hxxps://anythinghere.woremix[.]icu/Viewfiles/download.phpURL

Reported by 1 independent source · first reported 7 May 2026 by Huntress · last reported 7 May 2026

Last reported 5 months ago

What the reports say

1 report, newest first · the exact sentence from each

“hxxps://anythinghere.woremix[.]icu/Viewfiles/download.php”

HuntressVendor7 May 2026
Threat Actors Weaponize Tiflux RMMs in Malspam Attacks

Indicators reported together

named in the same reports

hg.lawdepotisland[.]comin 1 report
remote1a.peopleone.com[.]brin 1 report
f792d82e4472c001…04b38d7b8a07in 1 report
87074c1bfd071fc4…0f0ea5717952in 1 report
0b95524e5b00688f…8dd9ca25d2d5in 1 report
hxxps://lenwillfilenetwork[.]com/downloads/Network%20Solutions%20Agreement.msiin 1 report
lenwillfilenetwork[.]comin 1 report
anythinghere.woremix[.]icuin 1 report
hxxp://84.54.33[.]192:8040/Bin/ScreenConnect.ClientSetup.msiin 1 report
84.54.33[.]192in 1 report
shankar.woremix[.]icuin 1 report

Copy these 11 indicators · defanged

11 indicators, defanged, one per line

hg.lawdepotisland[.]com
remote1a.peopleone.com[.]br
f792d82e4472c001852998a3575e492907f38daa8d58ecdb3b3604b38d7b8a07
87074c1bfd071fc47410a52af863e9ca62b2b85950c4cf643a220f0ea5717952
0b95524e5b00688f7f5efe56a74b93985feb2152d9336d44ca7a8dd9ca25d2d5
hxxps://lenwillfilenetwork[.]com/downloads/Network%20Solutions%20Agreement.msi
lenwillfilenetwork[.]com
anythinghere.woremix[.]icu
hxxp://84.54.33[.]192:8040/Bin/ScreenConnect.ClientSetup.msi
84.54.33[.]192
shankar.woremix[.]icu

Thanks — we review every report.

Report a wrong value