ko-racingshop.com
Classification: Malicious
ko-racingshop.com is a malicious hostname. Linked to Emotet malware. 3 sightings from Abuse.ch and Hybrid-Analysis (VBA:Logan.909), last seen 2020-12-23.
Current activity
- Online — resolving/reachable. Last checked 2026-11-06 16:34:50.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-30 01:37:13 | 2025-05-11 15:29:59 | benign | |
| Emotet | Abuse.ch | 2020-12-22 07:15:52 | 2020-12-23 01:51:19 | malicious-activity | S0367 Emotet |
| VBA:Logan.909 | Hybrid-Analysis | 2020-12-22 09:45:37 | 2020-12-22 11:46:33 |
Tags
emotetIP addresses resolved by this hostname
- 210.1.60.67 (2020-12-23 01:51:19)
- 94.237.64.192 (2026-11-06 16:34:50)
Whois information
- AS name
- AS9891 CS LOXINFO Public Company Limited.
- Domain
- ko-racingshop.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS33.1BAHT.NET, NS34.1BAHT.NET
- Registrant
- GoDaddy.com, LLC
- Contact email
- [email protected]
- Domain created
- 2020-01-18 11:58:11
- Domain expires
- 2029-01-18 11:58:11
- First indexed
- 2020-12-22 07:15:52
- Last updated
- 2026-11-06 16:34:50