ThreatFox IOC Database
You are viewing the ThreatFox database entry for domain PlixoWorks.com.
Database Entry
| IOC ID: | 1758514 |
|---|---|
| IOC: | PlixoWorks.com |
| IOC Type : | domain |
| Threat Type : | payload_delivery |
| Malware: | NetSupportManager RAT |
| Malware alias: | NetSupport |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| ASN: | AS215730 H2NEXUS-AS |
| Country: |  UA |
| First seen: | 2026-03-05 06:22:07 UTC |
| Last seen: | never |
| UUID: | 5881a6e3-180e-11f1-a068-42010aa4000a |
| Reporter |  HuntYethHounds |
| Reward | 5 credits from ThreatFox |
| Tags: | ClickFix IClickFix NetSupport RAT |
HuntYethHounds
[HTTP]CMPI=60
GatewayAddress=plixolabsaf[.]com:443
gsk=GM;N@BDHHL<PACFE:J?LDP:C>IBMFN
gskmode=0
GSK=GM;N@BDHHL<PACFE:J?LDP:C>IBMFN
GSKX=GM;N@BDHHL<PACFE:J?LDP:C>IBMFN
Port=443
SecondaryGateway=PlixoWorks[.]com:443
SecondaryPort=443