urlhaus-api.abuse.ch
Classification: Malicious
urlhaus-api.abuse.ch is a malicious hostname. Linked to Emotet malware. Reported by 3 threat sources (Malicious url, Malware Download), last seen 2022-08-05.
Current activity
- Online — resolving/reachable. Last checked 2026-11-06 20:36:51.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-07-19 05:21:00 | 2025-07-02 00:06:06 | benign | |
| Malicious url | 2022-08-05 04:42:59 | 2022-08-05 04:42:59 | malicious-activity | ||
| Malware Download | Abuse.ch | 2019-12-08 00:00:29 | 2019-12-08 00:00:29 | malware | |
| Emotet | Telefonica CO SOC | 2019-05-14 16:17:24 | 2019-05-14 16:17:25 | botnet | S0367 Emotet |
Tags
twitter https://twitter.com/_st0m_/status/1554806625973723136 emotet banker compromised payload delivery zipIP addresses resolved by this hostname
- 94.231.94.27 (2019-05-14 16:17:24)
- 51.75.68.46 (2019-05-14 16:17:24)
- 46.101.206.53 (2026-11-06 20:36:51)
Whois information
- AS name
- AS48971 Datawire Ag
- Domain
- abuse.ch
- TLD
- ch
- First indexed
- 2019-05-14 16:17:24
- Last updated
- 2026-11-06 20:36:51