contirecovery.info
Classification: Suspicious
contirecovery.info is a suspicious hostname. Linked to Darkcomet malware. Reported by 2 threat sources, last seen 2023-06-17.
Current activity
- Offline — no longer resolving. Last online 2023-06-17 08:45:04.
MITRE ATT&CK associations
Malware families: DARKCOMET (S0575)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious URL | Hybrid-Analysis | 2023-06-17 08:45:04 | 2023-06-17 08:45:04 | ||
| Conti | ThreatFox Abuse.ch | 2023-04-25 19:17:40 | 2023-04-25 19:17:40 | malicious-activity | S0575 DarkComet |
Tags
conti ransomwareIP addresses resolved by this hostname
- 207.244.67.214 (2023-04-25 19:17:40)
Whois information
- AS name
- AS30633 Leaseweb USA, Inc.
- Domain
- contirecovery.info
- TLD
- info
- First indexed
- 2023-04-25 19:17:40
- Last updated
- 2026-03-20 13:27:50