evrenapi.xyz
Classification: Malicious
evrenapi.xyz is a malicious hostname. Linked to Agent Tesla malware. Reported by ThreatFox Abuse.ch, last seen 2026-09-12.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 08:36:52.
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Agent Tesla | ThreatFox Abuse.ch | 2026-09-12 15:24:06 | 2026-09-12 16:25:06 | malicious-activity | S0331 Agent Tesla |
Tags
agentesla agenttesla negastealIP addresses resolved by this hostname
- 104.21.68.149 (2026-09-20 04:33:56)
- 172.67.196.48 (2026-09-20 04:33:56)
- 2606:4700:3032::6815:4495 (2026-10-06 16:34:23)
- 2606:4700:3037::ac43:c430 (2026-10-06 16:34:23)
- 172.64.80.1 (2026-10-18 08:36:52)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 08:36:52)
Whois information
- Domain
- evrenapi.xyz
- TLD
- xyz
- First indexed
- 2026-09-12 16:25:06
- Last updated
- 2026-10-18 08:36:52