booktook.sa.com
Classification: Malicious
booktook.sa.com is a malicious hostname. Linked to Quasarrat malware. Reported by ThreatFox Abuse.ch (Quasar RAT), last seen 2026-09-14.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:39:50.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QUASARRAT (S0262)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Quasar RAT | ThreatFox Abuse.ch | 2026-09-14 13:58:38 | 2026-09-14 13:58:38 | botnet malicious-activity | S0262 QuasarRAT |
Tags
quasar cinarat quasarrat yggdrasilIP addresses resolved by this hostname
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-09-15 16:30:54)
- 2606:4700:3033::6815:4b55 (2026-09-16 20:31:27)
- 172.64.80.1 (2026-09-16 20:31:27)
- 2606:4700:3037::ac43:d996 (2026-09-16 20:31:27)
- 2600:1901:0:51b9:: (2026-10-18 04:39:50)
- 34.76.205.124 (2026-10-18 04:39:50)
Whois information
- Domain
- sa.com
- TLD
- com
- First indexed
- 2026-09-14 14:25:04
- Last updated
- 2026-10-18 04:39:50