youtube.com
Classification: Whitelisted
youtube.com is a whitelisted (trusted) hostname. Reported by 4 threat sources, last seen 2026-08-25. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2026-08-25 18:57:36.
MITRE ATT&CK associations
Malware families: WANNACRY (S0366)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Novablight | Triage | 2026-08-25 18:16:54 | 2026-08-25 18:16:54 | malicious-activity | |
| Matched whitelist source: Misp_google_domain | Maltiverse | 2026-08-11 01:25:10 | 2026-08-11 01:25:10 | benign | |
| Salatstealer | Triage | 2026-04-12 04:36:49 | 2026-08-04 16:08:01 | malicious-activity | |
| Suspicious URL | Triage | 2026-05-03 09:20:13 | 2026-08-02 17:57:57 | anomalous-activity malicious-activity | |
| Donutloader | Triage | 2026-07-12 22:38:38 | 2026-08-02 15:59:05 | malicious-activity | |
| Seven | Triage | 2026-06-19 15:24:52 | 2026-06-19 15:24:52 | malicious-activity | |
| Hijackloader | Triage | 2026-06-14 10:27:19 | 2026-06-14 10:59:43 | malicious-activity | |
| Killmbr | Triage | 2026-05-31 18:26:44 | 2026-05-31 18:26:44 | malicious-activity | |
| Google Domain | Maltiverse | 2024-03-20 17:00:43 | 2026-05-31 03:05:30 | ||
| Wannacry | Triage | 2026-04-21 20:22:16 | 2026-04-21 20:22:16 | malicious-activity | S0366 WannaCry |
| Malicious URL | Triage | 2026-01-31 01:30:11 | 2026-04-20 10:12:37 | malicious-activity | |
| Vidar | Triage | 2026-02-16 18:39:29 | 2026-04-14 16:45:37 | malicious-activity | |
| Top Popularity Site | Tranco | 2026-01-19 00:03:08 | 2026-03-26 00:05:02 | ||
| Top Popularity Site | Cisco Umbrella | 2022-07-23 01:15:09 | 2025-12-18 00:27:57 | benign |
Tags
discovery vidar persistence ransomware stealer bootkit defense_evasion android macos adware spyware privilege_escalation trojan upx execution themida aspackv2 credential_access installer motw phishing salatstealer antivm linux collection wannacry impact suricata worm evasion exploit killmbr wiper hijackloader loader google seven donutloader pyinstaller novablightIP addresses resolved by this hostname
- 2607:f8b0:4020:801::200e (2025-10-28 03:34:42)
- 142.250.69.78 (2025-10-28 03:34:42)
- 142.250.69.46 (2026-01-19 00:03:07)
- 2607:f8b0:4020:800::200e (2026-01-19 00:03:07)
- 142.250.69.142 (2026-03-26 00:05:01)
- 2607:f8b0:4020:803::200e (2026-03-26 00:05:01)
- 142.250.69.110 (2026-04-27 00:38:40)
- 2607:f8b0:4020:802::200e (2026-04-27 00:38:40)
- 2607:f8b0:4020:c07::5d (2026-05-31 12:06:18)
- 2607:f8b0:4020:c07::88 (2026-05-31 12:06:18)
- 64.233.178.93 (2026-05-31 12:06:18)
- 2607:f8b0:4020:c07::5b (2026-05-31 12:06:18)
- 2607:f8b0:4020:c07::be (2026-05-31 12:06:18)
- 64.233.178.136 (2026-05-31 12:06:18)
- 64.233.178.91 (2026-05-31 12:06:18)
- 64.233.178.190 (2026-05-31 12:06:18)
- 2607:f8b0:4020:c0b::be (2026-08-11 01:25:09)
- 74.125.197.136 (2026-08-11 01:25:09)
- 74.125.197.91 (2026-08-11 01:25:09)
- 74.125.197.190 (2026-08-11 01:25:09)
- 2607:f8b0:4020:c0b::88 (2026-08-11 01:25:09)
- 2607:f8b0:4020:c0b::5b (2026-08-11 01:25:09)
- 2607:f8b0:4020:c0b::5d (2026-08-11 01:25:09)
- 74.125.197.93 (2026-08-11 01:25:09)
Whois information
- Domain
- youtube.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.GOOGLE.COM, NS2.GOOGLE.COM, NS3.GOOGLE.COM, NS4.GOOGLE.COM, ns2.google.com, ns1.google.com, ns4.google.com, ns3.google.com
- Registrant
- MarkMonitor Inc.
- State
- CA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2005-02-15 05:13:12
- Domain expires
- 2027-02-15 05:13:12
- First indexed
- 2022-07-23 01:15:09
- Last updated
- 2026-08-25 18:57:36