werdotx.shop
Classification: Malicious
werdotx.shop is a malicious hostname. Reported by 1 threat source, last seen 2024-09-24. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2024-10-01 00:57:16.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Loki Password Stealer (PWS) | ThreatFox Abuse.ch | 2024-08-06 07:17:04 | 2024-09-24 10:17:06 | malicious-activity |
Tags
loki burkina lokibot lokipws infostealer stealerIP addresses resolved by this hostname
- 104.21.41.226 (2024-09-18 04:32:02)
- 172.67.195.100 (2024-09-18 04:32:02)
- 172.64.80.1 (2024-10-01 00:57:16)
Whois information
- AS name
- AS13335 Cloudflare, Inc.
- Domain
- werdotx.shop
- TLD
- shop
- DNSSEC
- ['unsigned']
- Nameservers
- CARLANE.NS.CLOUDFLARE.COM, NICK.NS.CLOUDFLARE.COM, carlane.ns.cloudflare.com, nick.ns.cloudflare.com
- Registrant
- NAMECHEAP INC
- Address
- Kalkofnsvegur 2
- City
- Reykjavik
- State
- Capital Region
- Country
- IS — Iceland 🇮🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2024-07-06 07:32:11
- Domain expires
- 2025-07-06 23:59:59
- First indexed
- 2024-08-06 07:17:04
- Last updated
- 2025-03-13 23:27:32