indicatordomain
8[.]1[.]9[.]5[.]0[.]9[.]1[.]0[.]0[.]0[.]7[.]4[.]0[.]1[.]0[.]0[.]2[.]ip6[.]arpa
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- Abusing .arpa: The TLD That Isn’t Supposed to Host Anything
Base IPv6 reverse DNS domain abused to host phishing content via DGA subdomains.