Hostname
ransomware.site
Last fetched
ransomware.site resolves to 12 IPv4 addresses operated by AMAZON-AES - Amazon.com, Inc. in US. WHOIS lists iana:292 as the registrar.
Nutrition Label
Resolution chain
ransomware.site resolves to 12 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.
| IP | Prefix | ASN | Operator | Country |
|---|---|---|---|---|
| 13.219.34.162 | 13.216.0.0/13 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 3.216.47.174 | 3.208.0.0/12 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 44.195.249.105 | 44.192.0.0/11 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 44.214.28.122 | 44.192.0.0/11 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 52.204.113.240 | 52.200.0.0/13 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 52.72.196.124 | 52.72.0.0/15 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 54.145.104.154 | 54.144.0.0/14 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 54.161.216.166 | 54.160.0.0/14 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 98.85.172.57 | 98.80.0.0/13 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 100.50.89.231 | 100.48.0.0/12 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 52.55.161.16 | 52.54.0.0/15 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
| 98.80.3.112 | 98.80.0.0/13 | AS14618 | AMAZON-AES - Amazon.com, Inc. | US |
WHOIS identity
- Registrar
- iana:292
- Organization
- dnstination
- Contact emails
Subdomains
1 observed subdomain of ransomware.site.
| Subdomain |
|---|
| wildcard.ransomware.site |
Threat posture
History
Mail and authentication
MX records
SPF policy
4 SPF mechanisms authorising senders for ransomware.site.
| Mechanism | Target |
|---|---|
| SPF_A | ransomware.site |
| SPF_IP | 107.23.16.222/32 |
| SPF_IP | 54.173.83.138/32 |
| SPF_MX | ransomware.site |
Related pages
Pivot deeper into the graph from ransomware.site.
- IP · 13.219.34.162
- ASN · AS14618AMAZON-AES - Amazon.com, Inc.
- Registrar · iana:292
- Country · US
- Email · domains@wombatsecurity.com
- TLD · .site
- Browse hostnames · ra…
- Glossary · What is a hostname?
- Whisper Internet Directory — home
- Live MOAS conflicts feed
- Threat feed · Spamhaus DROP
- United States internet infrastructure
Cypher and MCP
Reproduce the resolution chain directly against graph.whisper.security:
MATCH (h:HOSTNAME {name: "ransomware.site"})-[:RESOLVES_TO]->(ip:IPV4)
-[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
-[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20Or query Whisper from your own LLM workflow via the Whisper MCP server.