banking.bankaustria.at.dswcontracting.work
Checking live DNS resolution...
100/100
CRITICAL RISK
22
Malware URLs
1
Resolved IPs
3
Abuse Reports
22
Active URLs

Threat Intelligence Summary: banking.bankaustria.at.dswcontracting.work

Risk Level: CRITICALThreat Score: 100/100

Assessment: banking.bankaustria.at.dswcontracting.work is actively hosting 22 malware URLs across 1 resolved IP address. The number of active endpoints suggests ongoing, organized malware distribution. This domain should be blocked at the DNS or firewall level. Malware families associated with this domain include elf, mirai, botnetdomain.

Recommendation: Block immediately at DNS and firewall level


Total Malware URLs: 22 — Active: 22 — Resolved IPs: 1 — Abuse Reports: 3

First Seen: 2025-10-21T15:28:08 — Last Online: 2025-11-20T03:51:36

Data aggregated from threat intelligence feeds including URLhaus and community reports.

Domain Threat Analysis

banking.bankaustria.at.dswcontracting.work has been associated with 22 malware URLs , of which 22 are currently active . The primary threat types are malware_download, malware.

Active threat. This domain is currently serving malicious content. Multiple malware URLs have been identified on this domain. Network administrators should consider blocking this domain or monitoring traffic to it closely.

Look Up Another Domain or IP

Check any domain or IP address against our threat intelligence database.

Access This Data via API

Integrate WAYSCloud domain threat intelligence into your security tools, SIEM, or firewall rules. Query any domain programmatically for malware URLs, resolved IPs, and threat scores.

API Documentation Integration Guide

See how we classify and verify threats →

Related Threat Intelligence

Top Threats Today Latest Attacks Active Malware Domains Understanding Botnets SSH Attack Explainer How to Block Threats What is a Phishing Domain? About Malware Distribution Check Another Domain
Timeline
First Seen
2025-10-21T15:28:08
Last Seen Online
2025-11-20T03:51:36
Data Last Updated
2026-05-04T06:28:50.407226
Status Activity Timeline (20 changes recorded)

Complete history of all status changes detected for URLs on this domain. Tracking online/offline transitions helps identify malware lifecycle patterns.

ONLINE
http://banking.bankaustria.at.dswcontracting.work/sh
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/adb
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/vac
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/byte
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/spring
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/tplink
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/link
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/payload.xml
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm5
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.sh4
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.ppc
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm6
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.mips
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.spc
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.x86
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.arc
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm7
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.mpsl
First detected as online
ONLINE
http://banking.bankaustria.at.dswcontracting.work/kvariant.m68k
First detected as online
Associated IP Addresses (1)

All IP addresses this domain has resolved to (current and historical). These IPs may host or have hosted malware URLs.

91.92.241.8
3 abuse reports Severity: high
Malware Classification
elf
Malware family "elf" detected in threat intelligence feeds. This threat is actively monitored. Exercise caution - infrastructure may be compromised or intentionally malicious.
mirai
Infamous IoT botnet source code released in 2016, spawning thousands of variants. Responsible for record-breaking DDoS attacks exceeding 1 Tbps. Spreads by scanning for devices with default credentials. Target routers, cameras, DVRs globally.
botnetdomain
Generic botnet command-and-control infrastructure. Domain used to coordinate infected devices, issue commands, and exfiltrate stolen data. Part of distributed botnet network infrastructure.
sh
Malicious shell script campaign. Bash/sh scripts used for initial access, downloading additional malware, establishing persistence, or cryptocurrency mining. Common in Linux server compromises.
Malware URLs (22)

All malicious URLs identified on this domain. Status reflects last known state from threat intelligence feeds.

https://banking.bankaustria.at.dswcontracting.work/
Active Threat
Type: malware
https://banking.bankaustria.at.dswcontracting.work/
Active Threat
Type: malware
http://banking.bankaustria.at.dswcontracting.work/payload.xml
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
http://banking.bankaustria.at.dswcontracting.work/tplink
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
http://banking.bankaustria.at.dswcontracting.work/byte
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
http://banking.bankaustria.at.dswcontracting.work/kvariant.arc
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm7
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm6
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/kvariant.ppc
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/kvariant.mips
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/kvariant.x86
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/link
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
http://banking.bankaustria.at.dswcontracting.work/kvariant.arm5
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/sh
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
http://banking.bankaustria.at.dswcontracting.work/kvariant.mpsl
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/kvariant.m68k
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain elf mirai
http://banking.bankaustria.at.dswcontracting.work/vac
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
http://banking.bankaustria.at.dswcontracting.work/spring
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
http://banking.bankaustria.at.dswcontracting.work/adb
Active Threat
IP: 91.92.241.8
Type: malware_download
First Seen: 2025-10-21
botnetdomain sh
Showing 20 of 22 URLs