Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxps://utaq[.]cfww[.]shop/gooll/gooll[.]html
copy defanged
copy refanged (live)
First seen
2026-05-22
Last seen
2026-05-22
Sightings
1
Posts referencing this indicator
Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit
Socket
Landing page embedding the Coruna implant.
2026-05-22
https://utaq.cfww.shop/gooll/gooll.html · URL · cyfar.ca
