ycs1zoajfcvie68akszu.de
Classification: Malicious
ycs1zoajfcvie68akszu.de is a malicious hostname. Linked to Windshift activity. 50 sightings from ThreatFox Abuse.ch (Bahamut), last seen 2023-12-30.
Current activity
- Offline — no longer resolving. Last online 2025-09-14 08:07:41.
MITRE ATT&CK associations
Intrusion sets: WINDSHIFT (G0112)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bahamut | ThreatFox Abuse.ch | 2023-12-28 16:46:57 | 2023-12-30 16:27:11 | malicious-activity | G0112 Windshift |
Tags
c2 censys cloudflarenetIP addresses resolved by this hostname
- 172.67.153.96 (2025-09-02 16:16:49)
- 104.21.88.210 (2025-09-02 16:16:49)
- 2606:4700:3033::6815:58d2 (2025-09-03 20:15:58)
- 2606:4700:3031::ac43:9960 (2025-09-03 20:15:58)
- 172.64.80.1 (2025-09-14 08:07:41)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2025-09-14 08:07:41)
Whois information
- Domain
- ycs1zoajfcvie68akszu.de
- TLD
- de
- First indexed
- 2023-12-28 17:17:04
- Last updated
- 2026-09-07 04:10:22