hxxps://hitpak[.]org/page.php?tynor=URL

Reported by 1 independent source · first reported 28 Jan 2026 by ESET WeLiveSecurity · last reported 28 Jan 2026

Last reported 8 months ago

What the reports say

1 report, newest first · the exact sentence from each

“hxxps://hitpak[.]org/page.php?tynor=<ComputerName>sss<Username>”

ESET WeLiveSecurityVendor28 Jan 2026
Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan

Indicators reported together

named in the same reports

hxxps://hitpak[.]org/notepad2.dllin 1 report
hitpak[.]orgin 1 report
hxxps://foxy580.github[.]io/koko/file.dllin 1 report
foxy580.github[.]ioin 1 report
hxxps://buildthenations[.]info/PKCERT/pkcert.htmlin 1 report
buildthenations[.]infoin 1 report
b15b1f3f2227eba4…df34b9d30b6ain 1 report
8b103d0aa37e5297…fd4f6b2ecbaain 1 report
188.114.96[.]10in 1 report

Copy these 9 indicators · defanged

9 indicators, defanged, one per line

hxxps://hitpak[.]org/notepad2.dll
hitpak[.]org
hxxps://foxy580.github[.]io/koko/file.dll
foxy580.github[.]io
hxxps://buildthenations[.]info/PKCERT/pkcert.html
buildthenations[.]info
b15b1f3f2227eba4b69c85bdb638df34b9d30b6a
8b103d0aa37e5297143e21949471fd4f6b2ecbaa
188.114.96[.]10

Thanks — we review every report.

Report a wrong value