ThreatFox IOC Database
You are viewing the ThreatFox database entry for domain ikhfaavpn.com.
Database Entry
This IOC expired
This IOC is an old IOC and hence has expired on 2026-09-15 10:39:25 UTC. We therefore refrain from exporting it into our datasets. As a result, this database entry is purely informational and has no impact.
| IOC ID: | 1151079 |
|---|---|
| IOC: | ikhfaavpn.com |
| IOC Type : | domain |
| Threat Type : | botnet_cc |
| Malware: | DONOT |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| ASN: | AS399629 BLNWX |
| Country: |  NL |
| First seen: | 2023-08-20 09:52:47 UTC |
| Last seen: | never |
| UUID: | 3a260a7f-3f3d-11ee-9416-42010aa4000a |
| Reporter |  500mk500 |
| Reward | 5 credits from ThreatFox |
| Tags: | APT APT Donot DoNot |
| Reference: | https://www.cyfirma.com/outofband/donot-apt-elevates-its-tactics-by-deploying-malicious-android-apps-on-google-play-store/ |
500mk500
https://www.virustotal.com/gui/file/8f56747b118f48e4a38a70be0e0c653fd4e452e2ce22c1ff35124ef1dc0f7c61/detectionhttps://www.virustotal.com/gui/file/86c415e5462d21196906a025b37e86413842771e39f73c75ddb50a80881a90e3/detection
https://www.virustotal.com/gui/file/3463083d0f22ee6c35cef6a603f985b6ba03fd6a85b0e8a40c6d3d22ac73294c/detection