bam.nr-data.net

Classification: Whitelisted

bam.nr-data.net is a whitelisted (trusted) hostname listed by Cisco Umbrella, Maltiverse Research Team. 56 sightings, last seen 2026-09-09.

Current activity

  • Online — resolving/reachable. Last checked 2026-10-17 10:09:18.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Compromised verdict Maltiverse 2026-09-09 10:33:13 2026-09-09 10:33:13 compromised
Top Popularity Site Cisco Umbrella 2022-07-18 20:31:32 2026-09-09 10:33:13 benign
Safe Site Cisco Umbrella 2022-07-14 23:25:15 2022-07-16 01:15:23 benign
Malware Hybrid-Analysis 2019-10-04 11:00:42 2022-01-19 19:30:12
Phishing site Hybrid-Analysis 2018-05-29 01:30:40 2022-01-18 17:45:40
Malicious site Hybrid-Analysis 2018-05-30 15:01:13 2022-01-16 15:30:10
Malware site Hybrid-Analysis 2018-05-29 02:00:17 2022-01-03 20:30:33
Alexa Top 1 Million Maltiverse Research Team 2021-09-21 14:35:17 2021-09-21 14:35:17
Trojan.Meterpreter Hybrid-Analysis 2021-06-19 10:30:44 2021-06-19 10:30:44
Generic.Malware Hybrid-Analysis 2018-05-17 18:45:12 2021-05-01 13:16:46
Phish Hybrid-Analysis 2021-03-26 17:15:27 2021-03-26 17:15:27
Probably Heur.HTMLRefreshScript Hybrid-Analysis 2021-03-17 14:45:38 2021-03-18 03:30:15
Trojan.Html.Phishing Hybrid-Analysis 2021-03-15 15:45:53 2021-03-15 15:45:53
Trojan.HTML.Fraud Hybrid-Analysis 2020-10-28 08:45:05 2020-10-28 08:45:05
Trojan.Generic Hybrid-Analysis 2019-12-04 18:45:22 2020-10-04 05:45:15
Application.DriverReviver Hybrid-Analysis 2019-12-26 20:30:15 2020-07-28 19:00:29
Other:Malware Hybrid-Analysis 2020-07-07 22:15:22 2020-07-07 22:15:22
TrojanDropper.Agent Hybrid-Analysis 2020-06-27 01:15:13 2020-06-27 01:15:13
DriverReviver.A potentially unwanted Hybrid-Analysis 2020-02-08 06:00:28 2020-06-19 00:30:38
JS:Trojan.Cryxos Hybrid-Analysis 2018-08-23 21:45:16 2020-05-22 15:00:09
Program.Unwanted Hybrid-Analysis 2020-04-22 09:45:24 2020-05-21 21:15:44
HW32.Packed Hybrid-Analysis 2020-05-08 17:30:21 2020-05-08 17:30:21
Application.Agent Hybrid-Analysis 2020-03-13 08:30:16 2020-05-04 01:45:40
PUA.Avanquest Hybrid-Analysis 2020-04-25 22:45:06 2020-04-25 22:45:06
DFI Hybrid-Analysis 2020-04-17 17:32:43 2020-04-24 20:16:25
Phish.AB38 Hybrid-Analysis 2020-04-21 01:45:25 2020-04-21 01:45:25
SlimWare.E.gen Hybrid-Analysis 2020-04-07 10:15:24 2020-04-07 10:15:24
Trojan.Inject Hybrid-Analysis 2020-03-14 05:45:22 2020-03-14 05:45:22
Trojan.Gasti Hybrid-Analysis 2020-03-06 16:45:11 2020-03-06 16:45:11
Slimware.A potentially unwanted Hybrid-Analysis 2020-02-18 21:30:35 2020-02-18 21:30:35
Adware.Agent Hybrid-Analysis 2020-02-14 18:30:17 2020-02-14 18:30:17
WebCompanion.B potentially unwanted Hybrid-Analysis 2020-02-14 17:30:10 2020-02-14 17:30:10
Gen:Variant.Razy Hybrid-Analysis 2020-02-14 00:30:29 2020-02-14 00:30:29
Gen:Variant.Application.AdLoad Hybrid-Analysis 2019-05-17 06:45:09 2020-01-31 06:45:08
Slimware.a Hybrid-Analysis 2020-01-12 01:45:08 2020-01-12 01:45:08
BScope.Trojan Hybrid-Analysis 2019-12-23 04:17:07 2019-12-23 04:17:07
Malicious domain SANS Internet Storm Center 2019-12-22 02:27:47 2019-12-22 02:27:47
Trojan.Ransom.Phobos Hybrid-Analysis 2019-12-02 13:45:14 2019-12-02 13:45:14
HEUR:Trojan.BAT Hybrid-Analysis 2019-11-24 11:30:07 2019-11-24 11:30:07
Application.Clenonta Hybrid-Analysis 2019-11-13 13:17:08 2019-11-13 13:17:08
PC Decrapifier Hybrid-Analysis 2019-10-16 08:00:07 2019-10-16 08:00:07
Artemis Hybrid-Analysis 2019-10-07 13:17:12 2019-10-07 13:17:12
Adware Hybrid-Analysis 2018-05-04 16:15:10 2019-10-06 12:15:13
MemScan:Trojan.PWS.Delf Hybrid-Analysis 2019-09-01 19:00:04 2019-09-01 19:00:04
Agent.OCJ Hybrid-Analysis 2019-05-31 13:30:53 2019-05-31 13:30:53
Application.Bundler.iStartSurf Hybrid-Analysis 2019-04-07 04:00:05 2019-04-07 04:00:05
AdwareSig [Adw] Hybrid-Analysis 2019-04-01 18:30:30 2019-04-01 18:30:30
JS.eIframeHlNMe Hybrid-Analysis 2019-03-12 13:16:05 2019-03-12 13:16:05
Heuristic Hybrid-Analysis 2019-01-28 14:00:10 2019-01-28 14:00:10
Trojan.JS.Agent.JS Hybrid-Analysis 2018-10-23 05:15:11 2018-10-23 05:15:11
Soft32Downloader Hybrid-Analysis 2018-05-04 16:00:16 2018-05-04 16:00:16
Trojan.MSIL Hybrid-Analysis 2018-04-29 12:30:25 2018-04-29 12:30:25
Downloader.CertutilURLCache Hybrid-Analysis 2018-04-18 20:00:27 2018-04-18 20:00:27
PUA.Reg1staid Hybrid-Analysis 2018-04-07 10:26:36 2018-04-07 10:26:36
ransomware Maltiverse 2018-03-21 21:40:29 2018-03-21 21:40:29
apt Maltiverse 2018-03-13 11:15:55 2018-03-13 11:15:55
evasive Maltiverse 2018-01-01 04:08:05 2018-01-01 04:08:05
backdoor Maltiverse 2017-10-25 18:46:02 2017-10-25 18:46:02
backdoor,coinminer,miner Maltiverse 2017-10-17 15:34:44 2017-10-17 15:34:44

