TF-1812254 high

Description

Indicator that identifies a malware distribution server (payload delivery). IOC type: Domain name that delivers a malware payload. Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-05-14 18:08:36 UTC. Reporter: burger.

Indicators of Compromise (4)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (3)

• External reference Threatfox IOCs/Threats
• Malpedia profile Threatfox IOCs/Threats
• ThreatFox IOC page Threatfox IOCs/Threats

  Indicator that identifies a malware distribution server (payload delivery). IOC type: Domain name that delivers a malware payload. Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-05-14 18:08:36 UTC. Reporter: burger.

• Interactive Online Malware Analysis Sandbox - ANY.RUN
  web:app.any.run

  Join ANY.RUN and check malware for free. With our online malware analysis tools you can research malicious files and URLs and get result with incredible speed

  2026-05-22 00:46 UTC
• EfficientIP DNS Threat Intelligence Stops Zero-Day Malware
  web:efficientip.com

  A previously unknown malware campaign was uncovered through EfficientIP's real-time DNS Threat Intelligence. By exploiting DNS TXT records for stealthy command-and-control and data exfiltration, it bypassed traditional defenses—until DNS Security stopped it.

  2026-05-22 00:46 UTC
• Find malware detection names for Microsoft Defender for Endpoint
  web:learn.microsoft.com

  When you look up this malware name in the Microsoft Defender Security Intelligence website, you find information specific to that malware , including technical details and mitigation steps.

  2026-05-22 00:46 UTC
• Malware Domain List - PrecisionSec
  web:precisionsec.com

  PrecisionSec's Malware Domain List is a high fidelity feed of domains actively being used by malware . Our feed is used by experts globally to identify and block malicious domains known to be associated with malware . Whether you are a data reseller, MSSP, or Security Manager, having an accurate and up-to-date list of active malware domains is essential to protecting your internal assets and ...

  2026-05-22 00:46 UTC
• ThreatFox | vanta.st
  web:threatfox.abuse.ch

  Database Entry Actions Add tag Delete this IOC Report False Positive Export IOC (JSON) Export IOC (CSV)

  2026-05-22 00:46 UTC
• URLhaus | Malware URL exchange
  web:urlhaus.abuse.ch

  URLhaus URLhaus is a platform from abuse.ch and Spamhaus dedicated to sharing malicious URLs that are being used for malware distribution. Report URLs and explore the database for valuable intelligence. Use the APIs, to seamlessly push and pull signals, and automate bulk queries. With this intelligence, gain insights into malware behavior, to help identify, track, and mitigate against malware ...

  2026-05-22 00:46 UTC
• Malicious URL Scanner | Scan URLs for Malware | URL Checker
  web:www.ipqualityscore.com

  Scan URLs for malware and phishing with our free malicious URL scanner. Check links in real-time to detect suspicious domains and prevent cyber threats.

  2026-05-22 00:46 UTC
• CSIRT-IE: Active Malware Distribution Sites
  web:www.ncsc.gov.ie

  CSIRT-IE monitors the URLhaus dataset for reports of sites, within its jurisdiction, that are reported to be actively distributing malware . Active Malware Distribution Sites The URLhaus platform only report sites (URLs) that are directly being used to distribute malware .

  2026-05-22 00:46 UTC
• VirusTotal - Home
  web:www.virustotal.com

  VirusTotal Assistant Bot offers a platform for users to interact with VirusTotal's threat intelligence suite and explore artifact-related information effectively.

  2026-05-22 00:46 UTC
• VirusTotal - Home
  web:www.virustotal.com

  VirusTotal is a free online tool that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content.

  2026-05-22 00:46 UTC

Only Available for Registered Users. Sign in to view.