ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain 9elmharbor.ru.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1781524
IOC: 9elmharbor.ru
IOC Type :domain
Threat Type :payload_delivery
Malware: Unknown Stealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-04-05 14:38:29 UTC
Last seen:never
UUID:1d285916-30fd-11f1-9af6-42010aa4000a
Reporter HuntYethHounds
Reward 5 credits from ThreatFox
Tags:Fake Claude MD5 Hash Subdomain

Avatar
HuntYethHounds
The MD5 hash subdomain is generated from the victim computer name and username.

http://MD5_HASH_HERE.9elmharbor[.]ru/cloude-91267b64-989f-49b4-89b4-984e0154d4d1