TROYANOSYVIRUS
← Back to URLs

mod-bus.xam1riel.surf

https://mod-bus.xam1riel.surf/sh5hne-c8b9b4-sskjy-znq2k2of-ybay3z/usr294-verif.confirm

offlinemalware_downloadSource: urlhaus

URL Details

Hostmod-bus.xam1riel.surf
Schemehttps
Path/sh5hne-c8b9b4-sskjy-znq2k2of-ybay3z/usr294-verif.confirm
TLDsurf
Registered Domainxam1riel.surf
Host Typefqdn
Date Added5/5/2026, 6:03:15 PM
Last Online5/5/2026, 6:03:15 PM
First Seen5/5/2026, 6:03:15 PM
Last Seen5/5/2026, 6:03:15 PM
URLhaus Reference →

Tags

ClearFakeSnappyClient

IOC Correlations

url→domain: mod-bus.xam1riel.surf(hosted_on)80%