| Source | Description | Last Seen | References |
|---|---|---|---|
| Phishtank | Suspected phishing site, identified through community verification and analysis | 03/02/2022 00:53:44 (UTC) | |
| Public Mastodon servers | Associated with Public Mastodon servers | 01/26/2023 00:00:00 (UTC) | |
| Abuse.ch ThreatFox | Deemed malicious due to: NjRAT | 05/31/2024 06:25:33 (UTC) | 0.tpc.eu.ngrok.io,o.tpc.ngrok.io |
| Abuse.ch ThreatFox | Deemed malicious due to: Nanocore RAT | 02/21/2024 02:01:12 (UTC) | |
| oisd.nl | Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc. | 12/21/2024 00:05:51 (UTC) | 0.tpc.eu.ngrok.io,07139b6148cc.ngrok.app,08ea080b.ngrok.io,09b71b3f.ngrok.io,0d03525a.ngrok.io,12e164cb.ngrok.io,13a2-52-161-98-209.ngrok.io,175bdd47.ngrok.io,177bee280e10.ngrok.io,17cf534fe70cb774.ngrok.app,183621902d80.ngrok.io,18ad18ea5119.ngrok.io,18cea17b8d5a.ngrok.io,19cd-2806-103e-1e-31c6-89b7-b26a-32f8-3d6.ngrok.io,1c8cefbb.ngrok.io,1de3-186-30-34-183.ngrok.io,1df71a18.ngrok.io,1e09c8a63b2d.ngrok.io,1ea5-41-251-135-33.ngrok.io,1f63f4dc.ngrok.io,1fdc0a0f.ngrok.io,2162e66b18eb.ngrok.io,23f5-100-26-180-219.ngrok.io,248bf8dcac87.ngrok.io,24b5df608ca3.ngrok.io,26a330421799.ngrok.io,28734366.ngrok.io,29215ad24566.ngrok.io,29c5a374.ngrok.io,2a62ea19.ngrok.io,2bc41e514f72.ngrok.io,31361f6f.ngrok.io,3284b9ae.ngrok.io,3424-2804-29c4-104-3300-fd51-f33f-4a33-f877.ngrok-free.app,3538a71b44de.ngrok.io,35fc276d.ngrok.io,3852a6bb.ngrok.io,3a969e70.ngrok.io,3bd69091.ngrok.io,3bf054b887a6.ngrok.io,3d8f113e.ngrok.io,3e2275ec.ngrok.io,3f54-107-23-190-138.ngrok.io,40e24155.ngrok.io,4593790c.ngrok.io,46126263.ngrok.io,4628eea2b0b6.ngrok.app,46e6-1-186-224-131.ngrok.io,4710b270.ngrok.io,478d0e18a39b.ngrok.io,4a0ab061.ngrok.io,4aca8caf.ngrok.io,4bac67c2.ngrok.io,4e44fa06b81c.ngrok.io,507a87d9.ngrok.io,51075f32.ngrok.io,51c63350.ngrok.io,559f43269032.ngrok.io,577bde63.ngrok.io,594cd78d2116.ngrok.io,5bdd3a0e.ngrok.io,5eb75a7a.ngrok.io,673b4978.ngrok.io,67b0-181-58-39-228.ngrok.io,69bffd9c.ngrok.io,6b421caa795d.ngrok.app,6c4ffbd0.ngrok.io,6cb56b8ad8aa.ngrok.io,6e59f354a632.ngrok.io,6eab5fe7.ngrok.io,7148acb0d17d.ngrok.io,75d8f43aad34.ngrok.app,7683-2a02-85f-e80c-f502-c438-ff83-22fb-385d.ngrok.io,774907864314.ngrok.io,77c8-161-10-58-203.ngrok-free.app,79fedd66c1fd.ngrok.io,7bz5nc0bdyga37scjk9otosvcvcl5wyc.ngrok.app,80b5-2a01-cb1e-6f-fec6-4835-79a4-169d-f934.ngrok.io,81ba8fb4be96.ngrok.io,84beaf894e5c.ngrok.io,85945feee656.ngrok.io,866f-46-1-155-122.ngrok-free.app,868e9a16.ngrok.io,8747c9ba6d5c.ngrok.io,8849d6e64d2f.ngrok.io,8d69bbb6.ngrok.io,8e2e4a15.ngrok.io,8eb95c931b01.ngrok.io,8f348846.ngrok.io,917776a2.ngrok.io,949329a220e4.ngrok