Unreliable subdomains

This collection contains subdomains that are belonging to legit parent domains that are abused and used for non-legit purposes. Some examples are free web hosting sites or dynamic DNS services

Author
agomez
Created
2020-07-10 18:21:11
Last updated
2020-12-22 19:52:25
Downloads
1313250
Hostname indicators
739

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

harveyautos112.ddns.net Hostname

modified 2026-10-18 06:57:47
Remcos (ThreatFox Abuse.ch)

systemsupport.ddns.net Hostname

modified 2026-10-18 06:26:44
Citadel (Cybercrime-tracker.net)

syvqtyjsbsdzharvpimqdtmjwt-dot-gl099898987fhkl.uk.r.appspot.com Hostname

modified 2026-10-18 04:40:38
Phishing (Maltiverse) · Phishing (Mr.Looquer) · Proxy (IPWhois.io)

nfc.magtu.ru Hostname

modified 2026-10-18 04:40:35
Defacement (Zone-H)

rvkcctyyessnsmyy-dot-millinium.ey.r.appspot.com Hostname

modified 2026-10-18 04:40:34
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

001420990998183-dot-wetransfer-auth-file-342.appspot.com Hostname

modified 2026-10-18 04:40:29
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

bennicholas.hopto.org Hostname

modified 2026-10-18 04:40:28
nanocore,rat (Maltiverse) · Trojan.Injector (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis)

mailing-online-service-outlook.oa.r.appspot.com Hostname

modified 2026-10-18 04:40:28
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

o365apps.oa.r.appspot.com Hostname

modified 2026-10-18 04:40:26
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

8dw5g.codesandbox.io Hostname

modified 2026-10-18 04:40:23
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition) · Phishing Generic/Spear Phishing (Maltiverse)

perindag.slemankab.go.id Hostname

modified 2026-10-18 04:40:15
Defacement (Zone-H)

zyxznxyxlijouhgjltyostdgqb-dot-gleowayel400503.uc.r.appspot.com Hostname

modified 2026-10-18 04:40:11
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

favournwa.ddns.net Hostname

modified 2026-10-18 04:40:10
Remcos (ThreatFox Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

site288s.blogspot.com Hostname

modified 2026-10-18 04:39:55
Phishing (Maltiverse) · Social Engineering (Maltiverse) · Phishing (Mr.Looquer)

static.203.63.201.195.clients.your-server.de Hostname

modified 2026-10-18 04:39:42
Proxy (Mr.Looquer)

suntory.ddns.net Hostname

modified 2026-10-18 04:39:40
darkcomet,rat (Maltiverse)

loginuthorization-mailverification.weebly.com Hostname

modified 2026-10-18 04:39:40
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

tam-owa-savas.ue.r.appspot.com Hostname

modified 2026-10-18 04:39:38
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

jurnaleeccis.ub.ac.id Hostname

modified 2026-10-18 04:39:34
Defacement (Zone-H)

user849494949.el.r.appspot.com Hostname

modified 2026-10-18 04:39:31
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

service-updater.hopto.org Hostname

modified 2026-10-18 04:39:27
RATX (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

0fficeoutlookinvoice.ddns.net Hostname

modified 2026-10-18 04:39:12
Malicious Hostname (Cyber Threat Coalition)

working20.weebly.com Hostname

modified 2026-10-18 04:39:05
Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

betebet122.blogspot.com Hostname

modified 2026-10-18 04:38:57
Covid19 scam (Cyber Threat Coalition) · Phishing (Mr.Looquer) · Malicious Hostname (Cyber Threat Coalition) · Phishing (Phishtank)

hackerhost.ddns.net Hostname

modified 2026-10-18 04:38:51
njrat,rat (Maltiverse)

bienestarenmexicovocid-19.blogspot.com Hostname

modified 2026-10-18 04:38:49
Phishing site (Hybrid-Analysis) · Phishing (Phishtank) · Phishing (Mr.Looquer)

