greshunka.com
Classification: Malicious
greshunka.com is a malicious hostname. Linked to Bazar, Brute Ratel C4 malware. Reported by 1 threat source, last seen 2024-10-03.
Current activity
- Offline — no longer resolving. Last online 2025-06-10 12:05:18.
MITRE ATT&CK associations
Malware families: BAZAR (S0534) BRUTE RATEL C4 (S1063)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Brute Ratel C4 | ThreatFox Abuse.ch | 2024-09-20 22:20:09 | 2024-10-03 20:17:13 | malicious-activity | S1063 Brute Ratel C4 |
| BazarBackdoor | ThreatFox Abuse.ch | 2024-09-20 22:20:09 | 2024-09-21 10:17:23 | malicious-activity | S0534 Bazar |
Tags
bazaloader beerbot kegtap team9backdoor bazarloader bruteratel boldbadgerIP addresses resolved by this hostname
- 92.118.112.130 (2024-09-23 08:47:20)
- 82.115.223.39 (2025-06-10 12:05:18)
Whois information
- AS name
- AS214927 PSB HOSTING LTD
- Domain
- greshunka.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- EXPIRED-NS1.NICEISP.COM, EXPIRED-NS2.NICEISP.COM
- Registrant
- NICENIC INTERNATIONAL GROUP CO., LIMITED
- City
- Amsterdam
- State
- KY
- Country
- NL — Netherlands 🇳🇱
- Contact email
- [email protected]
- Domain created
- 2024-08-27 07:12:44
- Domain expires
- 2025-08-27 07:12:44
- First indexed
- 2024-09-20 23:17:03
- Last updated
- 2025-10-22 15:04:52