ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain daskljtitaskastvv.pro.

Database Entry


IOC ID:1834916
IOC: daskljtitaskastvv.pro
IOC Type :domain
Threat Type :payload_delivery
Malware: NetSupportManager RAT
Malware alias:NetSupport
Confidence Level : Confidence level is high (90%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-06-21 18:27:30 UTC
Last seen:never
UUID:213c1c22-6d95-11f1-9258-42010aa4000a
Reporter Justice_Hammer
Reward 5 credits from ThreatFox
Tags:ClickFix evalusion Fake-Captcha merry-florist NetSupport unc2190 wordpress-injection

Avatar
Justice_Hammer
ClickFix fake-CAPTCHA delivery chain. WP footer injection (deoint.com) → TDS (beroniw.com) → loader (daskljtitaskastvv.pro/dsasfd555.js, SHA256 prefix 4dda35) → lure (golviewcheckus.com) → NetSupport RAT dropper. EVALUSION/UNC2190 cluster attribution (medium confidence). Shared RADIUSSecret + cracked licensee DCVTTTUUEEW23 + infra co-location. Caveat: cracked-toolkit artifacts; cluster-level selectivity only. No country attributed.