🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain minefox.lol.

Database Entry


IOC ID:1972036
IOC: minefox.lol
IOC Type :domain
Threat Type :payload_delivery
Malware: Unknown malware
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS215925 VPSVAULTHOST
Country:- BR
First seen:2026-10-18 06:10:01 UTC
Last seen:never
UUID:73ed16ef-ca72-11f1-bd13-42010aa4000a
Reporter wristhulk
Reward 5 credits from ThreatFox
Tags:DDoS elf garble golang minefox
Reference: https://urlhaus.abuse.ch/url/3951406/

Avatar
wristhulk
minefox DDoS bot distribution host. Dropper http://minefox.lol/bins/kla.sh pulls garble-obfuscated Go ELF bots (sha256 0cc42472a07cf14668e899b73adafe666d02495bf9349715613c8e7ba57244ea, 0/64 VT). Resolves to 176.65.139.196 (known distribution IP). Captured by SSH/Telnet honeypot 2026-10-17.