IP
IPv4 159.100.6.5
159.100.6.5
Connected scam domains
4Related entities
29First observed
May 9, 2026Last observed
May 23, 2026Connected Scam Domains (4)
DomainBrandNetworkStatusFirst seen
llc-ecotorgltd.comllc-ecotorgltd.com
quantoracapitalfx.comQuantora Capital FX | CFD- Mining on Stocks, Gold, Oil, Indices
lunexaiv.comLunexa Investment | CFD Trading — Trading on Stocks, Gold, Oil, Indices
nexusmarketfx.comNexusFX Market | CFD Trading — Trading on Stocks, Gold, Oil, Indices
Historical Timeline (5 snapshots)
May 17, 202610:22 PMshodanvia shodan
Orgfirstcolo GmbH
ISPfirstcolo GmbH
ASNAS44066
CountryDE
Changes from previous
~ data: [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object] [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object]
~ tags: self-signed, starttls ai
~ ports: 2096 993, 2082, 995, 2086, 2087, 2079, 2095, 587, 110, 143, 80, 7080, 2083, 21, 22, 443, 53
~ domains: ultacp.com, 0000000werwer0.com bwwelding.com
~ hostnames: webdisk.0000000werwer0.com, 0000000werwer0.com, mail.0000000werwer0.com, cpanel.0000000werwer0.com, cpcontacts.0000000werwer0.com, webmail.0000000werwer0.com, cpcalendars.0000000werwer0.com, cp5.fra1.ultacp.com, www.0000000werwer0.com webdisk.bwwelding.com, autodiscover.bwwelding.com, mail.bwwelding.com, cpcalendars.bwwelding.com, www.bwwelding.com, cpanel.bwwelding.com, webmail.bwwelding.com, cpcontacts.bwwelding.com, bwwelding.com
~ last_update: 2026-05-12T13:21:26.917581 2026-05-17T12:58:40.883855
May 12, 202608:40 PMshodanvia shodan
Orgfirstcolo GmbH
ISPfirstcolo GmbH
ASNAS44066
CountryDE
May 12, 202605:44 PMshodanvia shodan
Orgfirstcolo GmbH
ISPfirstcolo GmbH
ASNAS44066
CountryDE
Changes from previous
~ data: [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object] [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object], [object Object]
~ ports: 993, 2082, 995, 2086, 2087, 2079, 587, 110, 143, 80, 7080, 2083, 21, 22, 443, 2096, 53 2095
~ domains: atenaeshtiaghi.com ultacp.com, 0000000werwer0.com
~ hostnames: cpcalendars.atenaeshtiaghi.com, cpcontacts.atenaeshtiaghi.com, atenaeshtiaghi.com, webdisk.atenaeshtiaghi.com, autodiscover.atenaeshtiaghi.com, mail.atenaeshtiaghi.com, webmail.atenaeshtiaghi.com, www.atenaeshtiaghi.com, cpanel.atenaeshtiaghi.com webdisk.0000000werwer0.com, 0000000werwer0.com, mail.0000000werwer0.com, cpanel.0000000werwer0.com, cpcontacts.0000000werwer0.com, webmail.0000000werwer0.com, cpcalendars.0000000werwer0.com, cp5.fra1.ultacp.com, www.0000000werwer0.com
~ last_update: 2026-05-09T19:38:27.572975 2026-05-12T13:21:26.917581
May 9, 202610:26 PMshodanvia shodan
Orgfirstcolo GmbH
ISPfirstcolo GmbH
ASNAS44066
CountryDE
May 9, 202608:47 PMshodanvia shodan
Orgfirstcolo GmbH
ISPfirstcolo GmbH
ASNAS44066
CountryDE
Have information about this infrastructure?
Your report helps us track and expose these operations.