ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain ipnode.zori9vax.lat.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1806421
IOC: ipnode.zori9vax.lat
IOC Type :domain
Threat Type :payload_delivery
Malware: ClearFake
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-05-04 23:17:27 UTC
Last seen:2026-05-04 23:21:50 UTC
UUID:6a87be2e-480f-11f1-8759-42010aa4000a
Reporter Gi7w0rm
Reward 10 credits from anonymous
Tags:4May2026 ClearFake Commandline Windows