TF-1812291 high

Description

Indicator that identifies a malware distribution server (payload delivery). IOC type: URL that delivers a malware payload. Attributed malware: Unknown malware. Confidence: 90. First seen: 2026-05-14 20:00:41 UTC. Reporter: CarsonWilliams. Tags: ClickFix.

Indicators of Compromise (2)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (3)

• External reference Threatfox IOCs/Threats
• Malpedia profile Threatfox IOCs/Threats
• ThreatFox IOC page Threatfox IOCs/Threats

  Indicator that identifies a malware distribution server (payload delivery). IOC type: URL that delivers a malware payload. Attributed malware: Unknown malware. Confidence: 90. First seen: 2026-05-14 20:00:41 UTC. Reporter: CarsonWilliams. Tags: ClickFix.

• Abusing Content Delivery Networks (CDNs): Phishing, Malware, and Evasion
  web:blogs.night-wolf.io

  Content Delivery Networks (CDNs) like jsDelivr, Webflow CDN, CloudFront, and Google APIs are trusted internet infrastructure - and attackers are abusing that trust. By hosting malicious pages and payloads on CDN domains, adversaries exploit the domai...

  2026-05-22 00:45 UTC
• Free URL Scanner - Check Website for Malware | ScanMalware
  web:scanmalware.com

  Instantly scan any URL for malware , phishing, and security threats. Free online website security scanner with real-time analysis, threat detection, and comprehensive vulnerability assessment.

  2026-05-22 00:45 UTC
• Website Security Checker | Malware Scan | Sucuri SiteCheck
  web:sitecheck.sucuri.net

  Free website malware and security checker Enter a URL like example.com and the Sucuri SiteCheck scanner will check the website for known malware , viruses, blacklisting status, website errors, out-of-date software, and malicious code.

  2026-05-22 00:45 UTC
• ThreatFox | Unknown malware
  web:threatfox.abuse.ch

  Indicators of Compromise (IOCs) on ThreatFox are associated with a certain malware fas. A malware sample can be associated with only one malware family. The page below gives you an overview on indicators of compromise associated with unknown .

  2026-05-22 00:45 UTC
• URLhaus | Malware URL exchange
  web:urlhaus.abuse.ch

  URLhaus URLhaus is a platform from abuse.ch and Spamhaus dedicated to sharing malicious URLs that are being used for malware distribution. Report URLs and explore the database for valuable intelligence. Use the APIs, to seamlessly push and pull signals, and automate bulk queries. With this intelligence, gain insights into malware behavior, to help identify, track, and mitigate against malware ...

  2026-05-22 00:45 UTC
• Malicious URL Scanner | Scan URLs for Malware | URL Checker
  web:www.ipqualityscore.com

  Scan URLs for malware and phishing with our free malicious URL scanner. Check links in real-time to detect suspicious domains and prevent cyber threats.

  2026-05-22 00:45 UTC
• OAuth redirection abuse enables phishing and malware delivery
  web:www.microsoft.com

  Stage 4: Redirect Abuse and Malware Delivery Among the threat actors and campaigns abusing OAuth redirection techniques with various landing pages, we identified a specific campaign that attempted to deliver a malicious payload . That activity is described in more detail below.

  2026-05-22 00:45 UTC
• CSIRT-IE: Active Malware Distribution Sites
  web:www.ncsc.gov.ie

  CSIRT-IE monitors the URLhaus dataset for reports of sites, within its jurisdiction, that are reported to be actively distributing malware . Active Malware Distribution Sites The URLhaus platform only report sites ( URLs ) that are directly being used to distribute malware .

  2026-05-22 00:45 UTC
• Link Checker - URL Checker | Is this link safe? - ScyScan
  web:www.scyscan.com

  Our Link Checker is a free URL Checker and Website Checker tool designed to help users scan site link and verify whether a website or link is safe. By integrating Google Safe Browsing, VirusTotal and other authoritative databases, we can quickly analyze link safety and detect malicious content, phishing attempts, and malware threats.

  2026-05-22 00:45 UTC
• How to Investigate Suspicious URLs Like a SOC Analyst ? Top Tools ...
  web:www.webasha.com

  Learn how to investigate suspicious URLs as a SOC Analyst using expert tools like VirusTotal, URLScan.io, and Hybrid Analysis. Understand techniques, key indicators of malicious URLs , and how to detect phishing or malware threats before they harm your network.

  2026-05-22 00:45 UTC

Only Available for Registered Users. Sign in to view.