ThreatFox IOC Database
You are viewing the ThreatFox database entry for url https://api.mb2-rrfdnb-ip38z5.shop.
Database Entry
| IOC ID: | 1934705 |
|---|---|
| IOC: | https://api.mb2-rrfdnb-ip38z5.shop |
| IOC Type : | url |
| Threat Type : | botnet_cc |
| Malware: | Stealc |
| Confidence Level : | Confidence level is elevated (75%) |
| Is compromised? : | False |
| ASN: | AS209207 DHOST-AS |
| Country: |  RU |
| First seen: | 2026-09-26 10:06:46 UTC |
| Last seen: | 2026-09-27 06:32:41 UTC |
| UUID: | fb3cbc4f-b991-11f1-9214-42010aa4000a |
| Reporter |  abuse_ch |
| Reward | 5 credits from ThreatFox |
| Tags: | Stealc |
| Reference: | https://bazaar.abuse.ch/sample/a1cd581c687e1f8d9995d50b4200b6db4010c2c7d76b5b48642ae4ed0a55019e/ |