gfnstuff.pages.dev
Classification: Malicious
gfnstuff.pages.dev is a malicious hostname. Linked to Agent Tesla malware. Reported by ThreatFox Abuse.ch, last seen 2026-09-30.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 20:37:17.
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Agent Tesla | ThreatFox Abuse.ch | 2026-09-30 00:38:16 | 2026-09-30 01:25:05 | malicious-activity | S0331 Agent Tesla |
Tags
agenttesla exe agentesla negastealIP addresses resolved by this hostname
- 172.66.44.187 (2026-10-17 20:37:17)
- 172.66.47.69 (2026-10-17 20:37:17)
- 2606:4700:310c::ac42:2f45 (2026-10-17 20:37:17)
- 2606:4700:310c::ac42:2cbb (2026-10-17 20:37:17)
Whois information
- Domain
- pages.dev
- TLD
- dev
- First indexed
- 2026-09-30 01:25:05
- Last updated
- 2026-10-17 20:37:17