https://fafa.ysdong.top/go.php

Classification: Malicious

https://fafa.ysdong.top/go.php is a malicious URL. Linked to Gootloader malware. Reported by URLhaus Abuse.ch and ThreatFox Abuse.ch, last seen 2023-07-26.

Current activity

  • Offline — no longer resolving. Last online 2023-07-26 14:18:49.

MITRE ATT&CK associations

Malware families: GOOTLOADER (S1138)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
GootLoader ThreatFox Abuse.ch 2023-07-24 14:17:04 2023-07-26 14:18:49 malicious-activity S1138 Gootloader
Malware Download URLhaus Abuse.ch 2023-07-24 14:07:11 2023-07-24 14:07:11 malicious-activity

Tags

gating gootloader

URL information

Hostname
fafa.ysdong.top
Domain
ysdong.top
TLD
top
SHA-256
3b96741953d026ad1699099ff689960452ff35b4c9b3ab377b84c947d8a21d7d
First indexed
2023-07-24 14:17:04
Last updated
2026-10-09 20:07:07
Last online
2023-07-26 14:18:49