Tags

backdoor coinminer miner apt ransomware

IP addresses resolved by this hostname

Whois information

AS name
AS23467 New Relic
Domain
nr-data.net
TLD
net
DNSSEC
['signedDelegation, unsigned']
Nameservers
DNS1.P07.NSONE.NET, DNS2.P07.NSONE.NET, DNS3.P07.NSONE.NET, DNS4.P07.NSONE.NET, NS01.NR-DNS.NET, NS02.NR-DNS.NET, NS03.NR-DNS.NET, NS04.NR-DNS.NET, dns1.p07.nsone.net, dns2.p07.nsone.net, dns3.p07.nsone.net, dns4.p07.nsone.net, ns01.nr-dns.net, ns02.nr-dns.net, ns03.nr-dns.net, ns04.nr-dns.net, NS1.P29.DYNECT.NET, NS2.P29.DYNECT.NET, NS3.P29.DYNECT.NET, ns1.p29.dynect.net, ns2.p29.dynect.net, ns3.p29.dynect.net
Whois server
whois.Rebel.com
Registrant
Safenames Ltd
Address
Data protected, not disclosed
City
Data protected, not disclosed
State
Data protected, not disclosed
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected], [email protected], [email protected], [email protected]
Domain created
2014-04-11 23:51:36
Domain expires
2027-04-11 23:51:36
First indexed
2017-10-17 15:34:44
Last updated
2026-10-17 10:09:19