hivamusic.ir
Classification: Malicious
hivamusic.ir is a malicious hostname. Linked to Pony malware. Reported by 3 threat sources (Malicious URL), last seen 2026-02-05. Seen in PA.
Current activity
- Online — resolving/reachable. Last checked 2026-11-06 01:47:55.
MITRE ATT&CK associations
Malware families: PONY (S0453)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in PA, across retail networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Pony | Maltiverse Threat Observatory | 2026-02-05 12:01:05 | 2026-02-05 12:01:05 | country_code:pa industry:retail-and-hospitality | S0453 Pony |
| Pony | ThreatFox Abuse.ch | 2024-06-06 06:18:44 | 2024-06-06 06:18:44 | malicious-activity | S0453 Pony |
| Malicious URL | Hybrid-Analysis | 2023-12-10 06:15:04 | 2023-12-10 06:15:04 | ||
| Alexa Top 1 Million | Alexa | 2021-02-09 19:32:16 | 2021-06-20 14:09:47 | benign |
Tags
c2 fareit pony siplogIP addresses resolved by this hostname
- 185.208.173.3 (2023-12-10 06:15:05)
- 195.248.240.20 (2021-02-09 19:32:16)
- 162.55.111.111 (2021-06-20 14:09:47)
- 148.251.66.186 (2025-01-16 12:06:00)
- 46.165.200.149 (2025-12-23 06:00:19)
- 194.5.205.183 (2026-11-06 01:47:55)
Whois information
- Domain
- hivamusic.ir
- TLD
- ir
- First indexed
- 2021-02-09 19:32:16
- Last updated
- 2026-11-06 01:47:58