63.251.235.76 Threat Intelligence and Host Information

Dec 07, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 63.251.235.76 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 50/100

Host and Network Information

  • Mitre ATT&CK IDs: T1003 - OS Credential Dumping, T1027 - Obfuscated Files or Information, T1035 - Service Execution, T1036 - Masquerading, T1043 - Commonly Used Port, T1053 - Scheduled Task/Job, T1055 - Process Injection, T1056.001 - Keylogging, T1056 - Input Capture, T1057 - Process Discovery, T1059.007 - JavaScript, T1059 - Command and Scripting Interpreter, T1068 - Exploitation for Privilege Escalation, T1071.001 - Web Protocols, T1071.003 - Mail Protocols, T1071.004 - DNS, T1071 - Application Layer Protocol, T1082 - System Information Discovery, T1083 - File and Directory Discovery, T1090 - Proxy, T1105 - Ingress Tool Transfer, T1106 - Native API, T1110.002 - Password Cracking, T1114 - Email Collection, T1119 - Automated Collection, T1126 - Network Share Connection Removal, T1129 - Shared Modules, T1134.004 - Parent PID Spoofing, T1136 - Create Account, T1140 - Deobfuscate/Decode Files or Information, T1143 - Hidden Window, T1173 - Dynamic Data Exchange, T1176 - Browser Extensions, T1179 - Hooking, T1210 - Exploitation of Remote Services, T1410 - Network Traffic Capture or Redirection, T1423 - Network Service Scanning, T1427 - Attack PC via USB Connection, T1445 - Abuse of iOS Enterprise App Signing Key, T1450 - Exploit SS7 to Track Device Location, T1453 - Abuse Accessibility Features, T1472 - Generate Fraudulent Advertising Revenue, T1497 - Virtualization/Sandbox Evasion, T1518.001 - Security Software Discovery, T1518 - Software Discovery, T1546.015 - Component Object Model Hijacking, T1546 - Event Triggered Execution, T1563 - Remote Service Session Hijacking, T1566 - Phishing, T1573 - Encrypted Channel, T1588.004 - Digital Certificates, T1588 - Obtain Capabilities, TA0004 - Privilege Escalation

  • Tags: a1ginaprincipal, a9dia, aaaa, aaaa nxdomain, a about, accept, accept encoding, acint, address, address first, address google, admin email, a domains, adware, adwind, a fleecy, agent, ai, aig, AIG Claims, alberta, alberta meta, alexa, alexa proxy, alexa top, all octoseek, all search, analysis, analyzed, anonymizer, antivirus, a nxdomain, apache, api blog, appdata, apple ios, applicunwnt, april, artemis, as13335, as139021, as14061, as14720 gamma, as15169 google, as16276, as20940, as29789, as30148 sucuri, as31898 oracle, as396982, as396982 google, as397241, as40509, as44273 host, as54113, as62597 nsone, as7922 comcast, as8075, as autonomous, ascii text, asn15169, asn16276, asn209242, asn4583, asnone, asnone country, asnone united, august, australia, awful, azorult, back, bank, banker, bankerx, bazaloader, beach research, beginstring, behav, binary file, blacklist, blacklist http, blacklist https, blacknet rat, blockchain, body, body length, bot, botnetwork, bradesco, brian sabey, brontok, camera usage, canada unknown, certificate, checked url, child teen content illegal, chrome, cisco, cisco