vipnightsgirls.com
Classification: Malicious
vipnightsgirls.com is a malicious hostname. Linked to Qakbot malware. Reported by Maltiverse and ThreatFox Abuse.ch, last seen 2023-07-05.
Current activity
- Offline — no longer resolving. Last online 2024-06-16 20:31:19.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:52 | 2023-07-05 20:51:29 | malicious-activity | G0067 APT37 |
| QakBot | ThreatFox Abuse.ch | 2023-06-21 17:17:09 | 2023-06-21 17:17:09 | malicious-activity | S0650 QakBot |
Tags
apt bb33 js qakbot qbot quakbot oakboat pinkslipbotIP addresses resolved by this hostname
- 199.59.243.226 (2024-06-16 20:31:19)
- 199.59.243.225 (2024-06-11 16:29:46)
- 198.54.126.252 (2024-05-09 04:24:35)
Whois information
- AS name
- AS22612 Namecheap, Inc.
- Domain
- vipnightsgirls.com
- TLD
- com
- First indexed
- 2023-06-21 17:17:09
- Last updated
- 2026-09-18 06:19:01