138.197.166.118

IP address · suspicious phishing activity

URLs

Brands targeted

TLS issuers

Country: Canada
Hosting: DigitalOcean, LLC
ASN: AS14061
Network: DigitalOcean CA · rentable hosting · 138.197.160.0/20
Official provider IP range of this IP. Context only, not a verdict.
Investigate: urlscan VirusTotal ipinfo Greynoise

A single IP address can host many unrelated websites at once, especially behind shared hosting or a CDN. Several detections on one address often mean a shared server or reverse proxy is being abused, not that every site behind it is malicious.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Screenshot	Flags	Details
2026-10-19 23:30	2026-10-16 13:12	https://danielnegru.com/adobekr.html		OpenPhish	Details

Info

Country: Canada
Hosting provider: DigitalOcean, LLC
ASN: AS14061

Analyze IP

urlscan.io VirusTotal ipinfo

Greynoise

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://danielnegru.com/adobe… OpenPhish		Details