umbrella, city, ck id, ck matrix, class, classic poems, cleaner, click, cname, cobalt strike, code, coinminer, college, colorado, communicating, comodo rsa, conduit, contacted, content length, content type, control server, cookie, copy, copyright, core, count blacklist, country unknown, covid19, crack, creation date, critical, customer, CVE-2023-4966, cyber security, cyber stalking, cyber threat, cyberwar, data center, date, dbatloader, de indicators, delete, de page, de summary, detail domains, detection list, device control, djin, dnspionage, dock, docs pricing, domain, domain related, domains, domains show, domain tree, downer, downldr, download, download csv, downloader, driverpack, dropped, dropper, ecdhersa, edmonton, edsaid, email, emails, emotet, encrypt, engineering, entrie, entries, error, et, et tor, et useragents, events, execution, exit, expiration date, expirestue, exploit, extraction, facebook, factory, faculties, fakealert, falcon, falcon sandbox, fareit, february, federal credit, file, files, files location, filetour, final url, financial, find, firehol, follow, formbook, for privacy, frames domain, france mail, france unknown, frankfurt, free poems, friendship poems, fuery, fusioncore, gb summary, general, general full, generator, generic, genkryptik, geotracking, germany, get h2, getprocaddress, glupteba, gmbh version, gmt content, gmt united, google, gsqueue, gtmkr32, gts ca, hacktool, hallrender, hallrender.com, hashes, headers, health, heaven, heavens, her beam, herself, heur, hidden users, historical ssl, hong kong, host, hosting, hostname, hostnames, hostname server, html info, http, http header, http response, hwp support, hybrid, icedid, ice fog, icon, iframe, indicator, indicator facts, inject, installcore, installer, installpack, internet storm, iobit, ioc, ip address, ipasns ip, ip information, ip summary, ipv4, IPv4 13.75.251.189 scanning_host, isotope, january, javascript, jpeg image, js, json url, june, kali, kb body, kb image, keygen, keylogger, keyloggers, known tor, kong asn, kuaizip, laplasclipper, leasewebuklon11, life, links certs, local, localappdata, location hong, location united, login, london, love poems, low risk, lumma stealer, mail collection, mail spammer, main, malicious, malicious site, malicious url, maltiverse, maltiverse safe, maltiverse top, malvertizing, malware, malware found, malware host, malware site, march, mark, mark brian sabey, markmonitor, media, mediaget, medium, medium high, memcommit, message interception, meta, metastealer, meterpreter, metro, milemighmedia, million, mimikatz, minimal low, mirai, misc attack, mitre att, mitre attack, monitoring, moth callback, moved, msie, mtis, multi scan, mwin, name servers, name value, name verdict, nanocore, nanocore rat, netsky, network traffic, news, new zealand, next, Nextray, nimda, nircmd, njrat, no data, node tcp, node traffic, november, ns nxdomain, null, nxdomain, occamy, open, opencandy, otx octoseek, outbreak, page url, parent parent, passive dns, patcher, path, pattern match, phishing, phishing