SecureFeed - Is 104.21.78.66 Malicious? Host Analysis

Results for 104.21.78.66

Classification:

malicious

IP:

104.21.78.66

EntityType:

Tags:

N/A

Malicious Tags:

phishing final ransomware malware ransomware scam spy spyware scanning cobaltstrike malicious

Country:

City:

Toronto

State:

Ontario

Postal Code:

N/A

Lat/Lon:

43.6532°, -79.3832°

ISP Name:

Cloudflare, Inc.

ISP Network:

104.16.0.0/13

Source	Description	Last Seen	References
PhishTank	Detected phishing site focused on: {action}	08/23/2024 15:52:47 (UTC)	attessttout.com,officebe3d69f2b0732da655a28a9c26c3c9f8be3d69f2b0732da655a28a9c2.princesam331.workers.dev
Phishing Army	Involved in phishing activities	08/25/2024 00:06:48 (UTC)	attessttout.com,historialmonetario.shop,linkresmi-dana-official.idco-my.cfd
PhishStats	Phishing URL	03/13/2024 14:04:37 (UTC)	historialmonetario.shop
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	10/10/2024 00:04:49 (UTC)	chatgptdozero.com,officebe3d69f2b0732da655a28a9c26c3c9f8be3d69f2b0732da655a28a9c2.princesam331.workers.dev,sologne-gite.com,uly.chittoo.shop,vecelo.shop
urlscan.io	Scam detected during url scan	11/30/2024 00:10:59 (UTC)	signup-movementfdn.co
OpenPhish	Detected phishing site: {action}	08/16/2024 12:00:54 (UTC)	linkresmi-dana-official.idco-my.cfd,officebe3d69f2b0732da655a28a9c26c3c9f8be3d69f2b0732da655a28a9c2.princesam331.workers.dev
Abuse.ch ThreatFox	Deemed malicious due to: Cobalt Strike	06/15/2022 20:06:53 (UTC)	104.21.78.66,https://104.21.78.66:2096/jquery-3.3.1.min.js