npengine.com
Classification: Malicious
npengine.com is a malicious hostname. Linked to Qakbot malware. Reported by ThreatFox Abuse.ch and URLhaus Abuse.ch (Malware Download), last seen 2022-12-15.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:41:28.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| QakBot | ThreatFox Abuse.ch | 2022-12-13 20:28:15 | 2022-12-15 17:33:03 | malicious-activity | S0650 QakBot |
| Malware Download | URLhaus Abuse.ch | 2022-12-13 21:15:20 | 2022-12-13 21:15:20 | malicious-activity |
Tags
675 bb10 iso nt005 qakbot qbot quakbot tr zip oakboat pinkslipbot malware_downloadIP addresses resolved by this hostname
- 172.105.122.89 (2023-01-14 17:24:39)
- 2600:1f18:4ae:c606:def:b9d9:eb9e:7766 (2026-10-17 08:41:28)
- 98.82.42.139 (2026-10-17 08:41:28)
- 52.201.53.166 (2026-10-17 08:41:28)
- 2600:1f18:4ae:c605:f094:2a0a:4985:526e (2026-10-17 08:41:28)
Whois information
- Domain
- npengine.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NSG1.NAMEBRIGHTDNS.COM, NSG2.NAMEBRIGHTDNS.COM
- Registrant
- DropCatch.com 639 LLC
- Address
- 2635 Walnut Street
- City
- Denver
- State
- CO
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2026-09-16 18:05:06
- Domain expires
- 2027-09-16 18:05:06
- First indexed
- 2022-12-13 21:15:20
- Last updated
- 2026-10-17 08:41:28