehdipity.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| commwentsen.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| chrosniclete.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| chiraionco.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| authventress.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| astacfallen.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| ahanxkelo.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| advizcenten.in
|
ns3dgr.name.com => 98.124.246.2
ns1kwy.name.com => 108.168.138.43
ns4lqx.name.com => 174.129.224.134
ns2cqs.name.com => 98.124.246.1
|
(AS20738) WEBFUSION |
Spamvertized domain |
2014-10-23
|
| okcheapshoe.com
|
ns1cmt.name.com => 184.172.60.183
ns2clp.name.com => 5.153.6.192
ns3dgr.name.com => 208.43.122.42
ns4cgs.name.com => 184.72.222.219
|
(AS43289) TRABIA |
Fraud / Scam |
2013-02-14
|
| bolsos-handbags-outlet.info
|
ns2dqr.name.com => 5.153.6.194
ns3dgr.name.com => 208.43.122.42
ns4kpx.name.com => 184.72.223.143
ns1hnx.name.com => 184.172.63.120
|
(AS57858) Inter Connects Inc |
Fraud / Scam |
2013-02-13
|
