104.21.54.91
IP address · suspicious phishing activity
URLs
1Brands targeted
1TLS issuers
1- Country
United States- Investigate
-
urlscan
VirusTotal
ipinfo
Greynoise
A single IP address can host many unrelated websites at once, especially behind shared hosting or a CDN. Several detections on one address often mean a shared server or reverse proxy is being abused, not that every site behind it is malicious.
1 of these detections belongs to possible campaign 12de20e79952 (3 domains · 3 hosts)
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-09-13 03:30 | 2026-09-13 02:01 |  |
PhishTank | Details |
Info
- Country: United States
- Hosting provider: Cloudflare, Inc.
- ASN: AS13335
Analyze IP
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| URL | Screenshot | Flags | Details |
|---|---|---|---|
| http://allegrolokalnie.oferta… | |
PhishTank | Details |