Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-07

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 308

  • s4frlcnoplw.comKongTuke payload delivery domain (confidence level: 100%)
  • webdocs.sorix7el.latClearFake payload delivery domain (confidence level: 100%)
  • appsrch.sorix7el.latClearFake payload delivery domain (confidence level: 100%)
  • logbins.sorix7el.latClearFake payload delivery domain (confidence level: 100%)
  • apiopss.sorix7el.latClearFake payload delivery domain (confidence level: 100%)
  • gitlabh.sorix7el.latClearFake payload delivery domain (confidence level: 100%)
  • srvhubs.mowin8single.latClearFake payload delivery domain (confidence level: 100%)
  • webcdnx.mowin8single.latClearFake payload delivery domain (confidence level: 100%)
  • netapis.mowin8single.latClearFake payload delivery domain (confidence level: 100%)
  • srvlogs.mowin8single.latClearFake payload delivery domain (confidence level: 100%)

URLs 43

  • https://s4frlcnoplw.com/dKongTuke payload delivery URL (confidence level: 100%)
  • https://jimbos.com/IClickFix payload delivery URL (confidence level: 100%)
  • https://ann.hidayahnetwork.com/Vidar botnet C2 (confidence level: 100%)
  • https://bgu-uniq.co.il/Unknown malware payload delivery URL (confidence level: 90%)
  • https://coloringonly.com/es/lionel-messi/Unknown malware payload delivery URL (confidence level: 90%)
  • https://clacndjsvulnarbi.beer/api/css.jsUnknown malware payload delivery URL (confidence level: 100%)
  • https://goodpix21341.digital/t.188cfd3975db.jsUnknown malware payload delivery URL (confidence level: 100%)
  • https://goodpix21341.digital/ext-b.1c60f323a607.jsUnknown malware payload delivery URL (confidence level: 100%)
  • https://goodpix21341.digital/ext.f66368c3907c.jsUnknown malware payload delivery URL (confidence level: 100%)
  • https://goodpix21341.digital/t.jsUnknown malware payload delivery URL (confidence level: 100%)

IP addresses 29

  • 8.136.182.237Cobalt Strike botnet C2 server (confidence level: 100%)
  • 121.196.170.236Cobalt Strike botnet C2 server (confidence level: 100%)
  • 18.163.249.4ValleyRAT botnet C2 server (confidence level: 75%)
  • 43.199.58.243ValleyRAT botnet C2 server (confidence level: 75%)
  • 27.124.5.95ValleyRAT botnet C2 server (confidence level: 75%)
  • 104.167.199.243Unknown malware botnet C2 server (confidence level: 75%)
  • 203.159.90.139Remcos botnet C2 server (confidence level: 75%)
  • 5.101.81.81Remcos botnet C2 server (confidence level: 75%)
  • 66.85.27.30Unknown malware botnet C2 server (confidence level: 75%)
  • 83.147.38.94Evilginx botnet C2 server (confidence level: 75%)

Description

ThreatFox IOCs for 2026-05-07

Community reviews

Loading reviews…