monerohash.com

Classification: Malicious

monerohash.com is a malicious hostname. 1,510 sightings from 3 threat sources (CryptoMining domain, Trojan.Generic), last seen 2026-11-07. Seen in BR, GT.

Current activity

  • Offline — no longer resolving. Last online 2026-11-07 02:36:19.
  • Cryptocurrency mining pool — Runs a cryptomining pool.

Where it has been seen

Observed by Maltiverse Threat Observatory sensors in BR and GT, across education and government networks.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
CryptoMining domain Maltiverse Threat Observatory 2020-01-09 00:01:00 2026-11-07 00:45:14 compromised country_code:br country_code:gt cryptominer industry:education-and-nonprofits industry:government-and-public-sector malicious-activity
Top Popularity Site Cisco Umbrella 2022-07-18 23:52:43 2025-10-15 01:40:22 benign
Alexa Top 1 Million Alexa 2020-11-27 01:50:35 2021-09-11 01:39:58 benign
Trojan.Generic Hybrid-Analysis 2018-04-16 07:00:07 2021-03-15 12:15:35
Malicious site Hybrid-Analysis 2020-05-14 20:45:15 2020-05-14 20:45:15
HEUR:RiskTool.Linux.BitCoinMiner Hybrid-Analysis 2019-02-15 09:30:09 2019-02-15 09:30:09
Malware site Hybrid-Analysis 2018-06-29 11:45:53 2018-07-02 07:00:19
DeepScan:Generic.Application.CoinMiner.1 Hybrid-Analysis 2018-06-11 06:30:18 2018-06-11 06:30:18
Trojan.BRMon.Gen Hybrid-Analysis 2018-04-24 09:00:50 2018-04-24 09:00:50
BV:Miner Hybrid-Analysis 2018-04-20 20:15:11 2018-04-20 20:15:11
backdoor ,coinminer ,miner Maltiverse 2018-03-16 00:00:19 2018-03-16 00:00:19
coinminer ,miner Maltiverse 2018-03-07 14:17:18 2018-03-07 14:17:18
backdoor,coinminer,miner,msil,worm Maltiverse 2018-01-22 18:19:34 2018-01-22 18:19:34
betabot,coinminer,evasive,infostealer,miner Maltiverse 2017-11-19 14:46:49 2017-11-19 14:46:49
dofoil,miner,sharik,smokeloader Maltiverse 2017-10-31 13:00:22 2017-10-31 13:00:22
coinminer,miner Maltiverse 2017-10-20 11:15:33 2017-10-20 11:15:33
backdoor,coinminer,miner,msil Maltiverse 2017-10-17 06:38:56 2017-10-17 06:38:56

Tags

backdoor coinminer miner msil

IP addresses resolved by this hostname

Whois information

Domain
monerohash.com
TLD
com
DNSSEC
['unsigned', 'unSigned', 'unsigned, unSigned']
Nameservers
NS1KWY.NAME.COM, NS2DQR.NAME.COM, NS3FHX.NAME.COM, NS4CGS.NAME.COM, ns1kwy.name.com, ns2dqr.name.com, ns3fhx.name.com, ns4cgs.name.com
Whois server
whois.name.com
Registrant
Name.com, Inc.
Address
PO Box 1769
City
Denver
State
CO
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
Domain created
2014-10-28 16:02:42
Domain expires
2026-10-28 16:02:42
First indexed
2017-10-17 06:38:56
Last updated
2026-11-07 02:36:19