ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://www.wearerescue.com/wp-login.php?redirect_to=https%3A%2F%2Fwww.wearerescue.com%2Fwp-content%2Fplugins%2Fresads%2Fmfls.php%3Fid%3DqwSPUwLH23Twhnr6FMpI&bp-auth=1&action=bpnoaccess.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1510604
IOC: https://www.wearerescue.com/wp-login.php?redirect_to=https%3A%2F%2Fwww.wearerescue.com%2Fwp-content%2Fplugins%2Fresads%2Fmfls.php%3Fid%3DqwSPUwLH23Twhnr6FMpI&bp-auth=1&action=bpnoaccess
IOC Type :url
Threat Type :payload_delivery
Malware: Latrodectus
Malware alias:BLACKWIDOW, IceNova, Latrodectus, Lotus
Confidence Level : Confidence level is high (95%)
Is compromised? : False
ASN:AS50474 O2SWITCH
Country:- FR
First seen:2025-04-24 05:55:26 UTC
Last seen:2026-03-10 18:33:14 UTC
UUID:7387feaf-207d-11f0-adfc-42010aa4000a
Reporter pancak3lullz
Reward 5 credits from ThreatFox
Tags:Latrodectus