SecureFeed - Is 52.85.193.92 Malicious? Host Analysis

Searching 52.85.193.92

You still have 12/20 request limit available for today. Sign up to get higher limits.

Results for 52.85.193.92

Classification:

malicious

IP:

52.85.193.92

EntityType:

Tags:

N/A

Malicious Tags:

final ransomware malware phishing ransomware scam spy spyware scanning

Country:

City:

San Jose

State:

California

Postal Code:

N/A

Lat/Lon:

37.3382°, -121.8860°

ISP Name:

Amazon.com, Inc.

ISP Network:

52.85.192.0/19

Source	Description	Last Seen	References
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	06/07/2026 00:05:34 (UTC)	contents.klik.link,devdataportal.online,doc-ye9wbezc.b4a.run,eth269.com,eth868.com,microsoftlogin-u7g5wnvg.b4a.run,pafmodernwebclient-srirj3dq.b4a.run,posta-nhq43i6x.b4a.run,res.femina.fr,viewpdfonline-1wgtaeus.b4a.run,webservermail-g2689far.b4a.run
Hybrid-Analysis	Host has shown activity related to malware.	06/07/2026 01:00:40 (UTC)	985bet.la
OpenPhish	Detected phishing site: {action}	02/09/2026 00:06:14 (UTC)	microsoftlogin-u7g5wnvg.b4a.run
urlscan.io	Malware detected during url scan	01/27/2026 00:08:18 (UTC)	nutspoker.cc