lawfirm.paperbirdtech.com
Classification: Suspicious
lawfirm.paperbirdtech.com is a suspicious hostname. Linked to Hancitor malware. Reported by Threat Observatory and Maltiverse, last seen 2026-09-28.
Current activity
- Online — resolving/reachable. Last checked 2026-09-28 03:02:14.
MITRE ATT&CK associations
Malware families: HANCITOR (S0499)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in SG, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Compromised verdict | Maltiverse | 2026-09-28 03:02:15 | 2026-09-28 03:02:15 | compromised | |
| Hancitor | Maltiverse Threat Observatory | 2026-07-10 18:01:05 | 2026-07-10 18:01:05 | anomalous-activity country_code:sg industry:technology-and-telecommunications malware | S0499 Hancitor |
IP addresses resolved by this hostname
- 184.174.39.217 (2026-09-28 03:02:14)
Whois information
- Domain
- paperbirdtech.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS53.DOMAINCONTROL.COM, NS54.DOMAINCONTROL.COM
- Registrant
- GoDaddy.com, LLC
- Contact email
- [email protected]
- Domain created
- 2015-05-09 06:52:45
- Domain expires
- 2027-05-09 06:52:45
- First indexed
- 2026-09-28 03:02:14
- Last updated
- 2026-09-28 03:02:14