.io,98d2f04e29fa.ngrok.io,992878c4.ngrok.io,9bcc62110124.ngrok.io,9c264d93.ngrok.io,9dce2c727beb.ngrok.app,9ef4c63db626.ngrok.io,9f668700.ngrok.io,a101-tr.ngrok.io,a2d95a6d752e76d0.ngrok.app,a952852eea8d.ngrok.app,ace61cd2aa75.ngrok.app,adventus.ngrok.app,amigapersonasonline.ngrok.app,annenkamte.duckdns.org,api.instagram.movil.n.ngrok.app,bd01cbd79561d76a.ngrok.app,chat.deaworkshop.co.uk,clever-steadily-duckling.ngrok-free.app,dad6-46-1-155-122.ngrok-free.app,drnull.ngrok.dev,e11f-2a05-d014-d4-6500-7cb9-df5d-7c1d-7128.ngrok-free.app,e4c0660414bf.eu.ngrok.io,e7b286d8b5e567dc.ngrok.app,ed4f-178-233-93-165.ngrok-free.app,f34f-103-14-48-195.ngrok-free.app,f548d70d32e4.ngrok.io,fa748eeacd4982d1.ngrok.app,flima.jira-dc.ngrok.app,ltampromocionescol.ngrok.io,o.tpc.ngrok.io,poppysol.com,ratte.ngrok.app,tiger-probable-colt.ngrok-free.app,wallashoomeexlendshpinghomewallassophingwallahoomwwallstruikgig.ngrok.app |
| PhishStats | Phishing URL | 12/02/2024 11:12:15 (UTC) | 1a873ae0a3205bc1.ngrok.app,364ca06e7e36d0b7.ngrok.app,6637cea3d57a.ngrok.app,8b43ba33c5361623.ngrok.app,ad8da9572838.ngrok.app,ba0e9ca558ac.ngrok.app,bd01cbd79561d76a.ngrok.app,c0a455871e6ef399.ngrok.app,c6fa76976104e1d2.ngrok.app,ceaf587f73e7c797.ngrok.app,ch-swisspass.ngrok.app,credihipotecariobdv.ngrok.dev,dhl.slovenia.ngrok.app,fee5a492507000aa.ngrok.app,ggahawallaslogirwallasored-trukwalalstrukwalalofinwalstrukhaha.ngrok-free.app,hopelessly-leading-lioness.ngrok-free.app,jhfdewerwallawtruk-wallaootlogunwalla-trukwalladhpsowallatrukwa.ngrok.app,laswallaswallasshopswallar-trukwallasshopashoping-wallasteukwal.ngrok.app,login.alibaba.ngrok.pro,ordewallasteujwalalsorwderwallasteukordearwallasoppsawallasord.ngrok.app,shopswallastrukoffeswallasteukoresarwallasmallwallasorearsjo.ngrok.app,tiger-probable-colt.ngrok-free.app,wallastruiginmailshopswallaordear.ngrok.app,wallastrukwallasshopinghopswallastruigingwallassgopsawallasok.ngrok.app,wallldsetrukposstelwalllahosptalwalla.ngrok.app,wdfjjigsewllastrui-ordearwapllgratrukwaplashppswallastrukwll.ngrok.app,zlwwallasshopswallalaordearshops-wallahsturk-wallalshopswallass.ngrok.app |
| Phishing Army | Involved in phishing activities | 12/03/2024 00:07:03 (UTC) | 1a873ae0a3205bc1.ngrok.app,3424-2804-29c4-104-3300-fd51-f33f-4a33-f877.ngrok-free.app,364ca06e7e36d0b7.ngrok.app,4f992e2f60327a5b.ngrok.app,6637cea3d57a.ngrok.app,7e7c6a55953811cb.ngrok.app,8b43ba33c5361623.ngrok.app,987733ff1d6bbea4.ngrok.app,alslawwllao-loginwallawallotrukshop-loginwallatrujwallajshpisw.ngrok.app,ba0e9ca558ac.ngrok.app,bd01cbd79561d76a.ngrok.app,c0a455871e6ef399.ngrok.app,c6fa76976104e1d2.ngrok.app,ceaf587f73e7c797.ngrok.app,ch-swisspass.ngrok.app,credihipotecariobdv.ngrok.dev,d878856929f0d73a.ngrok.app,dhl.slovenia.ngrok.app,e065df4e91d6f170.ngrok.app,f1115d12a09c9aee.ngrok.app,fce95f6ee97c3cc5.ngrok.app,fee5a492507000aa.ngrok.app,ggahawallaslogirwallasored-trukwalalstrukwalalofinwalstrukhaha.ngrok-free.app,hopelessly-leading-lioness.ngrok-free.app,jhfdewerwallawtruk-wallaootlogunwalla-trukwalladhpsowallatrukwa.ngrok.app,laswallaswallasshopswallar-trukwallasshopashoping-wallasteukwal.ngrok.app,login.alibaba.ngrok.pro,measured-strong-doberman.ngrok-free.app,meta-mask-update.ngrok.app,ordewallasteujwalalsorwderwallasteukordearwallasoppsawallasord.ngrok.app,orwhallagsgopwallasshopiwallastrukwallasshopwallasshopingwalla.ngrok.app,paymentflixupdate.ngrok.app,positively-model-cat.ngrok-free.app,shopee.ngrok.app,shopswallastrukoffeswallasteukoresarwallasmallwallasorearsjo.ngrok.app,slolawallas-youswallasshopswallasshopswallas-wallasshposwallas.ngrok.app,solawallastrujwalalsshop-wallasteukingwallas-trukwallawashopsba.ngrok.app,tiger-probable-colt.ngrok-free.app,walla-truk-postt-il-wallalas.ngrok.app,walla-truk-postt-il-wallalaswals.ngrok.app,wallagolgowallawtrukwallashopauwaeallawatruwgagaghwaalstrikwal.ngrok.app,wallashoomeexlendshpinghomewallassophingwallahoomwwallstruikgig.ngrok.app,wallastruiginmailshopswallaordear.ngrok.app,wallastrukeallasshpswallastrujwallaswallasshopwallasshoopwallas.ngrok.app,wallastrukwallasshopatruginwallasshopswallastrukwallasosresaew.ngrok.app,wallastrukwallasshopinghopswallastruigingwallassgopsawallasok.ngrok.app,wallaswallaosholcal-wallatrukoelrdearwalals-wallasshopingtrukwa.ngrok.app,wallldsetrukposstelwalllahosptalwalla.ngrok.app,wdfjjigsewllastrui-ordearwapllgratrukwaplashppswallastrukwll.ngrok.app,zlwwallasshopswallalaordearshops-wallahsturk-wallalshopswallass.ngrok.app |
| OpenPhish | Detected phishing site: {action} | 11/21/2024 00:04:26 (UTC) | 17cf534fe70cb774.ngrok.app,3424-2804-29c4-104-3300-fd51-f33f-4a33-f877.ngrok-free.app,77c8-161-10-58-203.ngrok-free.app,a2d95a6d752e76d0.ngrok.app,amigapersonasonline.ngrok.app,b758-2a09-bac5-3807-1cdc-00-2e0-22.ngrok-free.app,banvenezemprenderjuntos.ngrok.io,bd01cbd79561d76a.ngrok.app,chat.deaworkshop.co.uk,e065df4e91d6f170.ngrok.app,f1115d12a09c9aee.ngrok.app,fa748eeacd4982d1.ngrok.app,ltampromocionescol.ngrok.io,meta-mask-update.ngrok.app,sutazavyhravaj2024.ngrok.pro,walla-truk-postt-il-wallalaswals.ngrok.app,wallashoomeexlendshpinghomewallassophingwallahoomwwallstruikgig.ngrok.app,wallastrukingposttealisraell.ngrok.app,wallldsetrukposstelwalllahosptalwalla.ngrok.app,whatsapp.waxchain.online |
