chkactive.online
Classification: Malicious
chkactive.online is a malicious hostname. Linked to Apt38 activity. Reported by 1 threat source, last seen 2026-05-05.
Current activity
- Offline — no longer resolving. Last online 2026-05-06 19:50:13.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Intrusion sets: APT38 (G0082)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious behavior | Maltiverse Threat Observatory | 2026-05-05 00:01:24 | 2026-05-05 00:01:24 | country_code:br industry:education-and-nonprofits | |
| Bluenoroff | Maltiverse Threat Observatory | 2025-11-04 00:40:05 | 2025-11-04 00:40:05 | country_code:br industry:education-and-nonprofits industry:government-and-public-sector industry:healthcare-and-pharmaceutical | G0082 APT38 |
IP addresses resolved by this hostname
- 192.236.176.164 (2025-11-09 09:01:26)
Whois information
- Domain
- chkactive.online
- TLD
- online
- First indexed
- 2025-11-09 09:01:25
- Last updated
- 2026-05-06 19:50:13