webipal.com
Classification: Malicious
webipal.com is a malicious hostname. Linked to Gootloader malware. Reported by ThreatFox Abuse.ch, last seen 2024-03-23. Resolves to 82.112.232.31 and 7 more.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 12:38:07.
MITRE ATT&CK associations
Malware families: GOOTLOADER (S1138)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| GootLoader | ThreatFox Abuse.ch | 2024-03-23 07:19:19 | 2024-03-23 07:19:19 | malicious-activity | S1138 Gootloader |
| Alexa Top 1 Million | Alexa | 2021-10-26 03:36:28 | 2021-10-26 03:36:28 | benign |
Tags
gating gootloaderIP addresses resolved by this hostname
- 82.112.232.31 (2025-01-16 12:06:22)
- 145.14.147.35 (2021-10-26 03:36:28)
- 104.21.42.99 (2026-09-27 16:35:18)
- 172.67.160.177 (2026-09-27 16:35:18)
- 2606:4700:3034::6815:2a63 (2026-10-15 04:37:09)
- 2606:4700:3035::ac43:a0b1 (2026-10-15 04:37:09)
- 172.64.80.1 (2026-10-17 12:38:07)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-17 12:38:07)
Whois information
- Domain
- webipal.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- APRIL.NS.CLOUDFLARE.COM, RAYDEN.NS.CLOUDFLARE.COM, april.ns.cloudflare.com, rayden.ns.cloudflare.com
- Registrant
- NAMECHEAP INC
- Address
- 16192 Coastal Highway
- City
- Lewes
- State
- Delaware
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2026-01-26 18:39:26
- Domain expires
- 2027-01-26 18:39:26
- First indexed
- 2021-10-26 03:36:28
- Last updated
- 2026-10-17 12:38:07