analysis-id-lfg[.]infoDomain
Reported by 2 independent sources · first reported by Sekoia.io · last reported
Last reported 1 month agoFeeds last saw it 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Exvicy: A Copycat of the ErrTraffic Malware Distribution Framework“The payload primarily retrieves the ErrTraffic C2 domain (analysis-id-lfg[.]info) from the Polygon blockchain using the contract address 0xB6bC9e1D0b2fB96Ab7C47E04Cb0BE477410bC1f2.”
Seen in threat feeds
1 feed| Feed | First seen | Last seen | Sightings | What the feed says |
|---|---|---|---|---|
| abuse.ch ThreatFox | 1 | payload_delivery · IClickFix · ClickFix |
Indicators reported together
named in the same reports- cloudflarecapcha[.]comin 1 report
- perfectverified[.]comin 1 report
- newsecuredevice[.]comin 1 report
- unitedstateverif[.]comin 1 report
- hxxps://us-addnewdevice[.]com/panelin 1 report
- us-addnewdevice[.]comin 1 report
- hxxps://us-addnewdevice[.]comin 1 report
- hxxps://onlineprivacyprotect[.]com/panelin 1 report
- onlineprivacyprotect[.]comin 1 report
- hxxps://wwwnewdevice[.]org/panelin 1 report
- wwwnewdevice[.]orgin 1 report
- hxxp://89.34.90[.]159/panelin 1 report
- 89.34.90[.]159in 1 report
- hxxp://89.34.90[.]150/panelin 1 report
- 89.34.90[.]150in 1 report
- hxxp://91.92.33[.]213/panelin 1 report
- 91.92.33[.]213in 1 report
- hxxp://151.243.113[.]21/panelin 1 report
- 151.243.113[.]21in 1 report
- hxxp://94.26.83[.]206/panelin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.