yip.su
Classification: Suspicious
yip.su is a suspicious hostname. Reported by 11 threat sources, last seen 2026-09-02. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2026-09-02 02:37:35.
- Malware distribution — This indicator is distributing malware.
- Phishing — Hosts a phishing site and is intrinsically malicious.
- Stores phishing content — Phishing resources are hosted here.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Phishing | Phishtank | 2022-03-24 01:20:09 | 2026-09-02 02:33:49 | compromised malicious-activity phishing | |
| Phishing | Maltiverse Threat Observatory | 2024-12-31 06:30:11 | 2025-08-02 18:30:12 | ||
| Phishing domain | Maltiverse Threat Observatory | 2024-12-31 06:30:11 | 2025-07-14 22:30:09 | ||
| Generic Malware | Maltiverse Threat Observatory | 2025-07-09 21:10:07 | 2025-07-14 21:29:04 | ||
| Malware Download | URLhaus Abuse.ch | 2023-10-11 09:24:35 | 2025-05-27 08:05:46 | malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-08-21 02:15:08 | 2024-01-11 03:45:04 | ||
| Top Popularity Site | Cisco Umbrella | 2023-03-12 04:23:45 | 2023-06-04 03:06:13 | benign | |
| Phishing DHL | Phishtank | 2022-12-08 04:20:07 | 2022-12-08 04:20:07 | compromised malicious-activity | |
| Phishing | OpenPhish | 2022-10-30 00:41:15 | 2022-10-30 00:41:15 | compromised malicious-activity | |
| Malware | Hybrid-Analysis | 2021-09-30 15:30:28 | 2022-01-20 21:45:11 | ||
| Alexa Top 1 Million | Alexa | 2020-11-28 14:28:38 | 2021-06-21 09:50:50 | benign | |
| Generic.Malware | Hybrid-Analysis | 2019-01-15 08:15:07 | 2021-04-28 05:00:15 | ||
| Malicious site | Hybrid-Analysis | 2019-12-01 22:17:06 | 2021-04-21 19:15:10 | ||
| FileRepMetagen [Malware] | Hybrid-Analysis | 2021-04-20 12:15:39 | 2021-04-20 12:15:39 | ||
| Trojan.Generic | Hybrid-Analysis | 2019-09-24 03:45:06 | 2021-02-23 01:15:15 | ||
| Gen:Variant.Cerbu | Hybrid-Analysis | 2020-11-08 18:30:07 | 2020-11-08 18:30:07 | ||
| virus.vbs.crypt | Hybrid-Analysis | 2020-04-27 11:45:49 | 2020-04-27 11:45:49 | ||
| Malware site | Hybrid-Analysis | 2019-08-21 19:00:06 | 2020-04-06 19:45:53 | ||
| Threats200220200050 | CronUp Threat Intel | 2020-02-20 03:53:02 | 2020-02-20 03:53:02 | ||
| TOP AMENAZAS - 19022020 | CronUp Threat Intel | 2020-02-19 16:43:20 | 2020-02-19 16:43:20 | ||
| malicious.moderate.ml | Hybrid-Analysis | 2019-12-24 16:15:19 | 2019-12-24 16:15:19 | ||
| Malicious domain | SANS Internet Storm Center | 2019-12-22 08:42:11 | 2019-12-22 08:42:11 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2019-09-02 13:00:23 | 2019-09-02 13:00:23 | ||
| target unspecified phishing | Antiphishing.com.ar | 2019-07-03 01:46:54 | 2019-07-03 01:47:02 | ||
| evasive | Maltiverse | 2018-02-25 02:18:31 | 2018-02-25 02:18:31 |
Tags
phishing evasive dropped-by-privateloader dropped-by-smokeloader exe clickfixIP addresses resolved by this hostname
- 88.99.66.31 (2019-12-22 08:42:11)
- 172.67.169.89 (2025-06-30 12:17:26)
- 104.21.79.77 (2025-06-30 12:17:26)
- 172.64.80.1 (2026-03-02 23:07:56)
Whois information
- AS name
- AS24940 Hetzner Online GmbH
- Domain
- yip.su
- TLD
- su
- Nameservers
- bill.ns.cloudflare.com., rosalyn.ns.cloudflare.com., dns2.fastdns24.org., dns3.fastdns24.eu., dns4.fastdns24.link., dns.fastdns24.com.
- Registrant
- RUCENTER-SU
- Contact email
- [email protected], [email protected]
- Domain created
- 2017-01-17 06:28:32
- Domain expires
- 2027-01-17 06:28:32
- First indexed
- 2018-02-25 02:18:31
- Last updated
- 2026-09-02 02:37:35