Trusted Design

Malicious Scanbox Host

概要

URL hosting the Scanbox exploit kit

Created: 2026-02-23

Indicators

• URL - http://extcitrix.we11point.com/vpn/index.php?ref=1 -
• URL - http://5.104.105.194/adminxx5xx/i/s.php?seed= -
• FileHash-SHA256 - 3fe208273288fc4d8db1bf20078d550e321d9bc5b9ab80c93d79d2cb05cbf8c2 -
• FileHash-SHA256 - d4be6c9117db9de21138ae26d1d0c3cfb38fd7a19fa07c828731fa2ac756ef8d -
• URL - http://5.104.105.194/adminxx5xx/i/ -
• YARA - 35f39c384f02d4d0afebd3d000c61121c994f748 -
• YARA - 1ec88284039c6a44047c8f9160efd31723ecd1ed -
• URL - http://142.91.76.134/p.dat -
• URL - http://5.104.105.194/adminxx5xx/i/recv.php -
• URL - http://5.104.105.194/adminxx5xx/i/p.php -
• FileHash-SHA256 - 8d168092d5601ebbaed24ec3caeef7454c48cf21366cd76560755eb33aff89e9 -
• YARA - 8a72f3e3bed90e920036f23b2353b142e54db87e -
• hostname - extcitrix.we11point.com -

類似Pulses

• URL delivering Trojan (score: 0.59)
• "Virus Found!! Scan Now" - Avast Themed Phishing (score: 0.58)
• Malicious URLs (score: 0.57)
• Hosts Dropping exploit kit via double encoded javascript (score: 0.56)
• Malware URLs (score: 0.55)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る