servicenow-hrblock.com
Classification: Malicious
servicenow-hrblock.com is a malicious hostname. Linked to Scattered Spider activity. Reported by Maltrail (0Ktapus), last seen 2025-03-27.
Current activity
- Offline — no longer resolving. Last online 2025-06-18 20:19:36.
MITRE ATT&CK associations
Intrusion sets: SCATTERED SPIDER (G1015)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| 0Ktapus | Maltrail | 2025-03-27 11:18:57 | 2025-03-27 11:18:57 | malicious-activity | G1015 Scattered Spider |
IP addresses resolved by this hostname
- 15.197.130.221 (2025-06-18 20:19:36)
Whois information
- Domain
- servicenow-hrblock.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- VERIFY1.REGISTRAR.EU, VERIFY2.REGISTRAR.EU, VERIFY3.REGISTRAR.EU, ns2.suspended-domain.com, ns1.suspended-domain.com
- Registrant
- Hosting Concepts B.V. d/b/a Registrar.eu
- Address
- Hofplein
- City
- Rotterdam
- State
- Zuid-Holland
- Country
- NL — Netherlands 🇳🇱
- Contact email
- [email protected]
- Domain created
- 2024-06-09 16:12:56
- Domain expires
- 2025-06-09 16:12:56
- First indexed
- 2025-03-27 11:18:57
- Last updated
- 2026-10-07 07:16:27