ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://158.94.211.208/OBOXW2026.txt.

Database Entry


IOC ID:1766705
IOC: http://158.94.211.208/OBOXW2026.txt
IOC Type :url
Threat Type :payload_delivery
Malware: XWorm
Confidence Level : Confidence level is high (95%)
Is compromised? : False
ASN:AS202412 OMEGATECH-AS
Country:- GB
First seen:2026-03-15 06:48:51 UTC
Last seen:never
UUID:ea27760a-2007-11f1-9af6-42010aa4000a
Reporter Lenard
Reward 5 credits from ThreatFox
Tags:OBOXW2026 Omegatech staging XWorm

Avatar
Lenard
XWorm RAT payload staging URL. Decoded from reversed-base64 builder parameter. Campaign ID: OBOXW2026. Omegatech bulletproof hosting (AS202412).