code.verification-claude-cdn[.]beerDomain
Reported by 2 independent sources · first reported by Sophos X-Ops · last reported
Last reported 2 months agoFeeds last saw it 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Fake AI, real malware: Attackers impersonating AI brands“…rdinary compromised site with no AI angle at all – the AI theme appeared only in the command-and-control URL (for example, code.verification-claude-cdn[.]beer was served from a compromised advisory firm’s site).”
Seen in threat feeds
1 feed| Feed | First seen | Last seen | Sightings | What the feed says |
|---|---|---|---|---|
| abuse.ch ThreatFox | 1 | payload_delivery · Unknown malware · ClearFake · ClickFix · FakeCaptcha |
Indicators reported together
named in the same reports- download-version.1-9-18[.]comin 1 report
- perplexity-ai[.]onlinein 1 report
Copy these 2 indicators · defanged
Also named with it: CVE-2026-15409, CVE-2026-15410
Thanks — we review every report.