cdn1.poyag17470.workers.dev
Classification: Malicious
cdn1.poyag17470.workers.dev is a malicious hostname. Linked to Smokedham malware. 48 sightings from ThreatFox Abuse.ch, last seen 2025-07-18.
Current activity
- Offline — no longer resolving. Last online 2025-07-18 00:18:41.
MITRE ATT&CK associations
Malware families: SMOKEDHAM (S0649)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SMOKEDHAM | ThreatFox Abuse.ch | 2025-07-16 01:02:25 | 2025-07-18 00:18:41 | malicious-activity | S0649 SMOKEDHAM |
Tags
c2 smokedhamIP addresses resolved by this hostname
- 104.21.112.1 (2025-07-16 03:17:17)
- 2606:4700:3030::6815:2001 (2025-07-16 03:17:17)
- 2606:4700:3030::6815:4001 (2025-07-16 03:17:17)
- 2606:4700:3030::6815:7001 (2025-07-16 03:17:17)
- 104.21.80.1 (2025-07-16 03:17:17)
- 2606:4700:3030::6815:5001 (2025-07-16 03:17:17)
- 104.21.48.1 (2025-07-16 03:17:17)
- 104.21.16.1 (2025-07-16 03:17:17)
- 104.21.96.1 (2025-07-16 03:17:17)
- 2606:4700:3030::6815:3001 (2025-07-16 03:17:17)
- 2606:4700:3030::6815:6001 (2025-07-16 03:17:17)
- 104.21.64.1 (2025-07-16 03:17:17)
- 2606:4700:3030::6815:1001 (2025-07-16 03:17:17)
- 104.21.32.1 (2025-07-16 03:17:17)
Whois information
- Domain
- workers.dev
- TLD
- dev
- First indexed
- 2025-07-16 03:17:16
- Last updated
- 2025-07-18 00:18:41