0x0[.]stDomain

Reported by 1 independent source · first reported 25 Sep 2025 by Huntress · last reported 25 Sep 2025

Last reported 12 months ago

What the reports say

1 report, newest first · the exact sentence from each

“hxxps://0x0[.]st/8WBr.py”

HuntressVendor25 Sep 2025
A Vietnamese threat actor's shift from PXA Stealer to PureRAT

Indicators reported together

named in the same reports

157.66.26[.]209in 1 report
06fc70aa08756a75…9ed4a823fd9din 1 report
f5e9e24886ec4c60…cdb650dd2601in 1 report
f6ed084aaa8ecf1b…1fc4be1bd709in 1 report
hxxps://0x0[.]st/8WBr.pyin 1 report
hxxps://is[.]gd/s5xknuj2in 1 report
hxxps://paste[.]rs/fVmzSin 1 report

Copy these 7 indicators · defanged

7 indicators, defanged, one per line

157.66.26[.]209
06fc70aa08756a752546198ceb9770068a2776c5b898e5ff24af9ed4a823fd9d
f5e9e24886ec4c60f45690a0e34bae71d8a38d1c35eb04d02148cdb650dd2601
f6ed084aaa8ecf1b1e20dfa859e8f34c4c18b7ad7ac14dc189bc1fc4be1bd709
hxxps://0x0[.]st/8WBr.py
hxxps://is[.]gd/s5xknuj2
hxxps://paste[.]rs/fVmzS

Thanks — we review every report.

Report a wrong value