RaqibCTI
DOMAINSUSPICIOUS

stcpay[.]online

Sourced from typosquat
Type
domain
Risk score
3 / 3
First seen
2026-09-23
Last seen
2026-09-23

Passive DNS

Historical resolution (pDNS)
Historical IPs
166[.]62[.]28[.]81
Subdomains
www[.]stcpay[.]online
pDNS first seen
2020-01-11

Infrastructure fingerprint

Censys
ASN
26496 · AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
SSH host key SHA-256
c619e3d05b1cb579
Open ports
21, 22, 25, 80, 110, 143, 443, 587, 993, 995, 2077, 2078

Historical hosting pivot

Validin
Co-resolved domains (243)
webmail[.]vmpro[.]asia, krbl[.]ltd, byflearn[.]store, whatscooking[.]blog, refwayne[.]co[.]za, www[.]refwayne[.]co[.]za, webdisk[.]makaluadventure[.]ca, autodiscover[.]makaluadventure[.]ca, mail[.]vmpro[.]asia, mail[.]xtremedia[.]cc, admin[.]krbl[.]ltd, www[.]byflearn[.]store, webdisk[.]whatscooking[.]blog, webmail[.]whatscooking[.]blog, whm[.]whatscooking[.]blog, admin[.]whatscooking[.]blog, makaluadventure[.]ca, cpanel[.]makaluadventure[.]ca, www[.]makaluadventure[.]ca, mail[.]refwayne[.]co[.]za, webdisk[.]yfgaming[.]cc, mail[.]yfgaming[.]cc, whm[.]yfgaming[.]cc, admin[.]yfgaming[.]cc, cpanel[.]krbl[.]ltd, webmail[.]krbl[.]ltd, whm[.]krbl[.]ltd, www[.]krbl[.]ltd, autoconfig[.]whatscooking[.]blog, ftp[.]whatscooking[.]blog, www[.]whatscooking[.]blog, autoconfig[.]makaluadventure[.]ca, mail[.]makaluadventure[.]ca, webmail[.]makaluadventure[.]ca, whm[.]makaluadventure[.]ca, admin[.]makaluadventure[.]ca, mail[.]vmgs[.]asia, webmail[.]vmgs[.]asia, webdisk[.]refwayne[.]co[.]za, cpanel[.]refwayne[.]co[.]za

ThreatMiner

No ThreatMiner enrichment
Registrant / related-sample enrichment is pending for this indicator.