IOC LOOKUP
// SEARCH IP, DOMAIN, HASH, OR URL AGAINST OTX THREAT INTELLIGENCE
Indicator of Compromise Search
Bulk Lookup
✦ IPv4 Address ✦ Domain ✦ MD5/SHA1/SHA256 Hash ✦ URL
INDICATOR
https://yettigretrading.com/.upload/xxxx/testi_encrypted.txt
URL ⚠ 3 PULSE HITS
↓ CSV ↓ JSON
30
/100
MEDIUM
CONFIDENCE LEVEL
THREAT CONFIDENCE ANALYSIS
MEDIUM 30/100 confidence
Some evidence of suspicious activity. Further investigation recommended before action.
CLEAN LOW MED HIGH CRIT
0 25 50 75 100
OTX
20/30
3 pulses
VIRUSTOTAL
—/35
N/A
ABUSEIPDB
—/25
IPv4 only
URLHAUS
10/10
LISTED
General Information
No additional detail available for this indicator type.
AlienVault OTX Analysis ↗ View on OTX
3
PULSE HITS
Pulse Hits 3
Indicator Type URL
Threat Level
ASSOCIATED PULSES
PULSE NAMEDATE
Technical Deconstruction of a VBScript-Based Delivery Mechanism for Phantom Stealer Leveraging ConfuserEx-Obfuscated .NET Loader 2025-07-28
AgentTesla 2025-07-28
AgentTesla 2025-07-29
VirusTotal Analysis ↗ View on VirusTotal
⚠ VirusTotal rate limit reached. Try again shortly.
URLhaus (abuse.ch) ↗ View on URLhaus
⚠ LISTED
URLHAUS
malware_download
asciiEncodedopendir
Status OFFLINE
Date Added 2025-07-30
Host yettigretrading.com
Reporter abuse_ch