rupiah138sweet.com
Classification: Malicious
rupiah138sweet.com is a malicious hostname. Reported by Cyber Threat Alliance (Command & Control), last seen 2026-10-21.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:34:48.
- Command & Control server — Used by cybercriminals to control victim computers.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Command & Control | Cyber Threat Alliance | 2026-10-21 13:41:27 | 2026-10-21 13:41:28 | botnet malicious-activity |
IP addresses resolved by this hostname
- 2606:4700:3037::ac43:8692 (2026-11-04 20:32:16)
- 104.21.6.67 (2026-11-04 20:32:16)
- 172.67.134.146 (2026-11-04 20:32:16)
- 2606:4700:3033::6815:643 (2026-11-04 20:32:16)
- 172.64.80.1 (2026-11-07 04:34:48)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-11-07 04:34:48)
Whois information
- Domain
- rupiah138sweet.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- MARTIN.NS.CLOUDFLARE.COM, THEA.NS.CLOUDFLARE.COM
- Registrant
- Dominet (HK) Limited
- Contact email
- [email protected]
- Domain created
- 2026-10-19 00:29:35
- Domain expires
- 2027-10-19 00:29:35
- First indexed
- 2026-10-21 13:41:27
- Last updated
- 2026-11-07 04:34:48