RaqibCTI
Search the threat graph — actor, CVE, technique, victim…
⌘K
◇ SIGN IN
Analyze
/
IOC Graph
/
aramco[.]online
Corpus
DOMAIN
SUSPICIOUS
aramco[.]online
Sourced from typosquat
Type
domain
Risk score
3 / 3
First seen
2026-09-23
Last seen
2026-09-23
Overview
Attribution
Enrichment
Pivots
Passive DNS
Historical resolution (pDNS)
Historical IPs
103[.]224[.]212[.]212, 3[.]64[.]163[.]50, 185[.]83[.]214[.]222, 2a05:d014:9da:8c10:306e:3e07:a16f:a552, 52[.]58[.]78[.]16, 198[.]187[.]31[.]40, 198[.]54[.]115[.]242, 185[.]224[.]137[.]215
Subdomains
www[.]aramco[.]online
pDNS first seen
2019-01-20
Infrastructure fingerprint
Censys
ASN
133618 · TRELLIAN-AS-AP - Trellian Pty. Limited
Open ports
80
Historical hosting pivot
Validin
No historical-hosting pivot
No co-resolved domains recorded for this indicator's infrastructure.
ThreatMiner
No ThreatMiner enrichment
Registrant / related-sample enrichment is pending for this indicator.