mofa-gov-sa.direct888.net

Classification: Malicious

mofa-gov-sa.direct888.net is a malicious hostname. Linked to Sidewinder activity. 52 sightings from ThreatFox Abuse.ch, last seen 2025-01-07.

Current activity

  • Offline — no longer resolving. Last online 2025-01-07 14:20:29.

MITRE ATT&CK associations

Intrusion sets: SIDEWINDER (G0121)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SideWinder ThreatFox Abuse.ch 2024-12-13 14:17:28 2025-01-07 14:20:28 malicious-activity G0121 Sidewinder

Tags

apt sidewinder

Whois information

Domain
direct888.net
TLD
net
First indexed
2024-12-13 14:17:28
Last updated
2026-08-11 13:52:17