purch-int.com
Classification: Malicious
purch-int.com is a malicious hostname. Linked to Qakbot malware. Reported by Maltiverse and ThreatFox Abuse.ch, last seen 2023-07-05.
Current activity
- Offline — no longer resolving. Last online 2024-02-28 16:19:59.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:52 | 2023-07-05 20:51:27 | malicious-activity | G0067 APT37 |
| QakBot | ThreatFox Abuse.ch | 2023-06-20 12:17:59 | 2023-06-20 12:17:59 | malicious-activity | S0650 QakBot |
Tags
apt bb33 js qakbot qbot quakbot oakboat pinkslipbotIP addresses resolved by this hostname
- 199.59.243.225 (2024-02-28 16:19:59)
- 172.234.25.151 (2024-02-28 08:35:21)
- 66.29.146.51 (2024-01-18 00:38:36)
Whois information
- AS name
- AS19538 Advantagecom Networks, Inc.
- Domain
- purch-int.com
- TLD
- com
- First indexed
- 2023-06-20 12:17:59
- Last updated
- 2026-07-30 11:30:51