indicatordomain
9[.]a[.]d[.]0[.]6[.]3[.]0[.]0[.]0[.]7[.]4[.]0[.]1[.]0[.]0[.]2[.]ip6[.]arpa
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- Abusing .arpa: The TLD That Isn’t Supposed to Host Anything
Base IPv6 reverse DNS domain abused to host phishing content via DGA subdomains.