whats-app.net
Classification: Malicious
whats-app.net is a malicious hostname. Linked to Triada malware. 2 sightings from Triage (Suspicious URL), last seen 2026-07-13.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 08:37:20.
MITRE ATT&CK associations
Malware families: TRIADA (S0424)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Suspicious URL | Triage | 2026-07-13 00:05:01 | 2026-07-13 00:05:01 | anomalous-activity | |
| Triada | Triage | 2026-07-12 19:02:51 | 2026-07-12 19:02:51 | malicious-activity | S0424 Triada |
Tags
triada android banker genericcloudflare infostealer phishing trojanIP addresses resolved by this hostname
- 2606:4700:3035::6815:4edb (2026-10-11 08:33:20)
- 2606:4700:3032::ac43:89a6 (2026-10-11 08:33:20)
- 172.64.80.1 (2026-10-17 04:38:09)
- 172.67.137.166 (2026-10-18 08:37:20)
- 104.21.78.219 (2026-10-18 08:37:20)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 08:37:20)
Whois information
- Domain
- whats-app.net
- TLD
- net
- First indexed
- 2026-07-12 19:58:37
- Last updated
- 2026-10-18 08:37:20