ctrlINT What the industry said about every indicator, with the quote

en.fofa[.]infoDomain

Reported by 1 independent source · first reported by Huntress · last reported

Last reported 12 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “From the web servers logs, we were able to tell that the attacker accessed the website via a referrer of https[://]en.fofa[.]info/.”

    HuntressVendor
    Active Exploitation of Gladinet CentreStack and Triofox

Indicators reported together

named in the same reports

Also named with it: CVE-2025-30406, CVE-2025-11371

Thanks — we review every report.

Report a wrong value
What is wrong with en.fofa[.]info here?
No account needed. We do not store your IP address.