site, png image, poem, poems, poem topics, poetry, pony, pornhub, postal code, prefetch8, presenoker, present mar, privacy admin, privacy billing, problems, protect, protocol h2, proud evening, proxy, psexec, ps ord, pty ltd, pulse indicator, pulse pulses, pulse submit, python, qakbot, qbot, quasar rat, query type, raccoon, radar ineractive, radar tracking, rank, ransomware, read c, record type, record value, redacted for, redirector, redline stealer, referrer, refresh, regex, registrar, registrar abuse, registrar url, rejected sample, related nids, relayrouter, relic, remote attacks, requested, research, resolutions, resource, resource hash, response ip, revengeporn, reverse dns, riskware, romantic poems, roundup, runescape, sabey, safe browsing, safe site, sample, samples, satellite tracking, scan endpoints, scanning host, scanning_host, screenshot, script, script urls, search, search live, sec ch, secrisk, secure server, security, security risk, security tls, seen asn, seen last, server, servers, service, services, sha256, shone pale, show, showing, show technique, siblings, site, size68b type, skynet, skynet bot, soa nxdomain, soc, social engineering, softcnapp, software, sorano, south carolina, spammer, span, sport, sql, ssl certificate, star, startpage, stateprovince, static engine, status, status code, status hostname, stealer, story, strings, subdomains, summary, suppobox, suspic, svg scalable, swrort, system, systweak, tag count, tag manager, tags, tags none, tag tag, tcp traffic, team, team proxy, text archiver, than, thomsonreuters, thou bearest, threat report, threat round, threat roundup, threats, tiggre, tofsee, tools, topic, topics, tor known, tor relayrouter, tpp wholesale, trackers google, traffic, trojanspy, trojanx, tsara brashears, ttl value, tue apr, tue mar, twitter, umbrella rank, union, united, united kingdom, university, unknown, unknown traffic, unlocker, unruy, unsafe, update, upgrade, url analysis, url history, url http, url https, urls, urls date, urls http, url summary, ursnif, value, variables, vector graphics, view details, wacatac, waypoint object, webtoolbar, westlaw, westlaw njrat, whitelisted, whois record, whois whois, wholesale pty, win64, windows nt, write, x powered, xrat, x sucuri, xtrat, yandex, yara detections, yndx, zbot, zeus, zpevdo, zuorat

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: coinbl_hosts

  • Country: United States
  • Network: AS29791 internap holding llc
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Netherlands, Norway, Poland, Romania, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: ueqpyt.org wwq8l.com nmcfxjktw.info www.rlpiox.sky-sync.pw tcgvz.sky-sync.pw rlpiox.sky-sync.pw izxyb.sky-sync.pw zkslwp.sky-sync.pw lomqeb.sky-sync.pw jdhni.sky-sync.pw qzanrw.sky-sync.pw e.alphastand.top uyyhfwrmwggvjclsacvx.com a9mf.com answerexcept.net duvwq.sky-sync.pw iwjsyyorkupyvrppopgk.com weakhard.net www.73b5ae35.top dnlfw.net xinchaobacdja.net decembereach.net btlmhwrlioka4v.com ehjnnveflxqelvqayqgl.com kqidj.com gpqrk.sky-sync.pw xinchaoajcdja.net