xred.mooo.com
Classification: Whitelisted
xred.mooo.com is a whitelisted (trusted) hostname. Reported by 6 threat sources, last seen 2025-07-13.
Current activity
- Offline — no longer resolving. Last online 2025-07-19 14:23:25.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: DARKCOMET (S0334) REMCOS (S0332) ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-07-18 21:35:59 | 2025-07-13 20:41:10 | benign | |
| Asyncrat | Maltrail | 2025-03-27 13:15:55 | 2025-03-27 13:15:55 | malicious-activity | S1087 AsyncRAT |
| Top 1M Site | Cisco Umbrella | 2022-07-23 03:02:26 | 2025-02-01 10:20:49 | benign | |
| Remcos | Maltiverse Threat Observatory | 2024-12-29 13:05:08 | 2024-12-31 09:10:08 | S0332 Remcos | |
| Remcos | ThreatFox Abuse.ch | 2024-12-29 10:18:39 | 2024-12-29 11:18:39 | malicious-activity | S0332 Remcos |
| DarkComet | ThreatFox Abuse.ch | 2024-11-09 16:44:59 | 2024-11-11 16:18:24 | malicious-activity | S0334 DarkComet |
| Delf.NBX | Hybrid-Analysis | 2021-06-26 22:17:19 | 2021-06-26 22:17:19 | ||
| Dropped:Generic.Ransom.DMR | Hybrid-Analysis | 2020-04-17 10:17:59 | 2020-04-17 10:17:59 | ||
| Malicious domain | SANS Internet Storm Center | 2019-12-19 05:50:59 | 2019-12-19 05:50:59 |
Tags
unreliable subdomain breut fynloski klovbot c2 remcosrat remvio socmerWhois information
- Domain
- mooo.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.AFRAID.ORG, NS2.AFRAID.ORG, NS3.AFRAID.ORG, NS4.AFRAID.ORG, ns1.afraid.org, ns2.afraid.org, ns3.afraid.org, ns4.afraid.org
- Registrant
- Porkbun LLC
- Address
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- State
- California
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2019-12-19 05:50:59
- Last updated
- 2025-07-19 14:23:25