mlatikec.slemankab.go.id Hostname

modified 2026-10-18 04:38:48
Defacement (Zone-H)

server012754.nazwa.pl Hostname

modified 2026-10-18 04:38:39
Social Engineering (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

manofgod11.ddns.net Hostname

modified 2026-10-18 04:38:38
adwind,evasive,qrat,rat (Maltiverse)

skyjhagzdxgxrdgejycqamhkds-dot-gle39404049.rj.r.appspot.com Hostname

modified 2026-10-18 04:38:35
Phishing (Maltiverse) · Phishing (Mr.Looquer) · Phishing (Phishtank) · Proxy (IPWhois.io)

attnetwotrjjuconnetion.weebly.com Hostname

modified 2026-10-18 04:38:23
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

hgaexdozbdxdmlrhndccuyxaxt-dot-gl099898987fhkl.uk.r.appspot.com Hostname

modified 2026-10-18 04:38:23
Phishing (Maltiverse) · Phishing (Mr.Looquer) · Phishing (Phishtank)

warlord1.hopto.org Hostname

modified 2026-10-18 04:38:19
nanocore,rat (Maltiverse)

securecloudfiledownload1401892879.s3-website-eu-west-1.amazonaws.com Hostname

modified 2026-10-18 04:38:19
installcore,pua,pup (Maltiverse)

temp3.slemankab.go.id Hostname

modified 2026-10-18 04:38:18
Defacement (Zone-H)

psyahoo.weebly.com Hostname

modified 2026-10-18 04:38:18
Yahoo phishing (Antiphishing.com.ar) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

vmd64281.contaboserver.net Hostname

modified 2026-10-18 04:38:16
Proxy (Mr.Looquer)

njhost.hopto.org Hostname

modified 2026-10-18 04:38:15
NjRAT (ThreatFox Abuse.ch) · Gen:Variant.Razy (Hybrid-Analysis) · Gen:Variant.MSILPerseus (Hybrid-Analysis) · Generic.MSIL.Bladabindi (Hybrid-Analysis) · Trojan.Generic (Hybrid-Analysis)

fggffggfff.weebly.com Hostname

modified 2026-10-18 04:38:14
AT&T phishing (Antiphishing.com.ar) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

yahoomailmakesitaesier.weebly.com Hostname

modified 2026-10-18 04:38:01
Verizon Media phishing (Antiphishing.com.ar) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

plpapjybpqzxtkuq-dot-millinium.ey.r.appspot.com Hostname

modified 2026-10-18 04:37:57
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

configurationsintos.strikingly.com Hostname

modified 2026-10-18 04:37:54
Infomaniak phishing (Maltiverse)

dinpupkp.slemankab.go.id Hostname

modified 2026-10-18 04:37:48
Defacement (Zone-H)

static.219.146.90.157.clients.your-server.de Hostname

modified 2026-10-18 04:37:43
Proxy (Mr.Looquer)

pashattin.weebly.com Hostname

modified 2026-10-18 04:37:42
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

cprodx.weebly.com Hostname

modified 2026-10-18 04:37:41
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

rurik.at.ua Hostname

modified 2026-10-18 04:37:37
Malicious domain (SANS Internet Storm Center) · Inmortal malware domain (Malware Domains)

deamicisbolani.altervista.org Hostname

modified 2026-10-18 04:37:37
gozi,isfb,papras,ursnif (Maltiverse)

pqaxkffjrmnwgmem.tetete-app.ue.r.appspot.com Hostname

modified 2026-10-18 04:37:36
1&1 phishing (Antiphishing.com.ar) · Phishing (Maltiverse) · Covid19 scam (Cyber Threat Coalition) · Phishing (Phishtank) · 1 & 1 phishing (Antiphishing.com.ar)

static.43.47.69.159.clients.your-server.de Hostname

modified 2026-10-18 04:37:36
ICLoader.Gen8 (Hybrid-Analysis) · Packed.Kryptik (Hybrid-Analysis) · Kryptik.GJMT (Hybrid-Analysis) · Gen:Variant.Ursu (Hybrid-Analysis) · Kryptik.GJRB (Hybrid-Analysis)

