answerforest.net
Classification: Malicious
answerforest.net is a malicious hostname. Reported by 2 threat sources, last seen 2020-02-18. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2025-02-16 09:58:27.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Suppobox | Bambernek | 2020-02-18 06:57:36 | 2020-02-18 06:57:36 | ||
| Pizd | Bambernek | 2020-02-16 07:11:30 | 2020-02-16 07:11:30 | ||
| suppobox | Maltiverse Research Team | 2019-01-27 01:31:18 | 2019-01-27 01:31:18 |
Tags
c&c c2 dga malware pizd suppoboxIP addresses resolved by this hostname
- 198.54.117.197 (2020-02-18 06:57:36)
- 198.54.117.200 (2020-02-18 06:57:36)
- 198.54.117.199 (2020-02-18 06:57:36)
- 198.54.117.198 (2020-02-18 06:57:36)
- 208.100.26.251 (2019-01-27 01:04:57)
Whois information
- AS name
- AS22612 Namecheap, Inc.
- Domain
- answerforest.net
- TLD
- net
- First indexed
- 2019-01-27 01:04:57
- Last updated
- 2025-02-16 10:49:22