ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain evamotion.com.

Database Entry


IOC ID:1815827
IOC: evamotion.com
IOC Type :domain
Threat Type :payload_delivery
Malware: ClearFake
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS209242 CLOUDFLARESPECTRUM
Country:- US
First seen:2026-05-18 07:06:08 UTC
Last seen:never
UUID:0b84b18c-5288-11f1-b930-42010aa4000a
Reporter Anonymous
Reward 10 credits from anonymous
Tags:ClickFix compromised fake-plugin WordPress

Avatar
Anonymous
Compromised WordPress site delivering a ClickFix MSI loader via fake plugin /wp-content/plugins/neueueu/. Re-verified live 2026-05-18.