36-227-162-47.dynamic-ip.hinet.net Hostname

modified 2026-10-18 04:37:31
Proxy (Mr.Looquer)

oajnz.app.link Hostname

modified 2026-10-18 04:37:24
Phishing (Mr.Looquer)

strongods.ddns.net Hostname

modified 2026-10-18 04:37:21
Nanocore RAT (ThreatFox Abuse.ch) · Backdoor.NanoCore (Hybrid-Analysis) · AIT:Trojan.Nymeria (Hybrid-Analysis) · Trojan.Mycop (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis)

elexbetgirisadresi.blogspot.com Hostname

modified 2026-10-18 04:37:12
Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

0wa2018webapp.editor.multiscreensite.com Hostname

modified 2026-10-18 04:37:12
Phishing (Phishtank) · Generic.Malware (Hybrid-Analysis) · Malicious domain (SANS Internet Storm Center)

yahoomailguidiance.weebly.com Hostname

modified 2026-10-18 04:37:05
Yahoo phishing (Antiphishing.com.ar) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

hj54sdasza.appspot.com Hostname

modified 2026-10-18 04:37:05
Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

owa-login-outlook-web.df.r.appspot.com Hostname

modified 2026-10-18 04:37:04
Covid19 scam (Cyber Threat Coalition) · Social Engineering (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

u10643200.ct.sendgrid.net Hostname

modified 2026-10-18 04:37:04
Malicious url (Maltiverse Research Team)

verifyattonlineprotect.weebly.com Hostname

modified 2026-10-18 04:36:58
AT&T phishing (Antiphishing.com.ar) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

ffsdfgfgas.weebly.com Hostname

modified 2026-10-18 04:36:56
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

rionstille.weebly.com Hostname

modified 2026-10-18 04:36:56
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

chmis.magtu.ru Hostname

modified 2026-10-18 04:36:53
Defacement (Zone-H)

seemynewsweetpic-match.weebly.com Hostname

modified 2026-10-18 04:36:42
Phishing (Phishtank)

hytresnow.weebly.com Hostname

modified 2026-10-18 04:36:42
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition) · Phishing AT&T Inc. (Maltiverse)

theifengingmen1986.blogspot.com Hostname

modified 2026-10-18 04:36:29
Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

agutukqxtrixbptwjvvcbatogajuhdkhwckb-dot-gl494903049.wl.r.appspot.com Hostname

modified 2026-10-18 04:36:25
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition) · Phishing Outlook (Maltiverse)

winli-sica.blogspot.com Hostname

modified 2026-10-18 04:36:20
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

gullio212y.ddns.net Hostname

modified 2026-10-18 04:36:14
Citadel (Cybercrime-tracker.net)

midos.hopto.org Hostname

modified 2026-10-18 04:36:14
Malicious domain (Telefonica Peru) · Covid19 scam (CCN-CERT)

page-loadingg.blogspot.com Hostname

modified 2026-10-18 04:36:09
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

1s2qvh91x.site.aplus.net Hostname

modified 2026-10-18 04:35:58
sality (Maltiverse) · Virus.Sality (Hybrid-Analysis)

vevobahisimgir.blogspot.com Hostname

modified 2026-10-18 04:35:45
Phishing Google (Phishtank) · Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Phishing (Mr.Looquer) · Malicious Hostname (Cyber Threat Coalition)

kingtools.no-ip.biz Hostname

modified 2026-10-18 04:35:36
Citadel (Cybercrime-tracker.net)

patricht.beget.tech Hostname

modified 2026-10-18 04:35:34
Apple phishing (Maltiverse) · Apple ID phishing (Maltiverse)

