www.chiark.greenend.org.uk
Classification: Malicious
www.chiark.greenend.org.uk is a malicious hostname. Linked to Emotet malware. 3 sightings from Hybrid-Analysis and Telefonica CO SOC, last seen 2022-05-18.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 00:33:49.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-07-18 22:52:58 | 2025-05-24 13:45:02 | benign | |
| Emotet | Telefonica CO SOC | 2022-05-18 00:17:06 | 2022-05-18 00:17:06 | botnet malicious-activity | S0367 Emotet |
| Malicious site | Hybrid-Analysis | 2021-02-22 14:45:25 | 2021-06-18 14:30:10 | ||
| Generic.Malware | Hybrid-Analysis | 2019-04-08 09:17:05 | 2019-05-14 12:15:04 |
Tags
emotet banker compromised payload deliveryIP addresses resolved by this hostname
- 212.13.197.231 (2019-04-08 09:17:05)
- 2a00:1098:86:130::1 (2026-11-07 00:33:49)
- 93.93.131.173 (2026-11-07 00:33:49)
Whois information
- AS name
- AS8943 Jump Networks Ltd
- Domain
- greenend.org.uk
- TLD
- org.uk
- Nameservers
- master.ns.chiark.greenend.org.uk 93.93.131.173
- Registrant
- Mythic Beasts Limited [Tag = MYTHIC-BEASTS]
- Domain expires
- 2027-08-08 00:00:00
- First indexed
- 2019-04-08 09:17:05
- Last updated
- 2026-11-07 00:33:49