git-api.com
Classification: Malicious
git-api.com is a malicious hostname. Linked to Fin7 activity. Reported by 2 threat sources, last seen 2023-10-14.
Current activity
- Offline — no longer resolving. Last online 2024-05-31 00:34:07.
MITRE ATT&CK associations
Intrusion sets: FIN7 (G0046)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious URL | Hybrid-Analysis | 2023-10-14 20:30:04 | 2023-10-14 20:30:04 | ||
| Fin7 | Maltiverse | 2023-08-18 04:16:05 | 2023-08-19 20:21:57 | malicious-activity | G0046 FIN7 |
Tags
aptIP addresses resolved by this hostname
- 208.91.197.46 (2024-05-31 00:34:07)
- 204.11.56.48 (2024-04-20 04:51:40)
Whois information
- AS name
- AS40034 Confluence Networks Inc
- Domain
- git-api.com
- TLD
- com
- First indexed
- 2023-08-19 20:21:57
- Last updated
- 2026-06-26 11:43:14