ed5tfdhjy.click
Classification: Malicious
ed5tfdhjy.click is a malicious hostname. Linked to Apt37 activity. Reported by Maltiverse, last seen 2023-07-05. Resolves to 172.67.207.234 and 8 more.
Current activity
- Offline — no longer resolving. Last online 2023-09-17 23:44:22.
MITRE ATT&CK associations
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:50 | 2023-07-05 20:51:37 | malicious-activity | G0067 APT37 |
Tags
aptIP addresses resolved by this hostname
- 172.67.207.234 (2023-07-19 06:55:00)
- 104.21.91.17 (2023-07-19 06:55:00)
- 172.64.80.1 (2023-07-25 21:57:10)
- 172.233.218.191 (2023-09-12 16:01:33)
- 172.232.30.16 (2023-09-12 21:06:18)
- 172.232.25.17 (2023-09-16 01:39:21)
- 172.232.4.89 (2023-09-16 17:38:58)
- 172.234.26.236 (2023-09-17 16:24:02)
- 199.59.243.224 (2023-09-17 23:44:22)
Whois information
- Domain
- ed5tfdhjy.click
- TLD
- click
- First indexed
- 2023-07-05 20:51:37
- Last updated
- 2023-07-05 20:51:37