Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-28

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 36

  • bonavol.proUnknown malware payload delivery domain (confidence level: 100%)
  • jaffacakes118-is-a-stupid-nigger.onlineMirai botnet C2 domain (confidence level: 100%)
  • lumennix.topUnknown malware payload delivery domain (confidence level: 100%)
  • funrat.coUnknown malware botnet C2 domain (confidence level: 100%)
  • bestcheats.onlineUnknown malware payload delivery domain (confidence level: 100%)
  • figural.proUnknown malware payload delivery domain (confidence level: 100%)
  • advanceslibrary.comUnknown Stealer botnet C2 domain (confidence level: 100%)
  • remiumholdings.comUnknown Stealer botnet C2 domain (confidence level: 75%)
  • mistertwister.saleIClickFix payload delivery domain (confidence level: 100%)
  • bibliorock.lolVidar botnet C2 domain (confidence level: 75%)

URLs 28

  • https://thespeedyhomeoffer.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://hollytree-transport.co.uk/Unknown malware payload delivery URL (confidence level: 90%)
  • https://emdgroupe.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://cgain.net/Unknown malware payload delivery URL (confidence level: 90%)
  • https://purplebandage.org.za/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.rssssociety.org.in/Unknown malware payload delivery URL (confidence level: 90%)
  • http://188.169.20.12:35057/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://172.168.137.58:37141/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://5.166.134.69:43702/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://223.123.43.71:35524/mozi.mMozi payload delivery URL (confidence level: 75%)

IP addresses 57

  • 147.182.140.2Aisuru botnet C2 server (confidence level: 100%)
  • 91.92.42.125Mirai botnet C2 server (confidence level: 100%)
  • 46.8.236.234Mirai botnet C2 server (confidence level: 100%)
  • 46.8.236.234Mirai botnet C2 server (confidence level: 100%)
  • 46.8.236.234Mirai botnet C2 server (confidence level: 100%)
  • 144.31.61.126NjRAT botnet C2 server (confidence level: 100%)
  • 194.59.31.123Quasar RAT botnet C2 server (confidence level: 50%)
  • 49.232.169.67VShell botnet C2 server (confidence level: 100%)
  • 196.75.14.206Meterpreter botnet C2 server (confidence level: 50%)
  • 91.92.40.63Mirai botnet C2 server (confidence level: 100%)

Description

ThreatFox IOCs for 2026-06-28

Community reviews

Loading reviews…