RaqibCTI
URLSUSPICIOUS

hxxps[://]medmark[.]sa

Sourced from threatfox
Type
url
Risk score
2 / 3
First seen
Last seen
2026-09-09

Passive DNS

Historical resolution (pDNS)
Historical IPs
213[.]227[.]129[.]69, 85[.]17[.]16[.]73
Subdomains
www[.]medmark[.]sa, mail[.]medmark[.]sa
pDNS first seen
2020-11-09

Infrastructure fingerprint

Censys
No infrastructure fingerprint
No Censys ASN, TLS/SSH, or open-port fingerprint recorded for this indicator.

Historical hosting pivot

Validin
Co-resolved domains (250)
pop3[.]pulse[.]sa, webdisk[.]pulse[.]sa, smtp[.]pulse[.]sa, cpcontacts[.]pulse[.]sa, imap[.]pulse[.]sa, projects[.]pulse[.]sa, cpcalendars[.]boroda[.]sa, kbcpa[.]sa, www[.]kbcpa[.]sa, oic[.]sa, mail[.]oic[.]sa, mail[.]fzosc[.]sa, flying[.]sa, www[.]lalccomsa[.]flying[.]sa, www[.]opensky[.]flying[.]sa, sapf[.]org[.]sa, maisarah[.]sapf[.]org[.]sa, www[.]maisarah[.]sapf[.]org[.]sa, webdisk[.]sapf[.]org[.]sa, cpanel[.]sapf[.]org[.]sa, mail[.]sapf[.]org[.]sa, webmail[.]sapf[.]org[.]sa, whm[.]sapf[.]org[.]sa, ftp[.]sapf[.]org[.]sa, smtp[.]sapf[.]org[.]sa, cpcalendars[.]sapf[.]org[.]sa, seminars[.]sapf[.]org[.]sa, www[.]seminars[.]sapf[.]org[.]sa, cpcontacts[.]sapf[.]org[.]sa, www[.]sapf[.]org[.]sa, mail[.]tsa[.]sa, arabtec[.]sa, www[.]new[.]arabtec[.]sa, smoalhadaf[.]sa, ftp[.]smoalhadaf[.]sa, lqs[.]org[.]sa, mnarat[.]mnarat[.]org[.]sa, www[.]mnarat[.]mnarat[.]org[.]sa, webdisk[.]boroda[.]sa, cpanel[.]boroda[.]sa

ThreatMiner

No ThreatMiner enrichment
Registrant / related-sample enrichment is pending for this indicator.