Is ddos.dnsnb8.net safe?

The scan of ddos.dnsnb8.net on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with ddos.dnsnb8.net?

2 analysed samples communicate with this URL, including Wapomi.

How was ddos.dnsnb8.net checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

ddos.dnsnb8.net - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned ddos.dnsnb8.net and returned a unknown verdict (score -12). The page resolved to 3.229.117.57 on Amazon Data Services NoVa in US. 1 domain and 1 IP were contacted. 2 malware samples communicate with this URL (Wapomi). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://ddos.dnsnb8.net/
Domain: ddos.dnsnb8.net · IP: 3.229.117.57 · AS14618 · US
Server: nginx
HTTP status: 200 · application/octet-stream
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 26 22: · subject CN=ddos.dnsnb8.net
Scan tier: fast · observed 2026-08-19 08:09:18 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from ddos.dnsnb8.net. Each links to its full analysis.

Wapomi - contacted · f95f326b82dc9c62defcbf6aaf1ba434 · first seen 2026-08-19
Wapomi - contacted · 79ccbaeb4f3b940bb910de440271d36a · first seen 2026-08-19

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx

Contacted infrastructure

3.229.117.57 - AS14618 Amazon Data Services NoVa (United States)

Observed indicators

ddos.dnsnb8.net
3.229.117.57
https://ddos.dnsnb8.net/

Other scans of ddos.dnsnb8.net (6)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

19 Aug 2026 - unknown · https://ddos.dnsnb8.net:799/
19 Aug 2026 - unknown · http://ddos.dnsnb8.net:799/cj//k5.rar
19 Aug 2026 - unknown · http://ddos.dnsnb8.net:799/cj//k4.rar
19 Aug 2026 - unknown · http://ddos.dnsnb8.net:799/cj//k3.rar
19 Aug 2026 - unknown · http://ddos.dnsnb8.net:799/cj//k2.rar
19 Aug 2026 - unknown · http://ddos.dnsnb8.net:799/cj//k1.rar

Questions about ddos.dnsnb8.net

Is ddos.dnsnb8.net safe?: The scan of ddos.dnsnb8.net on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with ddos.dnsnb8.net?: 2 analysed samples communicate with this URL, including Wapomi.
How was ddos.dnsnb8.net checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of ddos.dnsnb8.net

Scanned on MalwareAnalyzer by Cyble · Open interactive scan