According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address.
Malware botnet controller located at 45.90.219.137 on port 443 TCP:
$ telnet 95.213.165.237 443
Trying 95.213.165.237…
Connected to 95.213.165.237.
Escape character is ‘^]’
Malicious domains hosted observed on this IP address:
associationfollow.link. 600 IN A 95.213.165.237
becomesubject.link. 600 IN A 95.213.165.237
bigbrisk.link. 600 IN A 95.213.165.237
brightfair.link. 600 IN A 95.213.165.237
coststand.link. 600 IN A 95.213.165.237
countryhungry.link. 600 IN A 95.213.165.237
directionexpress.work. 600 IN A 95.213.165.237
drivefaint.link. 600 IN A 95.213.165.237
ideasix.link. 600 IN A 95.213.165.237
ihre-chance.link. 600 IN A 95.213.165.237
letzte-chance.link. 600 IN A 95.213.165.237
letzte-moglichkeit.link. 600 IN A 95.213.165.237
mediaohscaigf.site. 600 IN A 95.213.165.237
mndpoppashop.site. 600 IN A 95.213.165.237
modestdisease.link. 600 IN A 95.213.165.237
molpoopklastore.online. 600 IN A 95.213.165.237
nastydate.work. 600 IN A 95.213.165.237
nastydate.workk. 600 IN A 95.213.165.237
nopoaperadacces.live. 600 IN A 95.213.165.237
nur-fur-sie.link. 600 IN A 95.213.165.237
pencilleg.link. 600 IN A 95.213.165.237
playertight.link. 600 IN A 95.213.165.237
producecontain.link. 600 IN A 95.213.165.237
profitseason.link. 600 IN A 95.213.165.237
realcustomer.link. 600 IN A 95.213.165.237
sheerdefine.link. 600 IN A 95.213.165.237
sinceretall.link. 600 IN A 95.213.165.237
sleepreply.link. 600 IN A 95.213.165.237
softacquire.link. 600 IN A 95.213.165.237
sturdywrite.link. 600 IN A 95.213.165.237
thirteenintroduce.link. 600 IN A 95.213.165.237
tradeshare.link. 600 IN A 95.213.165.237
traume-sind-real.link. 600 IN A 95.213.165.237
universitypoint.link. 600 IN A 95.213.165.237