theo.digital
Classification: Malicious
theo.digital is a malicious hostname. Linked to Emotet malware. 12 sightings from Abuse.ch (Malware Download), last seen 2021-01-21.
Current activity
- Online — resolving/reachable. Last checked 2026-11-06 16:34:25.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 12:53:15 | 2025-05-11 15:58:20 | benign | |
| Alexa Top 1 Million | Alexa | 2021-05-15 11:09:48 | 2021-05-15 11:09:48 | benign | |
| Emotet | Abuse.ch | 2020-12-28 22:15:18 | 2021-01-21 08:24:58 | botnet malicious-activity | S0367 Emotet |
| Malware Download | Abuse.ch | 2020-12-22 17:15:26 | 2021-01-14 00:01:45 | malicious-activity malware |
Tags
doc emotetIP addresses resolved by this hostname
- 35.209.174.246 (2021-05-15 11:09:48)
- 34.202.203.47 (2025-05-11 15:58:18)
- 54.243.86.28 (2025-05-11 15:58:18)
- 18.211.166.153 (2025-05-11 15:58:18)
- 172.64.80.1 (2026-11-06 16:34:25)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-11-06 16:34:25)
Whois information
- Domain
- theo.digital
- TLD
- digital
- DNSSEC
- ['signedDelegation']
- Nameservers
- lara.ns.cloudflare.com, glen.ns.cloudflare.com
- Registrant
- Cloudflare, Inc
- Address
- REDACTED
- City
- REDACTED
- State
- West Sussex
- Country
- GB — United Kingdom 🇬🇧
- Contact email
- [email protected]
- Domain created
- 2024-02-12 17:16:14
- Domain expires
- 2027-02-12 17:16:14
- First indexed
- 2020-12-22 17:15:26
- Last updated
- 2026-11-06 16:34:25