Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-06

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 469

  • msnvm.us.comUnknown malware payload delivery domain (confidence level: 75%)
  • dvxfigqyzgd.comKongTuke payload delivery domain (confidence level: 100%)
  • comwebs.pav6lorex.surfClearFake payload delivery domain (confidence level: 100%)
  • uidmap.tavro5xel.surfClearFake payload delivery domain (confidence level: 100%)
  • taskids.pav6lorex.surfClearFake payload delivery domain (confidence level: 100%)
  • src-get.xamir9on.surfClearFake payload delivery domain (confidence level: 100%)
  • ioflows.pav6lorex.surfClearFake payload delivery domain (confidence level: 100%)
  • mod-bus.xamir9on.surfClearFake payload delivery domain (confidence level: 100%)
  • syncits.pav6lorex.surfClearFake payload delivery domain (confidence level: 100%)
  • pkg-run.xamir9on.surfClearFake payload delivery domain (confidence level: 100%)

URLs 40

  • https://www.bursanehirteknik.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.refinishfirst.net/Unknown malware payload delivery URL (confidence level: 90%)
  • https://caliphlebotomy.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.gavpn.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://dvxfigqyzgd.com/dKongTuke payload delivery URL (confidence level: 100%)
  • http://202.61.137.210:8888/supershell/login/Unknown malware botnet C2 (confidence level: 100%)
  • https://sendmay.icu/SectopRAT payload delivery URL (confidence level: 100%)
  • https://redsbuilding.com.au/Unknown malware payload delivery URL (confidence level: 90%)
  • https://ray.smtpdenz.my.id/Vidar botnet C2 (confidence level: 100%)
  • https://ray.hidayahnetwork.com/Vidar botnet C2 (confidence level: 100%)

IP addresses 77

  • 151.236.4.149Unknown malware payload delivery server (confidence level: 75%)
  • 202.61.137.210Unknown malware botnet C2 server (confidence level: 100%)
  • 114.132.190.121Unknown malware botnet C2 server (confidence level: 100%)
  • 194.246.83.43SectopRAT botnet C2 server (confidence level: 100%)
  • 151.59.139.193SectopRAT botnet C2 server (confidence level: 100%)
  • 145.241.198.20Unknown malware botnet C2 server (confidence level: 75%)
  • 103.82.193.51Remcos botnet C2 server (confidence level: 75%)
  • 109.123.239.180Unknown malware botnet C2 server (confidence level: 75%)
  • 104.249.10.115Unknown malware botnet C2 server (confidence level: 75%)
  • 204.10.194.247Unknown malware botnet C2 server (confidence level: 100%)

Description

ThreatFox IOCs for 2026-05-06

Community reviews

Loading reviews…