ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain services-server0-web.com.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1851393
IOC: services-server0-web.com
IOC Type :domain
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS399486 VIRTUO
Country:- CA
First seen:2026-07-16 04:25:03 UTC
Last seen:never
UUID:f0e8e14c-80c4-11f1-97fa-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox
Tags:evilconwi Live rogue-rmm ScreenConnect
Reference: https://github.com/yankywilson/shinysp1d3r-intel

Avatar
Anonymous
Rogue ScreenConnect/MeshCentral operator estate. Likely EvilConwi ecosystem (moderate confidence). SLSH attribution roughly even chance (low confidence) - NOT forensically joined to ShinySp1d3r. Detail: https://github.com/yankywilson/shinysp1d3r-intel