gravsatrisd.com
Classification: Malicious
gravsatrisd.com is a malicious hostname. Linked to Icedid malware. Reported by ThreatFox Abuse.ch, last seen 2023-01-12. Resolves to 209.54.96.24 and 2 more.
Current activity
- Offline — no longer resolving. Last online 2023-02-03 12:39:34.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| IcedID | ThreatFox Abuse.ch | 2023-01-10 21:55:00 | 2023-01-12 21:18:33 | malicious-activity | S0483 IcedID |
Tags
bokbot iceidIP addresses resolved by this hostname
- 209.54.96.24 (2023-01-11 07:17:49)
- 91.238.50.114 (2023-01-24 11:09:44)
- 0.0.0.0 (2023-02-03 12:39:34)
Whois information
- Domain
- gravsatrisd.com
- TLD
- com
- First indexed
- 2023-01-11 07:17:49
- Last updated
- 2026-10-02 20:07:12