escort.in.ua
Classification: Malicious
escort.in.ua is a malicious hostname. Linked to Pony malware. Reported by 3 threat sources, last seen 2023-07-14.
Current activity
- Online — resolving/reachable. Last checked 2026-09-21 08:32:07.
MITRE ATT&CK associations
Malware families: PONY (S0453)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Pony | ThreatFox Abuse.ch | 2023-07-14 18:17:05 | 2023-07-14 18:17:05 | malicious-activity | S0453 Pony |
| Pony | Cybercrime-tracker.net | 2018-03-19 08:32:41 | 2022-12-28 07:49:25 | malicious-activity | S0453 Pony |
| Botnet | Mr.Looquer | 2021-01-14 08:22:29 | 2021-03-04 15:21:00 |
Tags
pony siplog fareit malware c&cIP addresses resolved by this hostname
- 104.28.8.181 (2018-03-19 08:32:41)
- 104.28.9.181 (2018-03-19 08:32:41)
- 91.194.251.190 (2023-07-25 22:06:13)
- 91.231.86.6 (2026-09-21 08:32:07)
Whois information
- AS name
- AS13335 CloudFlare
- Domain
- escort.in.ua
- TLD
- in.ua
- Registrant
- ua.ukrnames
- Contact email
- [email protected]
- First indexed
- 2018-03-19 08:32:41
- Last updated
- 2026-09-21 08:32:07