Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxp://120[.]48[.]156[.]17/ey[.]php?ka=user1&id
copy defanged
copy refanged (live)
First seen
2026-06-16
Last seen
2026-06-16
Sightings
1
Posts referencing this indicator
Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk
K
Kaspersky
C2 endpoint used for exfiltrating stolen Steam session data.
2026-06-16
http://120.48.156.17/ey.php?ka=user1&id · URL · cyfar.ca
