www.bing.com
Classification: Whitelisted
www.bing.com is a whitelisted (trusted) hostname. Reported by 7 threat sources, last seen 2026-09-02. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2026-09-02 02:36:15.
MITRE ATT&CK associations
Malware families: WANNACRY (S0366) AVADDON (S0640) BAD RABBIT (S0606)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Phishing | Phishtank | 2025-10-03 10:37:52 | 2026-09-02 02:32:32 | compromised malicious-activity phishing | |
| Suspicious URL | Triage | 2026-04-27 06:59:19 | 2026-08-14 06:01:57 | anomalous-activity malicious-activity | |
| Matched whitelist source: Misp_microsoft_win10_endpoints | Maltiverse | 2026-06-18 15:22:40 | 2026-08-10 17:00:46 | benign | |
| Salatstealer | Triage | 2026-07-21 22:24:18 | 2026-07-21 22:24:18 | malicious-activity | |
| Axa phishing | Maltiverse | 2026-06-19 10:06:49 | 2026-06-19 10:06:49 | malicious-activity | T1566 Phishing |
| Hijackloader | Triage | 2026-06-15 21:44:18 | 2026-06-15 21:44:18 | malicious-activity | |
| Badrabbit | Triage | 2026-06-06 02:28:32 | 2026-06-06 02:28:32 | malicious-activity | S0606 Bad Rabbit |
| Killmbr | Triage | 2026-03-20 16:34:31 | 2026-05-23 09:30:20 | malicious-activity | |
| Matched manual whitelist entry | Maltiverse | 2026-05-09 00:00:41 | 2026-05-09 00:00:41 | ||
| Malicious URL | Triage | 2026-02-02 15:13:48 | 2026-04-18 14:07:15 | malicious-activity | |
| Phemedrone | Triage | 2026-04-14 15:09:49 | 2026-04-14 15:09:49 | malicious-activity | |
| Top Popularity Site | Cisco Umbrella | 2022-07-18 20:31:22 | 2026-04-07 00:13:29 | benign | |
| Avaddon | Triage | 2026-03-20 09:19:01 | 2026-03-20 09:19:01 | malicious-activity | S0640 Avaddon |
| Wannacry | Triage | 2026-03-10 20:57:35 | 2026-03-10 20:57:35 | malicious-activity | S0366 WannaCry |
| Blankgrabber | Triage | 2026-02-16 00:39:03 | 2026-02-16 00:39:03 | malicious-activity | |
| Phishing Internal Revenue Service | Phishtank | 2025-10-03 10:57:32 | 2025-10-03 14:53:56 | compromised malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-08-04 09:00:10 | 2023-10-16 19:15:06 | ||
| Phishing | Antiphishing.com.ar | 2023-03-19 12:56:08 | 2023-03-19 12:56:08 | malicious-activity | T1566 Phishing |
| Safe Site | Cisco Umbrella | 2022-07-14 23:25:08 | 2022-07-16 01:15:10 | benign | |
| Tesco Bank phishing | Antiphishing.com.ar | 2021-02-10 20:31:08 | 2021-02-15 23:02:48 | ||
| paypal phishing | Antiphishing.com.ar | 2019-11-13 01:01:21 | 2020-06-26 03:37:34 | ||
| Alexa Top 1 Million | Maltiverse Research Team | 2020-04-27 19:26:19 | 2020-04-27 19:26:19 | ||
| South Carolina Federal Credit Union phishing | Maltiverse | 2017-10-15 13:57:11 | 2017-10-15 13:57:11 |
Tags
phishing discovery adware persistence ransomware spyware bootkit defense_evasion privilege_escalation stealer trojan credential_access execution blankgrabber upx aspackv2 wannacry impact worm motw avaddon killmbr agilenet wiper evasion installer phemedrone revoked_codesign coinbase pubg badrabbit dharma hiddentear hijackloader loader salatstealer spotify viaverdeIP addresses resolved by this hostname
- 104.86.110.98 (2025-02-12 00:00:14)
- 104.86.110.97 (2025-02-12 00:00:14)
- 104.86.110.90 (2025-02-12 00:00:14)
- 104.86.110.91 (2025-02-12 00:00:14)
- 2.18.66.177 (2025-02-12 00:00:14)
- 2.18.66.169 (2025-02-12 00:00:14)
- 104.86.110.99 (2025-02-12 00:00:14)
- 104.86.110.104 (2025-02-12 00:00:14)
- 2.18.66.171 (2025-02-12 00:00:14)
- 13.107.21.200 (2020-04-07 21:15:10)
- 131.253.13.32 (2013-04-01 00:00:00)
