URL / Domain Profile

🌐 3p8801.co

DOMAIN · host 3p8801.co · threat 0.50 (HIGH) · Scam
First seen 2026-08-06 13:08:35 · last seen 2026-08-06 14:41:00
🔄 Pivot:📁 Scam

Threat score

0.50
MEDIUM

Sightings

2
1 sources

Subdomains (local)

0
from indicators

Related IPs

11
A/AAAA records

DNS records (local)

0
0 types

Reporting sources

1
1 enrichments
PIVOT🌐 Domain Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Scam
1
1 total source links on this indicator.

🏷 Tag breakdown (domain family)

scam
1
medium-severity
1
auto-tagged
1

📈 DNS record-type counts

No data.

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

No cached WHOIS for 3p8801.co. Resolve & cache.

🏷 Tags

medium-severity scam auto-tagged
CategoryScam
SeverityMEDIUM

📡 DNS Records

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A luojiecdn.cdnjx.cc. 600
A ljcdn.ejfbiu8dc.com. 300
A 449e1148.kjvniqwdwq.com. 600
A 156.225.28.29 600
A 154.201.68.152 600
A 154.222.16.134 600
A 154.222.16.144 600
A 154.201.68.156 600
A 156.225.28.32 600
A 156.225.28.26 600
A 154.201.68.131 600
A 154.222.16.130 600
A 154.222.16.141 600
A 154.201.68.144 600
AAAA luojiecdn.cdnjx.cc. 600
AAAA ljcdn.ejfbiu8dc.com. 300
AAAA 449e1148.kjvniqwdwq.com. 600
MX luojiecdn.cdnjx.cc. 600
MX ljcdn.ejfbiu8dc.com. 300
MX 449e1148.kjvniqwdwq.com. 503
NS ns1.dnsip.com. 21600
NS ns2.dnsip.com. 21600
TXT luojiecdn.cdnjx.cc. 600
TXT ljcdn.ejfbiu8dc.com. 300
TXT 449e1148.kjvniqwdwq.com. 600
CNAME luojiecdn.cdnjx.cc. 600

🖥 Related IPs (11)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

156.225.28.29 → 154.201.68.152 → 154.222.16.134 → 154.222.16.144 → 154.201.68.156 → 156.225.28.32 → 156.225.28.26 → 154.201.68.131 → 154.222.16.130 → 154.222.16.141 → 154.201.68.144 →

🌐 Subdomains — local intel (0)

No subdomains of 3p8801.co in local intel. Check crt.sh ↗

📡 Reporting Sources (1)

ScamAdviser-esque OISDScam

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🧩 Enrichment Data (1 records)

classification Aug 21, 2026
{
    "ioc_type": "other",
    "category": "Scam",
    "threat_score": 0.5
}

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown