fishenddog.xyz
Classification: Malicious
fishenddog.xyz is a malicious hostname. Linked to Ursnif malware. 2 sightings from ThreatFox Abuse.ch (Gozi, RM3), last seen 2023-09-27.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 20:34:25.
MITRE ATT&CK associations
Malware families: URSNIF (S0386)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 11:11:36 | 2025-05-11 16:01:39 | benign | |
| Gozi | ThreatFox Abuse.ch | 2023-09-27 22:19:06 | 2023-09-27 22:19:06 | malicious-activity | S0386 Ursnif |
| RM3 | ThreatFox Abuse.ch | 2022-08-31 11:09:58 | 2022-09-02 10:18:54 | malicious-activity |
Tags
c2 gozi historicalandnew rat crm gozi crm papras snifula ursnif rm3IP addresses resolved by this hostname
- 188.119.112.104 (2023-07-28 11:17:49)
- 172.233.218.191 (2023-09-11 21:56:48)
- 172.232.30.16 (2023-09-13 22:42:32)
- 172.232.4.89 (2023-09-14 04:27:02)
- 172.232.25.17 (2023-09-17 22:41:09)
- 199.59.243.224 (2023-09-23 19:49:39)
- 172.234.26.236 (2023-09-24 12:35:56)
- 2600:1900:4001:96e:8000:1:e42d:7e72 (2026-10-17 20:34:25)
- 34.41.139.193 (2026-10-17 20:34:25)
Whois information
- Domain
- fishenddog.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.HWRN.NET, NS2.HWRN.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2025-10-30 10:27:54
- Domain expires
- 2026-10-30 23:59:59
- First indexed
- 2022-08-31 11:18:37
- Last updated
- 2026-10-17 20:34:25