Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
103 IOCs

Exvicy: A Copycat of the ErrTraffic Malware Distribution Framework

Sekoia Blog
Sekoia Blog
Published September 14, 2026Original Report

Threat Actors

Malware Families

Excerpt

Exvicy: A Copycat of the ErrTraffic Malware Distribution Framework Take a tour GET A demo Solutions Platform Partners Company Resources en fr Take a tour GET A demo en fr Solutions Tailored cybersecurity built for your specific challenges and industry By Use Case SIEM replacement Stack integration Continuous threat detection Automated incident response Alert fatigue relief By Vertical Healthcare Technology Energy & Utilities Government Manufacturing MSSP Platform Give…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTURE91.92.33.156https://us-addnewdevi…maidsradar.comCAPABILITYMETA StealerPlayVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

103 indicators

TypeIndicatorConfidenceScoreFirst Seen
IP91.92.33.156HighScore 58/100First seen
URLhttps://us-addnewdevice.com/panelHighScore 58/100First seen
Domainmaidsradar.comMediumScore 47/100First seen
URLhttps://us-addnewdevice.comHighScore 58/100First seen
Domainhestiamortgages.comMediumScore 51/100First seen
Domainlastdayornot.topMediumScore 51/100First seen
Domainjouncepopdownloadnow.comMediumScore 52/100First seen
URLhttp://93.152.224.139/panelHighScore 58/100First seen
Domainislamjamal.comMediumScore 51/100First seen
Domainprimemarkets360.comMediumScore 40/100First seen
URLhttps://wwwnewdevice.org/panelHighScore 58/100First seen
Domainid-ll.comHighScore 68/100First seen
Domainascendpopdownloadtoday.monsterHighScore 76/100First seen
Domainwhirlpoploaderfast.comHighScore 63/100First seen
URLhttps://onlineprivacyprotect.com/panelHighScore 58/100First seen
Domainvydlje.comMediumScore 52/100First seen
Domainmedfinadvisory.comMediumScore 40/100First seen
Domainboundpopclickgetfile.monsterHighScore 71/100First seen
URLhttp://89.34.90.150/panelHighScore 58/100First seen
Domainsolidfuelsupplier.comMediumScore 43/100First seen
Domainsanremomodauomo.comHighScore 71/100First seen
Domainjumppopdownloadsecret.monsterMediumScore 51/100First seen
Domaingolfcoursetravel.comMediumScore 51/100First seen
IP93.152.223.161HighScore 86/100First seen
Domainfamilyonlinestore.comMediumScore 51/100First seen
Domainploutouscapitalus.comHighScore 75/100First seen
IP85.239.149.14MediumScore 39/100First seen
URLhttp://94.26.90.65/panelHighScore 58/100First seen
Domainsisaradistributors.comHighScore 77/100First seen
Domaintamilarnews.comHighScore 78/100First seen
Domainplumber-charlotte.comMediumScore 40/100First seen
Domainarushigupta.lifeMediumScore 58/100First seen
Domainflarclod.topHighScore 86/100First seen
Domainpremiumfastloans.comMediumScore 51/100First seen
Domainlaunchingramps.comMediumScore 51/100First seen
URLhttp://91.92.33.213/panelHighScore 58/100First seen
Domainyuriajonesphotography.comHighScore 77/100First seen
Domainphotobyroyan.comHighScore 78/100First seen
Domainsuveniricrnagora.comHighScore 81/100First seen
URLhttp://151.240.151.8/panelHighScore 58/100First seen
IP85.239.144.195MediumScore 42/100First seen
Domainthistle-productions.comMediumScore 40/100First seen
Domaindi-il.comHighScore 86/100First seen
URLhttp://85.239.149.167/panelHighScore 58/100First seen
Domainboardgamepix.comMediumScore 40/100First seen
Domainsocialseoguru.comMediumScore 63/100First seen
Domaindaleeby.comHighScore 83/100First seen
Domainjosephtoone.comMediumScore 51/100First seen
Domainbluemountainloan.comMediumScore 51/100First seen
Domainlocoaudio.comHighScore 78/100First seen
Domainwergwee.comMediumScore 40/100First seen
IP89.34.90.217HighScore 58/100First seen
IP85.239.149.13MediumScore 42/100First seen
Domainpigeononpinguin.topHighScore 67/100First seen
URLhttp://87.58.199.76/panelHighScore 58/100First seen
Domainbetesebplus.comMediumScore 58/100First seen
IP31.77.228.46MediumScore 42/100First seen
Domainilaumachque.comHighScore 78/100First seen
Domainbreadcabin.comHighScore 74/100First seen
URLhttp://135.181.127.216/panelHighScore 58/100First seen
Domaingardelectricalcontracting.comMediumScore 51/100First seen
Domainanalysis-id-lfg.infoHighScore 86/100First seen
Domaincanflymarketing.comMediumScore 51/100First seen
IP65.21.208.199HighScore 58/100First seen
Domainstraighteightlogistics.comMediumScore 51/100First seen
Domainnanakshahicoin.comHighScore 78/100First seen
IP193.41.68.196MediumScore 39/100First seen
URLhttp://89.34.90.159/panelHighScore 58/100First seen
Domainwashingtondc-plumbing.comHighScore 81/100First seen
Domaintycoonsrow.comMediumScore 40/100First seen
Domainchatgpt-web.vipHighScore 86/100First seen
Domainhanbayjewellery.comHighScore 78/100First seen
URLhttp://94.26.90.126HighScore 58/100First seen
URLhttps://cloudflare-check.netHighScore 58/100First seen
Domainlewdstories.comMediumScore 40/100First seen
Domainamalqasehselangor.comMediumScore 40/100First seen
Domainairduct1.comHighScore 78/100First seen
Domainasiana-online.comMediumScore 40/100First seen
Domainkawaiininjaclub.cfdMediumScore 48/100First seen
Domainlyxorgbs.comHighScore 78/100First seen
Domainsearlepub.comMediumScore 51/100First seen
Domainvirgensantisima.comHighScore 78/100First seen
Domainverification-js-cdn.boatsHighScore 86/100First seen
Domainstarbreezehvac.comMediumScore 40/100First seen
Domaindutyfrees.digitalMediumScore 58/100First seen
Domainscribblebubblebibi.topMediumScore 51/100First seen
URLhttp://94.26.83.206/panelHighScore 58/100First seen
Domainclickzona.netHighScore 86/100First seen
IP31.76.31.28HighScore 58/100First seen
IP91.92.43.245HighScore 58/100First seen
IP2.27.5.165MediumScore 39/100First seen
Domainconnorkimble.comMediumScore 51/100First seen
Domainleosafari.comHighScore 63/100First seen
Domainlionheadsl.comHighScore 77/100First seen
Domainredwing-max.bizMediumScore 43/100First seen
Domainustgate.comHighScore 74/100First seen
Domaingolftucsonarizona.comMediumScore 51/100First seen
Domainsunnypaydayloan.comHighScore 78/100First seen
Domaininteractivsbroker.comHighScore 86/100First seen
Domainsafetybygrace.comMediumScore 40/100First seen
Domainannamaclean.comMediumScore 40/100First seen
IP65.21.18.60HighScore 86/100First seen
URLhttp://151.243.113.21/panelHighScore 58/100First seen

IOC Relationship Graph

Building graph…