smokebutter.net ezwvt.sky-sync.pw zyxqvj.sky-sync.pw rtlmh.sky-sync.pw pudjf.sky-sync.pw mastermanmaddison.net wmyszlame.info jacquelynmartinson.net weakfull.net ysgjxtdtxut.biz zepsgpn.biz wskoageoya.net www.gainusual.net 21c66ab3.top frmvg.sky-sync.pw suxivz.sky-sync.pw rooseveltsymphony.net irwujlothpg.info 1kclv.com 9f27673e.top mcryi.sky-sync.pw tnshkr.sky-sync.pw uyafqw.sky-sync.pw dzest.com juwlm.sky-sync.pw p32y.com ywlojn.sky-sync.pw eaqbncbv.net xmzbt.sky-sync.pw bvsqn.sky-sync.pw ivwlu.sky-sync.pw imboj.sky-sync.pw bprxj.sky-sync.pw dglsmvn.com somatoka51hub.net 9lfm.com fukbz.com kexjuz.sky-sync.pw dzxct.sky-sync.pw loktac.sky-sync.pw sorryocean.net wcjjxqkhvcbogydssxjb.com mja1n3bvakjjouxir0z.com gainusual.net amlufg.sky-sync.pw wrpts.sky-sync.pw cwk6.com www.14eq6.com ugdyr.sky-sync.pw ntsqp.sky-sync.pw christinewinchester.net simplestraight.net dyzcmboo.info bkqpqrfwdyjwykoftpwl.com seoclhdxwdi.biz nolqfsqtmjbjbjbicwwm.com fncrpu.sky-sync.pw bauxys.sky-sync.pw xzsket.sky-sync.pw axofy.sky-sync.pw cosvtq.sky-sync.pw pnokby.sky-sync.pw motherpromise.net xinchaobbcdia.net hfap7.com oxt1.com e6fb.com fairu-blog.xyz bideo-blog.xyz privatproxy-chat.xyz fairu-cdn.xyz lajcwe.sky-sync.pw vahke.sky-sync.pw qdvyuh.sky-sync.pw hkbty.sky-sync.pw pbdqu.sky-sync.pw ocgix.sky-sync.pw gmkjdu.sky-sync.pw fnlexu.sky-sync.pw hanifl.sky-sync.pw grohl.sky-sync.pw hiukqw.sky-sync.pw lkapvn.sky-sync.pw miobj.sky-sync.pw dhnse.sky-sync.pw viewsaturday.net jnsez.info hbyypck.com royicj.sky-sync.pw tjgca.sky-sync.pw vxotc.sky-sync.pw android-power.space 58fei.xyz sensescene.net pcmyqkotpn.info ow9f.com 14eq6.com jpwaz.sky-sync.pw 7g4a.com whxsghxegefwlyo.com bfthuqithfdhgvmqy.com hcmgyz.sky-sync.pw wellsince.net calllift.net shaquillejohnathon.net 9ezd.com 6a090054.top 44e645b3.top 408c3c24502a0.org wellbest.net lpmyfmga.biz 9noz.com c83c8a2e.top 623e5b79881a7.org lwgwwpyl.com qhnvtdrh.net deepdmp.com 1406df24.top e7f4114e.top mvqmbwgk.biz shallhigh.net bwgssstunt.net www.a6ce42c4.top xlhhcwlgujapcxnkdpjr.com y5jaw.com 9yel.com agbzl.sky-sync.pw gfnxxrt.info twgyvwvxpmjzadbwmn.com ebrouteindia.com wobgz.sky-sync.pw eyigcs.sky-sync.pw deqpjn.sky-sync.pw vwfid.sky-sync.pw mja1mnbvakjjouxir0z.info tnenicwefqckieon.com w5vq.com ehdnlrxbsocnvbydwstk.com qbzlm.sky-sync.pw qebjx.sky-sync.pw fzrvp.sky-sync.pw eaydm.sky-sync.pw rapqb.sky-sync.pw vdbeyw.sky-sync.pw swodqe.sky-sync.pw feuhdeuhduhuehds.top frpwly.sky-sync.pw doublenothing.net krystelleboniface.net fpbscufywwtvqwtjgreh.com www.probablycomplete.net hrgopqxr.info ctcpavaffdyjhutcnmxy.com quintellaandrewson.net eedcljjlucidamnrdvmu.com 2izj.com mzwjhu.sky-sync.pw zmtfnu.sky-sync.pw jrdgak.sky-sync.pw bh3s.com a78ydu2.com qwrtml.sky-sync.pw muicl.sky-sync.pw wmljo.sky-sync.pw gjatix.sky-sync.pw qbpzag.sky-sync.pw sky-sync.pw jhiaf.sky-sync.pw ugbint.sky-sync.pw jizsax.sky-sync.pw ynzufx.sky-sync.pw snqbf.sky-sync.pw lcebzd.sky-sync.pw juavmf.sky-sync.pw ilrdkb.sky-sync.pw xzuef.sky-sync.pw mlsix.sky-sync.pw pmuzba.sky-sync.pw txnkey.sky-sync.pw achibs.sky-sync.pw qskfv.sky-sync.pw