198.251.82.252

IP address · suspicious phishing activity

URLs

Brands targeted

TLS issuers

Country: United States
Hosting: FranTech Solutions
ASN: AS53667
Investigate: urlscan VirusTotal ipinfo Greynoise

A single IP address can host many unrelated websites at once, especially behind shared hosting or a CDN. Several detections on one address often mean a shared server or reverse proxy is being abused, not that every site behind it is malicious.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-10-31 05:30	2026-10-31 01:03	http://roblox.com.kg/communities/368287136176/g-share	OpenPhish	Details
2026-10-31 05:30	2026-10-31 01:03	https://roblox.com.pt/users/986625031023/profile	OpenPhish	Details
2026-10-31 05:30	2026-10-28 13:06	http://roblox.com.gr/communities/872732586781/Lyzin-Paradise	OpenPhish	Details

Info

Country: United States
Hosting provider: FranTech Solutions
ASN: AS53667

Analyze IP

urlscan.io VirusTotal ipinfo

Greynoise

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
http://roblox.com.kg/communit… OpenPhish		Details
https://roblox.com.pt/users/9… OpenPhish		Details
http://roblox.com.gr/communit… OpenPhish		Details