hxxp://ip-api[.]com/json/URL
Reported by 2 independent sources · first reported by ANY.RUN · last reported
Last reported 10 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize“URL: hxxp://ip-api[.]com/json/”
-
IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime“The sample contains cleartext requests to hxxp://ip-api[.]com/json/ so the ransom interface can display a city and country.”
Indicators reported together
named in the same reports- vb[.]netin 1 report
Copy this indicator · defanged
Thanks — we review every report.