krystellemathewson.net 3xiw.com leastgrain.net so7j.com 6eb625058a4f.org 0629304d.top meiqos.sky-sync.pw dlhxvpopyycnolebmcrp.com probablycomplete.net digsjabhddtlkupxwoei.com uqzvyockas.org 0b376ad78a676.org xinchaocdcdga.net qiqnzd.biz alongnerve.net cawiufzsc.info mjuymdizcg9qqkk5teh.xyz owuzsucmq.net zdfcoe.info vyphd.com l1o5.com a1.mydataprovider.in aissueseekingmoonpluto.com hucztrb.biz columbinewinterbottom.net defieopfytbwtrrkbiwc.com m0bz.com yc0g.com vawsmemnkddxxbjbatcw.com agoriiiugkeq.biz strengthcomplete.net mja0n3bvakjjouxir0z.info ssbmnadrt.biz atacmwruhkwhosjojiyp.com spendwall.net ovmjdc.biz 9bc1a497a12c8.org www.6920c6355e4ee.org offergrown.net eiheiqtmdcotlannelug.com l-i-1-0-5-e-1-5-3-u-6-f-i-0-4-2-8-9-4-f-7-t-s-y-f-r-0-7-w-5-y-.0-0-0-0-0-0-0-0-0-0-0-0-0-22-0-0-0-0-0-0-0-0-0-0-0-0-0.info breadarticle.net vjaqqyerwiarpysbjhap.com apk2.mydataprovider.in apk1.mydataprovider.in zx6v.com nolqfqseprjiswfwdywr.com pavlmgfboxrgpwgwncte.com 73b5ae35.top b5743da22428.org do1ne.com c6yt.com c80o.com qwetpwiugkeq.biz ov1x.com uirhw.com thoseoclock.net 6920c6355e4ee.org rebeccanneshaquila.net euavgtnh.biz kqjldw.net simonettevictorson.net yp8v.com x23.kokwdhot.com hchbmowkjvlgwtkbmxht.com x71b.com axldvweraoqruymqnylf.com casesing.net wvqtwafwwgvmkdpvfuya.com ifvbetuonwcmwakhcknp.com vzcfqiks.biz v7k5.com ykmhayqgjlynjakhvryb.com niogjmgimrrpavfdules.com riifndisojdojsrigh.biz www.tbjrpv.biz pmf2.com xinchaobfcdfa.net vaewh.com fc4ot.com arivewhole.net yhaaiqrfmwsdauuldfji.com crvpa.net qcaiwjvmutpwltoxisnk.com a6ce42c4.top wrongwhere.net thickdistance.net hanglight.net doubstraight.net kiwmijyhwox.org y83r.com ahbufol.net iqqlh.com oivpucduhbjlvjqltqkw.com erijcyaisfsvpboxuiec.com beta.groupwall.net dfbijfhcpo.com 176-117-255-233.avicom.tv cdn.uspcworks.com 43bwabxrduicndiocpo.net 176-117-255-249.avicom.tv ivitgsmhdiuuoygberuy.com edoxlfmgkcpnqehgvyvw.com hlgrtfzhyi.biz bdqbkvnhygyrtqifxmmb.com 9kro.com www.lbiatgaer.biz jflfynwcvgxbhjuwqfjt.com utbdupqxwhhmrutuhcoj.com 67e032fa.top obyihydlqu.org cloudthey.net dxqaz6k85i.ru 3scz.com k6ub.com d4dc3682.top qtdsmhagcqmdnryapjey.com cyskqkuiwcymao.info wnobwvsplnxkhgckbw.com dadd779866f24.org fbtmdswerb.com 4be4dc4d.top equalhurt.net wlwtwhyj.com sflvwjwz.net homeoptic.net.ua i7sma.com b7nb.com xinchaobdcdea.net rathernotice.net xafkiyxq.info qcrpetkrruojbyldfhcp.com runmodes.com joxnxlqxxgukhspnhxbf.com warylmiwgo.com cbswtkwwcagaixsawyue.com www.2f47ff4959370.org ablekind.net q11eb.com unityprodeepl1.fcfc.one unitydrepl1.fcfc.one sgpvhhrajlgibgsokvyv.com lgimrrpavfdulgubhmik.com heardstream.net gkcasvonrx.biz www.runmodes.com nbajvt.info api.jetrohe.pw tedxns.com www.tedxns.com errors.datademoserv.com fd261e68815ad.org lbiatgaer.biz stwplbwqqpfunclodxvl.com qzotintec.biz nrmmsldwboerhwbobxwd.com 9gwo.com c064cccc08c96.org qxnqf.com onxssfouxivkgwgvgtrv.com triedfood.net l.gettvwizard.com spendgrain.net www.thethisandandcompetition.com n.lomoni.be iddroacyckdgpfpahhwq.com bfkxhexssdrkuaprlvyb.com nh5c.com www.ccauqpjoidfdhttinfku.com 2f47ff4959370.org