203.0.113.66
fetched
Starting the investigation…VirusTotal's free API allows 4 requests a minute, so a run takes about a minute.
3
203.0.113.66
Netherlands · Amsterdam · AS64531 · BulletproofHost BV · 203.0.113.0/24 · RIPE NCC
3 of 94 engines flag this IP
· 8 sites hosted, 3 flagged · 4 communicating files
Abuse reports · AbuseIPDB — what other defenders reported about this server in the last 90 days
87/ 100
143 report(s) from 38 reporter(s) · last 2026-10-14 01:49
Data Center/Web Hosting/Transit · BulletproofHost BV
A score of 25 or more means several independent reporters saw abuse from this IP: phishing, scanning, spam or brute force. A fresh kit on a clean IP scores 0 — unknown, not clean.
SITES HOSTED ON THIS SERVER (passive DNS, each with its own detections)
| Last resolved | Detections | Domain | |
|---|---|---|---|
| 2026-10-13 | 5/ 95 | shopn0va.com | VT ↗ · urlscan ↗ |
| 2026-10-07 | 5/ 95 | shopnova.co | VT ↗ · urlscan ↗ |
| 2026-10-01 | 5/ 95 | wallet-sync-1366.online | VT ↗ · urlscan ↗ |
| 2026-10-05 | 0/ 90 | secure-login-1366.top | VT ↗ · urlscan ↗ |
| 2026-10-09 | 0/ 90 | secure-shopnova.com | VT ↗ · urlscan ↗ |
| 2026-10-11 | 0/ 90 | shopnova-login.com | VT ↗ · urlscan ↗ |
| 2026-09-29 | 0/ 90 | support-desk-1366.site | VT ↗ · urlscan ↗ |
| 2026-10-03 | 0/ 90 | verify-account-1366.xyz | VT ↗ · urlscan ↗ |
COMMUNICATING FILES
| Scanned | Detections | Type | Name |
|---|---|---|---|
| 2026-10-09 | 6/ 66 | Android | Draky and the Twilight Castle.apk |
| 2026-09-21 | 5/ 66 | Android | Orbit - Igra s gravitaciey.apk |
| 2026-09-12 | 4/ 66 | invoice_4411.pdf | |
| 2026-09-30 | 0/ 66 | REMITTANCE 2-For-Cokecanada.pdf |
HISTORICAL WHOIS (IP block)
2026-09-12 · Mock Registrar LLC
IP WHOIS record
inetnum: 203.0.113.0 - 203.0.113.255
org-name: BulletproofHost BV
abuse-mailbox: abuse@bulletproofhost.example
engine verdicts for this IP (12)
| Engine | Category | Result |
|---|---|---|
| BitDefender | malicious | phishing |
| ESET | malicious | phishing |
| Fortinet | malicious | phishing |
| Google Safebrowsing | malicious | phishing |
| Kaspersky | malicious | phishing |
| OpenPhish | malicious | phishing |
| Phishtank | malicious | phishing |
| Sophos | malicious | phishing |
| CRDF | harmless | clean |
| Netcraft | harmless | clean |
| Quttera | harmless | clean |
| Webroot | harmless | clean |
Look it up elsewhere
Each link opens the external service's own page for this server — nothing is sent from here beyond the IP in the URL.