indicatorurl
hxxps://l1ewsu3yjkqeroy[.]xyz/api/ip-sync/sync
- First seen
- 2026-05-22
- Last seen
- 2026-05-22
- Sightings
- 1
Posts referencing this indicator
- Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit
Endpoint for victim IP and device version beaconing (HTTPS POST).