- 131.253.33.200 (2013-09-14 00:00:00)
- 204.79.197.200 (2019-12-13 02:07:16)
- 23.53.4.25 (2025-02-15 01:31:40)
- 23.53.4.10 (2025-02-15 01:31:40)
- 23.53.4.17 (2025-02-22 01:15:39)
- 23.53.4.8 (2025-02-22 01:15:39)
- 23.53.4.19 (2025-05-07 01:06:16)
- 2600:140a:a000::172b:a111 (2025-05-07 01:06:16)
- 23.53.4.34 (2025-05-07 01:06:16)
- 23.53.4.27 (2025-05-17 01:15:40)
- 2600:140a:a000::172b:a118 (2025-05-24 01:18:58)
- 2600:140a:a000::172b:a11b (2025-05-24 01:18:58)
- 23.53.4.9 (2025-05-24 01:18:58)
- 2600:140a:a000::172b:a11a (2025-05-24 01:18:58)
- 23.53.4.11 (2025-05-24 01:18:58)
- 2600:140a:a000::172b:a10a (2025-05-24 01:18:58)
- 23.53.4.107 (2025-05-24 14:52:35)
- 23.53.4.26 (2025-05-24 14:52:35)
- 23.53.4.18 (2025-05-24 14:52:35)
- 23.53.4.16 (2025-05-24 14:52:35)
- 2600:140a:a000::172b:a108 (2025-05-24 14:52:35)
- 23.53.4.24 (2025-05-24 14:52:35)
- 23.53.4.32 (2025-05-24 14:52:35)
- 2600:140a:a000::172b:a113 (2025-05-24 14:52:35)
- 23.53.4.33 (2025-05-24 14:52:35)
- 2.22.251.18 (2025-10-08 00:17:56)
- 2.22.251.63 (2025-10-08 00:17:56)
- 2.22.251.12 (2025-10-08 00:17:56)
- 2.22.251.5 (2025-10-08 00:17:56)
- 2.22.251.17 (2025-10-08 00:17:56)
- 2a02:26f0:9100:11::6010:f920 (2025-10-08 00:17:56)
- 2a02:26f0:9100:11::6010:f918 (2025-10-08 00:17:56)
- 2a02:26f0:9100:11::6010:f92a (2025-10-08 00:17:56)
- 2.22.251.65 (2025-10-08 00:17:56)
- 2.22.251.62 (2025-10-08 00:17:56)
- 2.22.251.16 (2025-10-08 00:17:56)
- 2.22.251.67 (2025-10-08 00:17:56)
- 23.222.17.199 (2025-12-21 00:22:59)
- 23.222.17.197 (2025-12-21 00:22:59)
- 23.222.17.203 (2025-12-21 00:22:59)
- 23.222.17.207 (2025-12-21 00:22:59)
- 23.222.17.204 (2025-12-21 00:22:59)
- 23.222.17.205 (2025-12-21 00:22:59)
- 23.222.17.175 (2026-03-07 00:21:24)
- 2600:140a:a000::172b:a1a1 (2026-03-07 00:21:24)
- 23.222.17.167 (2026-04-07 00:13:28)
- 23.222.17.169 (2026-05-09 00:00:17)
- 2600:140a:a000::172b:a188 (2026-05-09 00:00:17)
- 2600:140a:a000::172b:a192 (2026-05-09 00:00:17)
- 2600:140a:a000::172b:a199 (2026-06-18 15:22:39)
- 23.222.17.171 (2026-06-18 15:22:39)
- 23.222.17.172 (2026-06-18 15:22:39)
- 23.222.17.165 (2026-06-18 15:22:39)
- 23.222.17.168 (2026-06-18 15:22:39)
- 23.222.17.174 (2026-06-18 15:22:39)
- 23.222.17.173 (2026-06-18 15:22:39)
- 23.222.17.166 (2026-06-18 15:22:39)
- 2600:140a:a000::172b:a18b (2026-06-18 15:22:39)
- 23.222.17.170 (2026-06-18 15:22:39)
- 2600:1401:d000:18::17d3:8808 (2026-08-10 17:00:45)
- 2600:1401:d000:18::17d3:8804 (2026-08-10 17:00:45)
- 2600:1401:d000:18::17d3:880c (2026-08-10 17:00:45)
- 2.16.170.137 (2026-08-10 17:00:45)
- 2.16.170.142 (2026-08-10 17:00:45)
- 2.16.170.141 (2026-08-10 17:00:45)
- 2600:1401:d000:18::17d3:8811 (2026-08-10 17:00:45)
- 2600:1401:d000:18::17d3:8805 (2026-08-10 17:00:45)
Whois information
- AS name
- AS8068 Microsoft Corporation
- Domain
- bing.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- DNS1.P09.NSONE.NET, DNS2.P09.NSONE.NET, DNS3.P09.NSONE.NET, DNS4.P09.NSONE.NET, NS1-204.AZURE-DNS.COM, NS2-204.AZURE-DNS.NET, NS3-204.AZURE-DNS.ORG, NS4-204.AZURE-DNS.INFO, ns3-204.azure-dns.org, dns3.p09.nsone.net, ns4-204.azure-dns.info, dns1.p09.nsone.net, dns2.p09.nsone.net, dns4.p09.nsone.net, ns1-204.azure-dns.com, ns2-204.azure-dns.net
- Registrant
- MarkMonitor, Inc.
- Address
- One Microsoft Way,
- City
- Redmond
- State
- WA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- Domain created
- 1996-01-29 05:00:00
- Domain expires
- 2027-01-30 05:00:00
- First indexed
- 2017-10-14 14:52:33
- Last updated
- 2026-09-02 02:36:15