mod-gov-bd.dwnlld.com
Classification: Malicious
mod-gov-bd.dwnlld.com is a malicious hostname. Linked to Sidewinder activity. Reported by ThreatFox Abuse.ch, last seen 2025-05-27. Resolves to 193.42.39.217.
Current activity
- Offline — no longer resolving. Last online 2025-06-18 20:20:04.
MITRE ATT&CK associations
Intrusion sets: SIDEWINDER (G0121)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SideWinder | ThreatFox Abuse.ch | 2025-05-25 14:42:25 | 2025-05-27 14:20:13 | malicious-activity | G0121 Sidewinder |
Tags
c2 sidewinderIP addresses resolved by this hostname
- 193.42.39.217 (2025-06-18 20:20:04)
Whois information
- Domain
- dwnlld.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.SWIFTYDNS.COM, NS2.SWIFTYDNS.COM, ns1.swiftydns.com, ns2.swiftydns.com
- Registrant
- NAMECHEAP INC
- Address
- 67, rue Petite Fusterie
- City
- BREST
- State
- BREST
- Country
- OM — Oman 🇴🇲
- Contact email
- [email protected], [email protected]
- Domain created
- 2025-03-26 08:18:33
- Domain expires
- 2026-03-26 08:18:33
- First indexed
- 2025-05-25 15:17:03
- Last updated
- 2026-08-01 19:21:14