userbackup.xyz Threat Intelligence and Information

Host Location

Screenshot

Dig Results

• Got answer:
• -»HEADER«- opcode: QUERY, status: NOERROR, id: 44581
• flags: qr rd ra QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
• OPT PSEUDOSECTION:
• EDNS: version: 0, flags: udp: 1432
• QUESTION SECTION:
• userbackup.xyz. IN A
• ANSWER SECTION:
• userbackup.xyz. 298 IN A 104.21.24.34
• userbackup.xyz. 298 IN A 172.67.216.188
• Query time: 0 msec
• SERVER: 192.168.1.153(192.168.1.1) (UDP)
• WHEN: Wed Oct 22 00:25:12 UTC 2025
• MSG SIZE rcvd: 75

Whois Data

• Domain Name: USERBACKUP.XYZ
• Registry Domain ID: D555754530-CNIC
• Registrar URL: https://www.spaceship.com/
• Updated Date: 2025-07-09T12:02:08.0Z
• Creation Date: 2025-05-28T07:58:16.0Z
• Registry Expiry Date: 2026-05-28T23:59:59.0Z
• Registrar: Spaceship, Inc.
• Registrar IANA ID: 3862
• Name Server: ARA.NS.CLOUDFLARE.COM
• Name Server: MCGRORY.NS.CLOUDFLARE.COM
• DNSSEC: unsigned
• Registrar Abuse Contact Email: abuse@spaceship.com
• Registrar Abuse Contact Phone: +1.9854014545
• https://www.centralnicregistry.com/support/information/rdap «<
• blacklisted. All data is (c) CentralNic Ltd (https://www.centralnicregistry.com)

SSL Certificate Information

• Certificate:
• Data:
• Version: 3 (0x2)
• Serial Number:
• 14:07:78:7d:42:7d:72:b2:0e:51:46:5b:64:95:1a:36
• Signature Algorithm: ecdsa-with-SHA256
• Issuer: C = US, O = Google Trust Services, CN = WE1
• Validity
• Not Before: Sep 23 20:35:27 2025 GMT
• Not After : Dec 22 21:33:06 2025 GMT
• Subject: CN = userbackup.xyz
• Subject Public Key Info:
• Public Key Algorithm: id-ecPublicKey
• Public-Key: (256 bit)
• pub:
• 04:35:ae:64:43:2b:07:9b:dd:58:2f:10:2a:46:32:
• e8:28:7e:68:07:94:1d:14:95:36:8e:f1:23:5c:b1:
• 86:c8:32:bc:64:61:ef:7e:ac:1e:0c:db:0d:35:8d:
• f6:5e:41:1f:af:4d:19:11:ad:02:45:00:68:84:c3:
• 15:05:3e:d1:86
• ASN1 OID: prime256v1
• NIST CURVE: P-256
• X509v3 extensions:
• X509v3 Key Usage: critical
• Digital Signature
• X509v3 Extended Key Usage:
• TLS Web Server Authentication
• X509v3 Basic Constraints: critical
• CA:FALSE
• X509v3 Subject Key Identifier:
• 36:A7:40:9F:89:CE:AD:70:94:2C:D8:E5:6E:74:9F:D7:F0:AE:52:7D
• X509v3 Authority Key Identifier:
• 90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
• Authority Information Access:
• OCSP - URI:http://o.pki.goog/s/we1/FAc
• CA Issuers - URI:http://i.pki.goog/we1.crt
• X509v3 Subject Alternative Name:
• DNS:userbackup.xyz, DNS:*.userbackup.xyz
• X509v3 Certificate Policies:
• Policy: 2.23.140.1.2.1
• X509v3 CRL Distribution Points:
• Full Name:
• URI:http://c.pki.goog/we1/BX7jaHAMPC8.crl
• CT Precertificate SCTs:
• Signed Certificate Timestamp:
• Version : v1 (0x0)
• Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
• 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
• Timestamp : Sep 23 21:35:27.926 2025 GMT
• Extensions: none
• Signature : ecdsa-with-SHA256
• 30:45:02:20:53:D6:76:39:58:B9:44:C8:E4:55:E9:34:
• 3D:4C:89:B7:A3:4B:12:54:99:42:83:11:ED:80:C5:53:
• 2A:22:26:C0:02:21:00:CF:4E:DB:02:F2:47:A8:85:A9:
• 29:7E:48:C3:FA:25:6E:54:1D:D0:74:C2:50:BF:B3:7D:
• CF:3D:51:92:A1:07:06
• Signed Certificate Timestamp:
• Version : v1 (0x0)
• Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
• 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
• Timestamp : Sep 23 21:35:27.915 2025 GMT
• Extensions: none
• Signature : ecdsa-with-SHA256
• 30:45:02:20:34:62:9E:61:B1:F4:4D:A8:69:85:5F:12:
• BC:23:2E:46:FD:CD:23:06:0C:7F:E9:B0:23:40:F6:4E:
• 1E:47:5A:DB:02:21:00:92:DD:9A:E2:64:26:42:FF:1D:
• 95:6F:C9:BD:2C:54:D4:3E:C0:2B:E8:7D:9E:42:89:23:
• 6C:A7:A4:A2:30:76:78
• Signature Algorithm: ecdsa-with-SHA256
• Signature Value:
• 30:46:02:21:00:be:6f:a4:9c:30:e0:ea:c8:5b:35:a3:9c:06:
• d9:b1:fb:be:f7:80:06:66:a7:ed:4d:17:b8:53:55:fc:1b:03:
• 47:02:21:00:e2:91:7b:47:04:d0:3a:8b:01:d1:a1:02:92:38:
• 8e:7d:79:3e:c9:12:60:46:19:8b:79:28:88:e6:9f:a5:27:58

Additional Links

*** Virustotal ***

*** WayBackMachine ***