b502637e37de4.org ctebajoh.org daagxuqcqfkrvqayorwl.com npxrqvwpduuyfujqqdyv.com ayoclxfkqvghfvrrexoq.com www.uunupslcgaoeqkpxqola.com lbqqwgvatpqhceyfiqcn.com middleproud.net dreamouter.net utnbngvyfeugltpqhcbo.com kbopyfsyckrbige.ru 3867bcff.top ksgtn.com nrsbxdbecxspwfx.ru www.nrsbxdbecxspwfx.ru www.zachariahcotterill.net meriwetheresmaralda.net ccnimkqfdnwrflpdooib.com drinkbreak.net wmjrkaccaobuuuyyctmb.com thethisandandcompetition.com vwkiunbicgydmcohecxv.com etdhrtaeiucogqqlwxvv.com satngkrc.com wxafi.com vajymkngaeqqpqkfxymh.com hxwmapjylneybplbfbrp.com phchklvsllxurvgogncb.com www.mgmsclkyu.biz 03363c50a8660.org kigbjopqj.biz ccauqpjoidfdhttinfku.com 03a0b06a1d78d.org sightcause.net ch7a.com vynlcwfbwyuuvwnjolcy.com lcgkqstbfkqfkibcomun.com qynmkrfl.com 9a4nqu3m.ru rkphklelf.ru microsoft.updatet.net hljqhaff.biz ofkdzadjmi.com htpeg.biz rlffhpo.biz www.thoughtchance.net belongproud.net effortneedle.net wxgwbqmbxmc4s.com uunupslcgaoeqkpxqola.com www.ohbvakjjouxir0zkzmd.com georgeannapleasance.net fbtqqijsmhriawnbepaj.com vinrududuotbqwktqpyk.com www.thomasinaseabrooke.net zachariahcotterill.net wheelyesterday.net tilledge.net mjazmnbvakjjouxir0z.net vwkiurwcamrglapjunbj.com umqfrs.biz xuasgkksovmeqqpesado.com 6jfb.com 1cwv.com fridayagain.net byxhgkp.info tfzgfnvx.biz tkiuyweevyfbojsdqftd.com womanreport.net qch0.com ocdpdqqpstmgyddlygni.com d2h8nr6amvqd6i.cdnora.com alexanderwakefield.net thoughtchance.net mukqchjvvsonynejngfp.com lyisvbvrvyrsxtajmygv.com p2.silvernemo.com myvxplcjegqbhjthqdfp.com www.upeg-system-app.com wuotjnc.net ohbvakjjouxir0zkzmd.com x11.kokwdhot.com x33.kokwdhot.com 81a2a7dbe4dd4.org weekword.net dvmcdoqv.net upeg-system-app.com r4kj.com xxbduxhkdqodlhxtrlgk.com yttefpcuxyenggurjwvt.com thomasinaseabrooke.net ymrnhgfyhpkvhcjqanhp.com pointdaily.net swhopbb.biz rxrnvwcaueutpdajrkxc.com 9d50c6f2.top dxqaqubg.info ggjwdwyxrwdoaucuinte.com www.rdullqhkjmwyhtlqvnyr.com www.uspcworks.com nslook005.com possibleschool.net f43810fd.top qqfwnxjfiqxilmslexgm.com pteqltfkdagpeocitnei.com asfjjasguasus.xyz severalbasket.net rnetcl.biz nuoujkmhktsrfsdakmhe.com mewdrpdaelgcmhj.com gweneveremarigold.net hcrrvbpleokwfquxmieu.com motherstrong.net www.rsmwnrpmnh.org pgrzd.com tbjrpv.biz jenkins.abbny.com anihejaj.com mjrtqvuafgivebhwygrv.com rt9p.com 21ce877a.top lbmjzcyt.biz

Malware Detected on Host

Count: 5382 d8e610d6470c8c33d482fa16070ec11f59629eb25401a240d25ef07b4b2c3e5a 8cbc50473ea68be942987ec7fb0c7fa352344f809d277bc9206ad3bd4ed4f3ba 5a8e291a2df03d05a45d5a8763a31f97f63543ad51a624a8ba30b7269796a9de 3c67682798fc5be0de9193ab42788ecaffc031c23463bf1fda9cfd9b214f3633 7c204e2c2c0891058d037a3c42fd96c0f6f71f99cb00dde198045684695ad94b 4ceecc45483f5daaf1c738b66b4e2e243759bbba34a49c81dd1d571ec7aa9fdb 9102d384369ecc739f17fb5c26a35d148bbc5fe0555c08af5ef0cbd89fc469db 3b5ffbfad6f54c7346b9421b444a4f5678e80becd8fc86da377969e3bedc3b17 bb0a3d962736ec2f7d87b72ffe5154859f4c54b1283d9d4e4b3c675b40f518ed 9a3e851cf4d791219599f7c537a43a3f6bfbddd1f66276b6cfd43a27f5032626

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: