Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-04-18

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 223

  • pewweepor092.comUnknown Stealer payload delivery domain (confidence level: 90%)
  • global-tax6.sylpi6ren.in.netClearFake payload delivery domain (confidence level: 100%)
  • aws.uae-wealth.comFAKEUPDATES botnet C2 domain (confidence level: 100%)
  • art-studio1.tovdo9ral.in.netClearFake payload delivery domain (confidence level: 100%)
  • music-band2.tovdo9ral.in.netClearFake payload delivery domain (confidence level: 100%)
  • dance-floor3.tovdo9ral.in.netClearFake payload delivery domain (confidence level: 100%)
  • cinema-club4.tovdo9ral.in.netClearFake payload delivery domain (confidence level: 100%)
  • book-shelf5.tovdo9ral.in.netClearFake payload delivery domain (confidence level: 100%)
  • hobby-time6.tovdo9ral.in.netClearFake payload delivery domain (confidence level: 100%)
  • home-style1.k2ymlirem.in.netClearFake payload delivery domain (confidence level: 100%)

URLs 121

  • https://pewweepor092.com/debug/payload.applescriptUnknown Stealer payload delivery URL (confidence level: 90%)
  • https://pewweepor092.com/api/debug/eventUnknown Stealer payload delivery URL (confidence level: 90%)
  • https://pewweepor092.com/gateAMOS botnet C2 (confidence level: 90%)
  • https://pewweepor092.com/gate/chunkAMOS botnet C2 (confidence level: 90%)
  • https://pewweepor092.com/gate/trezor-asarAMOS payload delivery URL (confidence level: 90%)
  • https://pewweepor092.com/gate/ledgerlive-asarAMOS payload delivery URL (confidence level: 90%)
  • https://pewweepor092.com/gate/ledger-asarAMOS payload delivery URL (confidence level: 90%)
  • https://pewweepor092.com/gate/atomic-asarAMOS payload delivery URL (confidence level: 90%)
  • https://pewweepor092.com/gate/exodus-asarAMOS payload delivery URL (confidence level: 90%)
  • https://lapasoa.com/Vidar payload delivery URL (confidence level: 75%)

IP addresses 11

  • 176.65.139.253Mirai botnet C2 server (confidence level: 80%)
  • 121.4.92.72Cobalt Strike botnet C2 server (confidence level: 75%)
  • 209.59.184.78Cobalt Strike botnet C2 server (confidence level: 75%)
  • 67.225.255.139Cobalt Strike botnet C2 server (confidence level: 75%)
  • 94.103.188.207Mirai botnet C2 server (confidence level: 80%)
  • 54.37.207.204Mirai botnet C2 server (confidence level: 80%)
  • 212.192.12.168Aisuru botnet C2 server (confidence level: 100%)
  • 89.190.156.34Bashlite botnet C2 server (confidence level: 75%)
  • 94.26.90.216Unknown malware botnet C2 server (confidence level: 75%)
  • 137.220.153.175ValleyRAT botnet C2 server (confidence level: 75%)

Description

ThreatFox IOCs for 2026-04-18

Community reviews

Loading reviews…