paypal-logins.com Threat Intelligence and Information
Apr 22, 2022
domainpage
Screenshot

Dig Results
- Got answer:
- -»HEADER«- opcode: QUERY, status: NOERROR, id: 18555
- flags: qr rd ra QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
- OPT PSEUDOSECTION:
- EDNS: version: 0, flags: udp: 1232
- QUESTION SECTION:
- paypal-logins.com. IN A
- ANSWER SECTION:
- paypal-logins.com. 3597 IN A 37.140.192.158
- Query time: 4 msec
- SERVER: 192.168.1.153(192.168.1.1)
- WHEN: Fri Apr 22 20:20:33 UTC 2022
- MSG SIZE rcvd: 62
DNS Records
- SOA server136.hosting.reg.ru 37.140.192.158
- NS ns1.hosting.reg.ru 31.31.194.245
- NS ns1.hosting.reg.ru 31.31.194.251
- NS ns1.hosting.reg.ru 31.31.196.37
- NS ns1.hosting.reg.ru 31.31.196.52
- NS ns1.hosting.reg.ru 31.31.196.61
- NS ns1.hosting.reg.ru 31.31.196.180
- NS ns1.hosting.reg.ru 31.31.198.177
- NS ns1.hosting.reg.ru 37.140.192.20
- NS ns1.hosting.reg.ru 37.140.192.93
- NS ns1.hosting.reg.ru 37.140.193.121
- NS ns1.hosting.reg.ru 37.140.196.144
- NS ns1.hosting.reg.ru 194.58.91.38
- NS ns1.hosting.reg.ru 194.67.73.6
- NS ns1.hosting.reg.ru 194.67.73.9
- NS ns2.hosting.reg.ru 37.140.194.37
- NS ns2.hosting.reg.ru 31.31.198.178
- NS ns2.hosting.reg.ru 31.31.196.71
- NS ns2.hosting.reg.ru 31.31.198.161
- NS ns2.hosting.reg.ru 37.140.192.160
- NS ns2.hosting.reg.ru 31.31.194.244
- NS ns2.hosting.reg.ru 37.140.193.120
- NS ns2.hosting.reg.ru 37.140.192.58
- NS ns2.hosting.reg.ru 37.140.192.55
- NS ns2.hosting.reg.ru 31.31.196.34
- NS ns2.hosting.reg.ru 194.67.73.8
- NS ns2.hosting.reg.ru 37.140.192.31
- NS ns2.hosting.reg.ru 194.67.73.7
- NS ns2.hosting.reg.ru 31.31.196.53
- MX mx1.hosting.reg.ru 31.31.194.241
- MX mx1.hosting.reg.ru 31.31.194.240
- MX mx2.hosting.reg.ru 31.31.194.240
- MX mx2.hosting.reg.ru 31.31.194.241
- A paypal-logins.com 37.140.192.158
- AAAA paypal-logins.com 2a00:f940:2:2:1:1:0:136
- TXT paypal-logins.com v=spf1 ip4:37.140.192.158 a mx include:_spf.hosting.reg.ru ~all
Whois Data
- Domain Name: PAYPAL-LOGINS.COM
- Registry Domain ID: 2690071145_DOMAIN_COM-VRSN
- Registrar URL: http://www.reg.ru
- Updated Date: 2022-04-18T09:33:48Z
- Creation Date: 2022-04-18T09:33:47Z
- Registry Expiry Date: 2023-04-18T09:33:47Z
- Registrar: REGISTRAR OF DOMAIN NAMES REG.RU LLC
- Registrar IANA ID: 1606
- Registrar Abuse Contact Email:
- Registrar Abuse Contact Phone:
- Name Server: NS1.HOSTING.REG.RU
- Name Server: NS2.HOSTING.REG.RU
- DNSSEC: unsigned
- Domain name: PAYPAL-LOGINS.COM
- Registry Domain ID: 2690071145_DOMAIN_COM-VRSN
- Registrar URL: https://www.reg.com
- Registrar URL: https://www.reg.ru
- Updated Date: 2022-04-18T09:33:48Z