| Abuse.ch ThreatFox | Deemed malicious due to: Cobalt Strike | 06/27/2024 20:35:30 (UTC) | 090c-107-161-86-143.eu.ngrok.io,1222-173-82-121-42.ngrok.io,4628eea2b0b6.ngrok.app,93b7-204-44-112-14.jp.ngrok.io,c90a-104-223-103-72.ngrok.io,clever-steadily-duckling.ngrok-free.app,efe7-155-94-250-25.ap.ngrok.io |
| Abuse.ch ThreatFox | Deemed malicious due to: {action} | 06/26/2024 03:49:49 (UTC) | 4628eea2b0b6.ngrok.app,clever-steadily-duckling.ngrok-free.app |
| Abuse.ch UrlHaus | Url associated with malware and {action} | 12/10/2024 19:35:08 (UTC) | 7bz5nc0bdyga37scjk9otosvcvcl5wyc.ngrok.app,panel.ngrok.app,ratte.ngrok.app |
| Politie.nl | Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution. | 12/08/2023 02:25:23 (UTC) | 4aca8caf.ngrok.io,8e2e4a15.ngrok.io,917776a2.ngrok.io,poppysol.com |
| Hybrid-Analysis | Host has shown activity related to malware. | 12/27/2024 15:15:01 (UTC) | 0.tpc.eu.ngrok.io,0014ba3ac18c.ngrok.io,11f1-46-98-100-135.ngrok-free.app,179c-41-235-222-88.ngrok-free.app,1a873ae0a3205bc1.ngrok.app,2099-154-239-31-72.ngrok-free.app,3.17.7.232,4628eea2b0b6.ngrok.app,5cc2-101-255-210-73.ngrok-free.app,7afc-146-185-57-226.ngrok-free.app,apple-pay-prod.marshmallow.co,apple.icloud-verifyappleid.com,cdn.ngrok.com,dev-payments-praxis.meatdata.org,http://3.17.7.232,http://3.17.7.232:18237,icloud.appleid-verify.online,icloudi.net,lcly.ngrok.io,metahelpcenterid.ngrok.app,neutral-leading-impala.ngrok-free.app,o.tpc.ngrok.io,sa.ngrok.io |
| PhishTank | Detected phishing site focused on: {action} | 11/29/2024 06:15:55 (UTC) | 1a873ae0a3205bc1.ngrok.app,4f992e2f60327a5b.ngrok.app,6637cea3d57a.ngrok.app,7e7c6a55953811cb.ngrok.app,987733ff1d6bbea4.ngrok.app,alslawwllao-loginwallawallotrukshop-loginwallatrujwallajshpisw.ngrok.app,ba0e9ca558ac.ngrok.app,d878856929f0d73a.ngrok.app,fce95f6ee97c3cc5.ngrok.app,laswallaswallasshopswallar-trukwallasshopashoping-wallasteukwal.ngrok.app,orwhallagsgopwallasshopiwallastrukwallasshopwallasshopingwalla.ngrok.app,paymentflixupdate.ngrok.app,slolawallas-youswallasshopswallasshopswallas-wallasshposwallas.ngrok.app,solawallastrujwalalsshop-wallasteukingwallas-trukwallawashopsba.ngrok.app,walla-truk-postt-il-wallalas.ngrok.app,wallagolgowallawtrukwallashopauwaeallawatruwgagaghwaalstrikwal.ngrok.app,wallastrukeallasshpswallastrujwallaswallasshopwallasshoopwallas.ngrok.app,wallastrukingposttealisraell.ngrok.app,wallastrukwallasshopatruginwallasshopswallastrukwallasosresaew.ngrok.app,wallaswallaosholcal-wallatrukoelrdearwalals-wallasshopingtrukwa.ngrok.app |
| Abuse.ch ThreatFox | Deemed malicious due to: IRATA | 11/05/2023 10:24:39 (UTC) | drnull.ngrok.dev |
Copyright © 2024 SecureFeed. All rights reserved.
Terms of Service | Privacy Policy