apn-state-upd2.com
Classification: Suspicious
apn-state-upd2.com is a suspicious hostname. Linked to Promethium activity. Reported by 2 threat sources, last seen 2025-09-16.
Current activity
- Online — resolving/reachable. Last checked 2025-11-27 16:53:49.
MITRE ATT&CK associations
Intrusion sets: PROMETHIUM (G0056)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| StrongPity | ThreatFox Abuse.ch | 2025-09-16 06:17:08 | 2025-09-16 06:17:08 | malicious-activity | G0056 PROMETHIUM |
| Trojan.StrongPity.GenericKD | Hybrid-Analysis | 2020-07-12 23:00:07 | 2020-07-12 23:00:07 | ||
| Trojan.Generic | Hybrid-Analysis | 2019-07-18 13:15:10 | 2019-07-18 13:15:10 | ||
| Gen:Variant.Ursu | Hybrid-Analysis | 2019-07-18 13:15:06 | 2019-07-18 13:15:06 | ||
| Trojan.StrongPity | Hybrid-Analysis | 2019-07-18 13:15:05 | 2019-07-18 13:15:05 |
Tags
c2 strongpityIP addresses resolved by this hostname
- 185.203.119.164 (2019-07-18 13:15:05)
- 34.209.195.255 (2025-11-27 16:53:49)
Whois information
- Domain
- apn-state-upd2.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.CSOF.NET, NS2.CSOF.NET, NS3.CSOF.NET, NS4.CSOF.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2022-08-26 19:00:45
- Domain expires
- 2026-08-26 19:00:45
- First indexed
- 2019-07-18 13:15:05
- Last updated
- 2025-11-27 16:53:51