IOC Radar
DomainHighVerifiedSignal 70/100

oxdo.xyz

First Seen
Jun 11, 2026
Last Seen
Jun 12, 2026
Jun 11
First Seen
today
Jun 12
Last Seen
today
2
Reports
source reports
95%
Confidence
high
Found in 2 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
95%
Signal Score
70 / 100
IDS Rule
Yes
Threat Context
Malware Families2
LLummaVVidar
Tags

Feed Intelligence Summary

2 reports95% confidence
CO
CIRCL OSINT Feed
Today
Maltrail IOC for 2026-06-11
105 IOCs in report
CO
CIRCL OSINT Feed
Today
Maltrail IOC for 2026-06-11
54 IOCs in report

Activity Timeline

2 total obs
Jun 11Jun 11

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
2
Minimal
30d
2
Minimal
3mo
2
Minimal
Intelligence SummaryAI Generated

The domain **oxdo.xyz** has been identified as a critical indicator of compromise (IOC) associated with advanced persistent threat (APT) activities involving the Vidar and Lumma malware families. First observed on June

Threat ScoreHigh Risk
70
SIGNAL
Signal Score
95%
Confidence
2
Reports
First seenJun 11, 2026
Last seenJun 12, 2026
Verified IOC

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected today · Last seen today
Appeared in 2 threat reports from 2 sources
Used by malware: Lumma, Vidar