mail.xxe.pw

Classification: Malicious

mail.xxe.pw is a malicious hostname. Linked to Apt17, Axiom activity. 3 sightings from Maltiverse (Redgolf, Aurora Panda), last seen 2023-05-02.

Current activity

  • Offline — no longer resolving. Last online 2023-05-02 21:49:06.

MITRE ATT&CK associations

Intrusion sets: APT17 (G0025) AXIOM (G0001)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Redgolf Maltiverse 2023-05-01 04:21:23 2023-05-02 21:49:06 malicious-activity
Aurora Panda Maltiverse 2023-04-05 04:28:03 2023-04-06 12:15:52 malicious-activity G0025 APT17
Axiom Maltiverse 2023-04-05 04:28:04 2023-04-06 12:15:48 malicious-activity G0001 Axiom G0025 APT17

Tags

apt

Whois information

Domain
xxe.pw
TLD
pw
First indexed
2023-04-06 12:15:48
Last updated
2026-09-19 11:39:20