- Creation Date: 2022-04-18T09:33:47Z
- Registrar Registration Expiration Date: 2023-04-18T09:33:47Z
- Registrar: Registrar of domain names REG.RU LLC
- Registrar IANA ID: 1606
- Registrar Abuse Contact Email: abuse@reg.ru
- Registrar Abuse Contact Phone: +7.4955801111
- Registry Registrant ID:
- Registrant Name: Vaivnov Ivan
- Registrant Organization: Private Person
- Registrant Street: centralnaya 1
- Registrant City: sochi
- Registrant State/Province: krasnodarskiy kray
- Registrant Postal Code: 357200
- Registrant Country: RU
- Registrant Phone: +7.9235674544
- Registrant Phone Ext:
- Registrant Fax:
- Registrant Fax Ext:
- Registrant Email: lorecaltagironehbc69@gmail.com
- Registry Admin ID:
- Admin Name: Vaivnov Ivan
- Admin Organization: Private Person
- Admin Street: centralnaya 1
- Admin City: sochi
- Admin State/Province: krasnodarskiy kray
- Admin Postal Code: 357200
- Admin Country: RU
- Admin Phone: +7.9235674544
- Admin Phone Ext:
- Admin Fax: +7.9235674544
- Admin Fax Ext:
- Admin Email: lorecaltagironehbc69@gmail.com
- Registry Tech ID:
- Tech Name: Vaivnov Ivan
- Tech Organization: Private Person
- Tech Street: centralnaya 1
- Tech City: sochi
- Tech State/Province: krasnodarskiy kray
- Tech Postal Code: 357200
- Tech Country: RU
- Tech Phone: +7.9235674544
- Tech Phone Ext:
- Tech Fax: +7.9235674544
- Tech Fax Ext:
- Tech Email: lorecaltagironehbc69@gmail.com
- Name Server: ns1.hosting.reg.ru
- Name Server: ns2.hosting.reg.ru
- DNSSEC: Unsigned
- blacklisted. All data is (c) Registrar of Domain Names REG.RU LLC (https://www.reg.com)
SSL Certificate Information
- Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- 03:1f:71:16:67:6a:07:d1:84:83:df:4a:70:78:69:e5:48:01
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: C = US, O = Let’s Encrypt, CN = R3
- Validity
- Not Before: Apr 18 14:47:20 2022 GMT
- Not After : Jul 17 14:47:19 2022 GMT
- Subject: CN = paypal-logins.com
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- RSA Public-Key: (2048 bit)
- Modulus:
- 00:e3:f5:44:b1:9e:40:fe:97:46:fb:44:d0:35:2d:
- 9a:46:43:15:6e:e4:d6:9f:e4:7a:8e:34:21:27:16:
- 70:59:66:9b:6b:4c:4a:b6:12:cf:bb:f8:ff:4e:4b:
- 0d:53:c6:64:54:7b:9b:0f:0f:b5:bf:49:27:ee:4e:
- 8b:28:fb:06:dd:32:6c:8c:bd:5a:91:8c:a7:04:6e:
- 14:f7:28:31:c3:eb:76:37:6c:ea:04:76:58:49:0b:
- d2:7c:aa:36:76:81:61:d6:66:be:8d:33:52:5e:ff:
- 8b:1c:7a:76:ee:80:2e:50:5c:db:ad:1a:a6:ac:8d:
- 76:39:e4:d7:b3:87:29:ba:35:66:a4:00:c1:18:4c:
- 75:14:8d:a0:2f:a3:67:6b:34:00:9d:24:e0:4b:cc:
- b8:62:3e:bc:26:b0:a1:ec:5b:5e:a9:01:1b:0d:82:
- 4d:ef:92:17:8c:d7:2b:3a:cb:f7:a8:d9:f2:af:cf:
- 3c:06:96:bf:45:54:2a:26:fb:cf:5d:bd:1f:5d:13:
