← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
ThreatFox Hunt: Unknown malware IOCs - 2025-12-19
WHITE pduggusa 2025-12-19 Modified: 2026-01-18
28
IOCs
MEDIUM VOLUME
Automated ThreatFox hunt for Unknown malware indicators. 82 IOCs collected via Pattern 49 intelligence streaming. BDE (Big Data analytics Energy) automated detection. Reference: https://analytics.dugganusa.com
unknown-malwarethreatfoxautomated-huntpattern-49dugganusaunattributed
Indicators of Compromise (28)
All URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://114.132.217.187:8888/supershell/login/ — 2025-12-19
URL https://tenjin-central.com/ — 2025-12-19
URL http://198.46.216.206:8888/supershell/login/ — 2025-12-19
URL https://usanovafoundation.org/ — 2025-12-19
URL https://lead-mc.jp/ — 2025-12-19
URL http://fedoramaginoracura.site:8080/updater?for=5120D3FEDD36EAC912DB54C863CE59BB — 2025-12-19
URL https://www.vpnathan-partners.com.my/ — 2025-12-19
URL https://mail.vanguartagency.com/ — 2025-12-19
URL https://academie.habg.ci/ — 2025-12-19
domain pepgauge.com — 2025-12-19
domain pegasustour.ru — 2025-12-19
domain egepefr.ru — 2025-12-19
domain 14emeliaterracewestroxburyma02132.su — 2025-12-19
URL http://31.42.185.135:8080/updater?for=0AA6B9F07A5B27B2069C137C69EC91EB — 2025-12-19
URL https://mail.physioxrsize.nl/ — 2025-12-19
URL https://mail.avomawealth.com/ — 2025-12-19
URL http://80.253.249.252:5000/api/beacon — 2025-12-19
URL https://favashop.com.ar/ — 2025-12-19
URL https://www.utama78.com/ — 2025-12-19
URL https://tnsa.jp/ — 2025-12-19
URL https://worldvacationtour.com/ — 2025-12-19
hostname siper.smartvault.com.ng — 2025-12-19
hostname nipple.smartvault.com.ng — 2025-12-19
URL https://dimelox.com/ — 2025-12-19
URL https://bakvau-store.evascientific.com/ — 2025-12-19
URL https://stealer.su/login — 2025-12-19
URL http://94.156.114.203:5000/login.php — 2025-12-19
URL http://31.42.185.135:8080/updater?for=5120D3FEDD36EAC912DB54C863CE59BB — 2025-12-19