site129b.blogspot.com Hostname

modified 2026-10-18 04:35:27
Phishing (Mr.Looquer)

actiie844.coffeecup.com Hostname

modified 2026-10-18 04:35:23
Phishing (Phishtank)

preventcoronaviruses.blogspot.com Hostname

modified 2026-10-18 04:35:19
Covid19 scam (CCN-CERT)

pierrel2.beget.tech Hostname

modified 2026-10-18 04:35:19
Malicious domain (SANS Internet Storm Center)

ropufmkhjrmcyaakmhdbrbvrdukktpzzlghk-dot-cedar-code-289917.nn.r.appspot.com Hostname

modified 2026-10-18 04:35:16
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

online-coronavirus-268608.firebaseio.com Hostname

modified 2026-10-18 04:35:12
Covid19 scam (CCN-CERT)

fbrq2.codesandbox.io Hostname

modified 2026-10-18 04:35:11
Yahoo! phishing (Antiphishing.com.ar) · Phishing (Mr.Looquer) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

qbafy.app.link Hostname

modified 2026-10-18 04:35:09
Phishing (Maltiverse) · Phishing (Mr.Looquer)

5kg1f.codesandbox.io Hostname

modified 2026-10-18 04:35:06
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

axqjxieudijvqzjf-dot-owaonk399399393.uk.r.appspot.com Hostname

modified 2026-10-18 04:35:05
Phishing (Maltiverse) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition) · Phishing (Phishtank)

ronaldo10.no-ip.org Hostname

modified 2026-10-18 04:35:04
sinkhole ,worm (Maltiverse) · Botnet C&C (Microsoft)

d3iz6lralvg77g.cloudfront.net Hostname

modified 2026-10-18 04:35:00
Generic.Malware (Maltiverse Research Team) · Web (Mr.Looquer)

clnhjxdwkdcjesyxufzejeyvid-dot-gle39404049.rj.r.appspot.com Hostname

modified 2026-10-18 04:34:56
Generic.Malware (Hybrid-Analysis) · Phishing (Maltiverse) · Phishing (Mr.Looquer) · Phishing (Phishtank)

nikkhokkho.sourceforge.io Hostname

modified 2026-10-18 04:34:55
ransomware (Maltiverse) · Malware.Generic (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis)

4success.zapto.org Hostname

modified 2026-10-18 04:34:51
TA558 (Maltiverse) · Trojan.MSIL (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition) · Trojan.Autoit (Hybrid-Analysis)

attseracseas.weebly.com Hostname

modified 2026-10-18 04:34:48
Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

0c7506230b6ead557902be4f020d39c4-dot-dbenitonline.ey.r.appspot.com Hostname

modified 2026-10-18 04:34:46
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

jchfhygcnrfjntrvhretj.weebly.com Hostname

modified 2026-10-18 04:34:46
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

stitch-statichosting-prod.s3.amazonaws.com Hostname

modified 2026-10-18 04:34:43
Phishing (OpenPhish) · Phishing site (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Malicious url (Maltiverse Research Team) · Phishing (Maltiverse)

smartcloudfiles-2020.nw.r.appspot.com Hostname

modified 2026-10-18 04:34:33
Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

instagram-premium.herokuapp.com Hostname

modified 2026-10-18 04:34:27
Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

attcurrentlylogindomainsite.weebly.com Hostname

modified 2026-10-18 04:34:27
AT&T phishing (Antiphishing.com.ar) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

atte-xinon.weebly.com Hostname

modified 2026-10-18 04:34:25
Phishing (Phishtank) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

u15526396.ct.sendgrid.net Hostname

modified 2026-10-18 04:34:17
Covid19 scam (CCN-CERT)

pxrnblpajwxjmhjukfkfkrwaww-dot-gle39404049.rj.r.appspot.com Hostname

modified 2026-10-18 04:34:15
Phishing (Maltiverse) · Phishing (Mr.Looquer) · Phishing (Phishtank) · Proxy (IPWhois.io)