IoC Investigation

socks-proxy.net

DOMAIN IN DATABASE

Domain · threat 0.50 · 19× seen · 0 datasets · IP Blocklists · last seen 7h ago

🔄 Pivot:📁 IP Blocklists

Threat Score

0.50

Sightings

19
0 sources

Detected Type

DOMAIN

Enrichments

1

Related IoCs

20
URL / Domain Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Domain / URL Intelligence

Hostsocks-proxy.net
RegistrarCloudflare, Inc.
OrgData Redacted
Abuse Contactregistrar-abuse@cloudflare.com
CountryHK
DNS / WHOIS Dossier DNS Audit Passive DNS ↗ Subdomains (crt.sh)

Seen in Datasets (0)

Not linked to any dataset.

Enrichments

classification

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ urlscan.io ↗ SecurityTrails ↗ crt.sh ↗ ThreatFox ↗ URLhaus Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
45.9.168.117 IP IP Blocklists investigate →
223.204.246.3 IP IP Blocklists investigate →
223.123.124.127 IP IP Blocklists investigate →
223.123.32.157 IP IP Blocklists investigate →
223.109.224.118 IP IP Blocklists investigate →
223.90.17.28 IP IP Blocklists investigate →
223.88.106.246 IP IP Blocklists investigate →
223.74.113.252 IP IP Blocklists investigate →
223.74.81.145 IP IP Blocklists investigate →
223.11.211.128 IP IP Blocklists investigate →
222.176.201.55 IP IP Blocklists investigate →
222.176.201.42 IP IP Blocklists investigate →
222.176.200.241 IP IP Blocklists investigate →
222.176.200.130 IP IP Blocklists investigate →
222.176.200.67 IP IP Blocklists investigate →
222.176.200.59 IP IP Blocklists investigate →
222.176.200.39 IP IP Blocklists investigate →
222.176.200.15 IP IP Blocklists investigate →
222.175.7.172 IP IP Blocklists investigate →
222.169.71.65 IP IP Blocklists investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--10fc3a2f-6f07-41d2-afa4-00006a5403a0",
    "created": "2026-08-25T21:48:49Z",
    "modified": "2026-08-25T21:48:49Z",
    "name": "Domain: socks-proxy.net",
    "pattern": "[domain-name:value = 'socks-proxy.net']",
    "pattern_type": "stix",
    "valid_from": "2026-08-25T21:48:49Z",
    "labels": [
        "ip blocklists"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center