Hostname
maliciousfile.online
Last fetched
maliciousfile.online resolves to 8 IPv4 addresses operated by AMAZON-AES - Amazon.com, Inc. in US. WHOIS lists iana:292 as the registrar.
Nutrition Label
Resolution chain
maliciousfile.online resolves to 8 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.
| IP | Prefix | ASN | Operator | Country |
|---|---|---|---|---|
| 100.52.144.125 | 100.48.0.0/12 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 18.233.176.117 | 18.232.0.0/14 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 3.216.47.174 | 3.208.0.0/12 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 52.72.196.124 | 52.72.0.0/15 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 54.145.104.154 | 54.144.0.0/14 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 54.145.201.206 | 54.144.0.0/14 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 100.57.181.7 | 100.48.0.0/12 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 98.80.3.112 | 98.80.0.0/13 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
WHOIS identity
- Registrar
- iana:292
- Organization
- dnstination
- Contact emails
Subdomains
1 observed subdomain of maliciousfile.online.
| Subdomain |
|---|
| wildcard.maliciousfile.online |
Threat posture
History
Mail and authentication
MX records
SPF policy
4 SPF mechanisms authorising senders for maliciousfile.online.
| Mechanism | Target |
|---|---|
| SPF_A | maliciousfile.online |
| SPF_IP | 107.23.16.222/32 |
| SPF_IP | 54.173.83.138/32 |
| SPF_MX | maliciousfile.online |
Related pages
Pivot deeper into the graph from maliciousfile.online.
- IP · 100.52.144.125
- ASN · AS14618AMAZON-AES - Amazon.com, Inc.
- Registrar · iana:292
- Country · US
- Email · domains@wombatsecurity.com
- TLD · .online
- Browse hostnames · ma…
- Glossary · What is a hostname?
- Whisper Internet Directory — home
- Live MOAS conflicts feed
- Threat feed · Spamhaus DROP
- United States internet infrastructure
Cypher and MCP
Reproduce the resolution chain directly against graph.whisper.security:
MATCH (h:HOSTNAME {name: "maliciousfile.online"})-[:RESOLVES_TO]->(ip:IPV4)
-[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
-[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20Or query Whisper from your own LLM workflow via the Whisper MCP server.