Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
wss://sad4w7h913-b4a57f9c36eb.herokuapp.com/ws · URL · cyfar.ca
indicator
url
wss://sad4w7h913-b4a57f9c36eb[.]herokuapp[.]com/ws
copy defanged
copy refanged (live)
First seen
2026-05-14
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite
Mandiant
Hard-coded WebSocket Secure URL used by the SNOWGLAZE Python tunneler for C2.
2026-05-13
