jcswcd.com
Classification: Malicious
jcswcd.com is a malicious hostname. Linked to Mustang Panda activity. Reported by 2 threat sources, last seen 2023-07-05.
Current activity
- Offline — no longer resolving. Last online 2024-04-17 12:34:53.
MITRE ATT&CK associations
Intrusion sets: MUSTANG PANDA (G0129)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ta428 | Maltiverse | 2023-07-04 04:29:44 | 2023-07-05 20:51:16 | malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-07-05 16:45:04 | 2023-07-05 16:45:04 | ||
| Generic.Malware | Maltiverse | 2023-07-05 11:14:02 | 2023-07-05 11:14:02 | G0129 Mustang Panda |
Tags
apt malwareIP addresses resolved by this hostname
- 91.195.240.12 (2024-04-17 12:34:53)
- 82.117.255.81 (2024-03-14 08:15:37)
Whois information
- AS name
- AS34248 VELTON.TELECOM Ltd
- Domain
- jcswcd.com
- TLD
- com
- DNSSEC
- ['unsigned, unSigned']
- Nameservers
- NS1HWY.NAME.COM, NS2GLX.NAME.COM, NS3HJX.NAME.COM, NS4FPY.NAME.COM, ns1hwy.name.com, ns2glx.name.com, ns3hjx.name.com, ns4fpy.name.com
- Registrant
- Name.com, Inc.
- Address
- PO Box 1769
- City
- Denver
- State
- CO
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- Domain created
- 2024-12-05 01:18:33
- Domain expires
- 2026-12-05 01:18:33
- First indexed
- 2023-07-05 11:14:02
- Last updated
- 2025-12-18 06:15:55