Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxps://healightejustb[.]org/checkupdateTO[.]js
copy defanged
copy refanged (live)
First seen
2026-06-02
Last seen
2026-06-02
Sightings
1
Posts referencing this indicator
Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor
Palo Alto Networks
PDF-Ninja C2 URL for fetching malicious JavaScript.
2026-06-02
https://healightejustb.org/checkupdateto.js · URL · cyfar.ca
