Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-29

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 158

  • farhan.safeverify.com.ngUnknown malware payload delivery domain (confidence level: 75%)
  • www.secure-accounts-verify.comUnknown malware payload delivery domain (confidence level: 75%)
  • megamegalodon.clickUnknown malware payload delivery domain (confidence level: 75%)
  • cpanel.prestigefinancialrebuilders.comFAKEUPDATES botnet C2 domain (confidence level: 100%)
  • slotmacau188ab.sbsClearFake payload delivery domain (confidence level: 100%)
  • ywrav.slotmacau188ab.sbsClearFake payload delivery domain (confidence level: 100%)
  • rjwinter.comLatrodectus payload delivery domain (confidence level: 75%)
  • foliclesalonandspa.comLatrodectus payload delivery domain (confidence level: 75%)
  • hunzm.slotmacau188k.sbsClearFake payload delivery domain (confidence level: 100%)
  • cartasella.comLatrodectus payload delivery domain (confidence level: 75%)

URLs 31

  • https://farhan.safeverify.com.ng/Unknown malware payload delivery URL (confidence level: 75%)
  • https://farhan.safeverify.com.ng/login.phpUnknown malware payload delivery URL (confidence level: 75%)
  • https://farhan.safeverify.com.ng/register.phpUnknown malware payload delivery URL (confidence level: 75%)
  • https://farhan.safeverify.com.ng/forget_password.phpUnknown malware payload delivery URL (confidence level: 75%)
  • https://farhan.safeverify.com.ng/admin/index.phpUnknown malware payload delivery URL (confidence level: 75%)
  • https://farhan.safeverify.com.ng/admin/admin_register.phpUnknown malware payload delivery URL (confidence level: 75%)
  • https://farhan.safeverify.com.ng/safe-verify.apkUnknown malware payload delivery URL (confidence level: 75%)
  • https://www.secure-accounts-verify.com/submit-taskUnknown malware payload delivery URL (confidence level: 75%)
  • https://www.secure-accounts-verify.com/get-statusUnknown malware payload delivery URL (confidence level: 75%)
  • https://download2339.mediafire.com/u0sdiyzhvzrg1nrjotqylxdlijiyv9yeep3kb8962rp0otlurhwsbt6j_ycwbj7vzg4q-grgmhuem_5xyblm8cm5jsl5fwjod81u82cg284msc0z9xkftm5w-r-ejbpbxs1vo508k4wwhp2sl-pnkftvwo8_ey3_4yy6-xvgtsnfsw/cwga3u4xqb5jtm3/chat_gpt.exeUnknown Stealer payload delivery URL (confidence level: 100%)

IP addresses 111

  • 193.106.216.34Meterpreter botnet C2 server (confidence level: 86%)
  • 171.243.148.230Unknown malware payload delivery server (confidence level: 80%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)
  • 102.205.170.10Quasar RAT botnet C2 server (confidence level: 100%)

Hashes 12

  • 014e3b0450e294c7917c7986d3b19c2aaaac9d13609d6fbe230bd83168ae4437Unknown malware payload (confidence level: 75%)
  • 20d25e6bc246c9fb401e41ae8ab09e7976b92317ef97532ff07c163af6c823ddUnknown malware payload (confidence level: 75%)
  • 30e720476e4eb57742d1c61b8127e29e3bd2dedb884e3595aba41888cf15b106Unknown malware payload (confidence level: 75%)
  • 6a9249a2019e415f0e13a185fcb411f7f8816d477de5c2e94e5ab61fb06a7aa3Unknown malware payload (confidence level: 75%)
  • b8cfbeda4565712da8ffe1cfb365c1701ab85239e5d43822f83fbc962b205409Unknown malware payload (confidence level: 75%)
  • a502120e5056f6cb4cf5aacb143e1f7c7468a82fea9714e9675ad32f106857a0Unknown malware payload (confidence level: 75%)
  • 8562a87f3096711e06456205f15fc62009398fc97315d1ce82389475c306d4f6Unknown malware payload (confidence level: 75%)
  • ada3a2598dc763b860c98236f6ff09f8be2890da1c5fb53539a6d19b065d9620AsyncRAT payload (confidence level: 50%)
  • e20b8e1d8337cec11d40db7580f42460abbc2b60ce0938bf2c746a32e0747421XMRIG payload (confidence level: 90%)
  • a437ad7a5250390bce355a1957a3584a68df7efc3006e2f2bcf052845bc32ae8XMRIG payload (confidence level: 90%)

Description

ThreatFox IOCs for 2026-05-29

Community reviews

Loading reviews…