Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxp://45[.]94[.]47[.]204/api/join/
copy defanged
copy refanged (live)
First seen
2026-05-14
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
Why AMOS matters: The macOS malware stealing data at scale
Sophos
C2 registration endpoint
2026-05-14
http://45.94.47.204/api/join/ · URL · cyfar.ca