renovatiomarketing.com
Classification: Malicious
renovatiomarketing.com is a malicious hostname. Linked to Emotet malware. Reported by ThreatFox Abuse.ch, last seen 2022-01-27.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 01:49:40.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Emotet | ThreatFox Abuse.ch | 2022-01-26 23:10:40 | 2022-01-27 00:03:20 | botnet malicious-activity | S0367 Emotet |
| Alexa Top 1 Million | Alexa | 2021-03-07 00:07:35 | 2021-03-07 00:07:35 | benign |
Tags
emotet geodo heodoIP addresses resolved by this hostname
- 64.4.161.42 (2022-01-27 00:03:20)
- 172.67.210.21 (2021-03-07 00:07:35)
- 104.21.34.231 (2021-03-07 00:07:35)
- 172.64.80.1 (2026-01-04 04:59:11)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-01-04 04:59:11)
- 13.248.169.48 (2026-11-07 01:49:40)
- 76.223.54.146 (2026-11-07 01:49:40)
Whois information
- AS name
- AS11155 Quad-Cities Online
- Domain
- renovatiomarketing.com
- TLD
- com
- DNSSEC
- ['unsigned', 'unsigned, Unsigned']
- Nameservers
- NS1.DYNA-NS.NET, NS2.DYNA-NS.NET, NS1.AFTERNIC.COM, NS2.AFTERNIC.COM, VERIFICATION-D3JCLUCSP89GANYQBYDENY.NS101.VERIFY.HN, verification-d3jclucsp89ganyqbydeny.ns101.verify.hn, ns1.afternic.com, ns2.afternic.com
- Registrant
- Bonzai Domains, LLC
- Address
- Statutory Masking Enabled
- City
- Statutory Masking Enabled
- State
- ALPES MARITIMES
- Country
- FR — France 🇫🇷
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- Domain created
- 2026-04-27 18:31:39
- Domain expires
- 2027-04-27 18:31:39
- First indexed
- 2021-03-07 00:07:35
- Last updated
- 2026-11-07 01:49:41