hxxp://95.163.153[.]80:8133URL
Reported by 1 independent source · first reported by SANS Internet Storm Center · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Macfinger ClickFix campaign, (Tue, Sep 22nd)“2026-09-21 23:12:59 UTC - hxxp://95.163.153[.]80:8133 - POST /api/t”
Indicators reported together
named in the same reports- 95.163.153[.]80in 1 report
- hxxps://velvet-otter-glagceis[.]life/t.js?site=4f0529f47320472732961318d7d0dfd1in 1 report
- velvet-otter-glagceis[.]lifein 1 report
- hxxps://velvet-otter-glagceis[.]life/t.4b1009ff6c3f.jsin 1 report
- hxxps://velvet-otter-glagceis[.]life/ext-b.4f9db6afd06a.jsin 1 report
- hxxps://velvet-otter-glagceis[.]life/collectin 1 report
- 6606a5f18184b224…2c5f2c70377cin 1 report
- 9d87b41c2b29ccbe…3a6299a3d564in 1 report
- hxxp://45.150.33[.]128/92961f75b259df2?force=1in 1 report
- 45.150.33[.]128in 1 report
- b68cdb1b46502fbc…bd4c8376b6dcin 1 report
- hxxp://45.150.33[.]128/d4c8083a7d97?force=1in 1 report
- 1a3765e8cb0055ec…b072c6805af4in 1 report
- hxxp://45.150.33[.]128/2286de55f9afd?force=1in 1 report
- hxxp://45.150.33[.]128in 1 report
Copy these 15 indicators · defanged
Thanks — we review every report.