ok99.io
Classification: Malicious
ok99.io is a malicious hostname. Linked to Quasarrat malware. Reported by ThreatFox Abuse.ch (Quasar RAT), last seen 2026-09-16.
Current activity
- Offline — no longer resolving. Last online 2026-09-21 12:37:38.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QUASARRAT (S0262)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Quasar RAT | ThreatFox Abuse.ch | 2026-09-16 17:46:41 | 2026-09-16 17:46:41 | botnet malicious-activity | S0262 QuasarRAT |
Tags
quasar cinarat quasarrat yggdrasilIP addresses resolved by this hostname
- 172.67.135.120 (2026-09-18 00:35:41)
- 104.21.6.239 (2026-09-18 00:35:41)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-09-20 08:35:37)
- 2606:4700:3030::6815:6ef (2026-09-21 12:37:38)
- 172.64.80.1 (2026-09-21 12:37:38)
- 2606:4700:3031::ac43:8778 (2026-09-21 12:37:38)
Whois information
- Domain
- ok99.io
- TLD
- io
- First indexed
- 2026-09-16 18:25:04
- Last updated
- 2026-09-21 12:37:38