Skip to content

Home Posts Engagements Recaps IOCs Detections About

Search posts and IOCs

Loading…

© 2026 cyfar.cav0.2.8DFIR · deception · detection

RSS detections tags about contact support privacy terms

Admin Debug Console Database Backup Archive

http://38.244.158.56/contact · URL · cyfar.ca

indicatorurl

hxxp://38[.]244[.]158[.]56/contact

First seen: 2026-05-14
Last seen: 2026-05-14
Sightings: 1

Posts referencing this indicator

Why AMOS matters: The macOS malware stealing data at scale
Sophos
Exfiltration endpoint for stolen data archives
2026-05-14