- 99:70:40:b5:f5:c7:34:a5:a2:89:fc:45:1c:70:17:
- 53:20:c6:19:c6:dc:36:52:93:35:09:4f:e8:d2:04:
- cb:f7:18:5b:56:3a:75:05:5f:bb:ff:76:8c:77:8c:
- f8:42:69:82:af:01:25:1b:f3:73:9d:bf:53:cd:62:
- ad:47
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- X509v3 Basic Constraints: critical
- CA:FALSE
- X509v3 Subject Key Identifier:
- 9F:D2:3D:93:70:23:63:71:6F:67:3C:C7:50:90:69:7F:6D:93:B5:05
- X509v3 Authority Key Identifier:
- keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
- Authority Information Access:
- OCSP - URI:http://r3.o.lencr.org
- CA Issuers - URI:http://r3.i.lencr.org/
- X509v3 Subject Alternative Name:
- DNS:paypal-logins.com, DNS:www.paypal-logins.com
- X509v3 Certificate Policies:
- Policy: 2.23.140.1.2.1
- Policy: 1.3.6.1.4.1.44947.1.1.1
- CPS: http://cps.letsencrypt.org
- CT Precertificate SCTs:
- Signed Certificate Timestamp:
- Version : v1 (0x0)
- Log ID : 29:79:BE:F0:9E:39:39:21:F0:56:73:9F:63:A5:77:E5:
- BE:57:7D:9C:60:0A:F8:F9:4D:5D:26:5C:25:5D:C7:84
- Timestamp : Apr 18 15:47:20.681 2022 GMT
- Extensions: none
- Signature : ecdsa-with-SHA256
- 30:45:02:21:00:FD:6A:DE:BA:59:2B:2E:31:AD:BE:80:
- D6:B6:AF:57:58:CB:0E:15:89:82:15:2D:A1:E0:06:56:
- CF:70:F8:B1:C4:02:20:13:40:BE:52:01:CF:FA:6D:8D:
- D2:21:D0:D8:4E:F1:10:50:47:CA:C7:B3:0B:D0:89:31:
- 20:93:1A:EB:79:47:90
- Signed Certificate Timestamp:
- Version : v1 (0x0)
- Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:
- 15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13
- Timestamp : Apr 18 15:47:20.732 2022 GMT
- Extensions: none
- Signature : ecdsa-with-SHA256
- 30:45:02:20:5D:44:7F:EB:A5:45:FF:64:18:26:73:4A:
- 57:E1:5C:F6:B2:70:FC:D1:74:43:ED:C1:94:E5:0F:1D:
- 14:F0:CD:67:02:21:00:B6:E7:B2:05:24:57:19:1A:31:
- B0:76:BE:0F:7D:08:60:5C:1E:57:C2:A4:57:2B:A4:F6:
- 47:EE:71:6C:43:D9:1F
- Signature Algorithm: sha256WithRSAEncryption
- 30:2b:25:75:be:0d:32:24:59:ee:71:7a:12:40:51:2f:e8:99:
- aa:53:1e:be:68:11:b8:4d:a9:6d:b1:fe:72:fd:34:ca:41:f6:
- 51:ca:01:af:a0:5c:5f:0d:ee:b1:05:8f:d3:75:09:15:29:71:
- 02:38:23:0f:eb:54:ae:06:d0:af:7a:1b:65:d6:b4:3c:c1:5e:
- 8c:d6:b3:6d:3c:8d:a2:f3:5e:30:eb:08:b4:18:e3:72:8c:55:
- a1:de:fd:f0:53:e7:1d:9a:85:7e:88:2d:7f:69:64:bb:4a:6f:
- 16:ad:e1:38:70:96:9c:b7:bd:f8:8a:68:19:3b:f6:17:16:e1:
- 0d:dd:ed:dd:2e:ad:93:37:99:e7:ed:c5:c2:fa:00:9a:57:ce:
- 77:6f:68:80:dd:6a:25:7e:4a:60:0b:e1:55:88:73:d1:c8:46:
- 10:c2:d0:d3:07:6d:03:b9:a6:2f:b3:23:ef:44:55:fc:3b:0b:
- 66:9b:c3:8e:23:75:39:bc:75:7d:f5:c6:d7:88:6d:1b:24:18:
- e5:2d:f8:a0:27:ec:0a:7f:48:28:b4:63:01:b0:23:6e:cd:3c:
- 54:b4:f9:25:49:b7:68:a0:4f:44:36:7b:05:30:b8:c0:6a:5b:
- d7:35:6b:cf:31:14:b6:6c:d0:83:f3:88:fa:0f:3b:9b:72:31:
- 17:ab:e7:bd