TROYANOSYVIRUS
Back to URLs

cmdsets.nodespit.surf

https://cmdsets.nodespit.surf/draw-msft-cl0ud-acc-trust7934/gettwo.dll

offlinemalware_downloadSource: urlhaus

URL Details

Hostcmdsets.nodespit.surf
Schemehttps
Path/draw-msft-cl0ud-acc-trust7934/gettwo.dll
TLDsurf
Registered Domainnodespit.surf
Host Typefqdn
Date Added5/6/2026, 9:10:14 AM
Last Online5/6/2026, 9:10:14 AM
First Seen5/6/2026, 9:10:14 AM
Last Seen5/6/2026, 9:10:14 AM

Tags

ClearFakeSnappyClient

IOC Correlations

urldomain: cmdsets.nodespit.surf(hosted_on)80%