ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://sfrclak.com:8000/6202033.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1780228
IOC: http://sfrclak.com:8000/6202033
IOC Type :url
Threat Type :payload_delivery
Malware: ContagiousDrop
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-04-02 06:23:32 UTC
Last seen:never
UUID:d968abca-2e10-11f1-9af6-42010aa4000a
Reporter chinchilla
Reward 5 credits from ThreatFox
Tags:CSA-260455 npm plain-crypto-js supply-chain

Avatar
chinchilla
C2 callback URL used in npm supply chain attack. Trojanized packages (plain-crypto-js-4.2.1, malicious axios versions) call back to this endpoint. CrowdStrike CSA-260455.