fondationanimalaidrelief.workers[.]devDomain
Reported by 1 independent source · first reported by Socket · last reported
Last reported 17 days ago
What the reports say
1 report, newest first · the exact sentence from each-
16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials“Fifteen of the extensions contact icy-star-f45c.workers.dev; the broken variant uses fondationanimalaidrelief.workers[.]dev but retains the same frontend and campaign marker.”
Indicators reported together
named in the same reports- browserweb[.]comin 1 report
- icy-star-f45c.workers[.]devin 1 report
- webtools[.]coin 1 report
- tabtools[.]coin 1 report
- fasttools[.]coin 1 report
- protools[.]netin 1 report
- webtools[.]comin 1 report
- neattools[.]comin 1 report
- api.rabby[.]ioin 1 report
- download.rabby[.]ioin 1 report
- static-assets.rabby[.]ioin 1 report
- static.debank[.]comin 1 report
- static-assets.debank[.]comin 1 report
- matomo.debank[.]comin 1 report
- hxxps://silent-wind-get.icy-star-f45c.workers[.]dev/in 1 report
- silent-wind-get.icy-star-f45c.workers[.]devin 1 report
- hxxps://small-boat-969c.icy-star-f45c.workers[.]dev/in 1 report
- small-boat-969c.icy-star-f45c.workers[.]devin 1 report
- hxxps://green-firefly-ab28.icy-star-f45c.workers[.]dev/in 1 report
- green-firefly-ab28.icy-star-f45c.workers[.]devin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.