TROYANOSYVIRUS
Back to URLs

mod-bus.xamir9on.surf

https://mod-bus.xamir9on.surf/sh5hne-c8b9b4-sskjy-znq2k2of-ybay3z/usr294-verif.confirm

offlinemalware_downloadSource: urlhaus

URL Details

Hostmod-bus.xamir9on.surf
Schemehttps
Path/sh5hne-c8b9b4-sskjy-znq2k2of-ybay3z/usr294-verif.confirm
TLDsurf
Registered Domainxamir9on.surf
Host Typefqdn
Date Added5/6/2026, 12:19:13 AM
Last Online5/6/2026, 12:19:13 AM
First Seen5/6/2026, 12:19:13 AM
Last Seen5/6/2026, 12:19:13 AM

Tags

ClearFakeSnappyClient

IOC Correlations

urldomain: mod-bus.xamir9on.surf(hosted_on)80%