IOC Radar
DomainMediumSignal 17/100

sl8.online

Location
United StatesUnited States
First Seen
Oct 17, 2025
Last Seen
Oct 17, 2025
Oct 17
First Seen
236d ago
Oct 17
Last Seen
236d ago
3
Reports
source reports
17%
Confidence
medium
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
17%
Signal Score
17 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

10 techniques

Feed Intelligence Summary

3 reports17% confidence
3
Source reports
17%
Confidence score
Category tags
credential accessdata exfiltrationdata extractiondata obfuscationindicatorinfostealer activity detectedmalicious softwaremalwarenetworknorth americaprocess injectionresearchedt1005t1020t1041t1055t1071t1071.001t1486t1539t1555t1565united states

Activity Timeline

1 total obs
Oct 17Oct 17

Threat Activity Heatmap

· Peak: 2025-10-17
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
17
SIGNAL
Signal Score
17%
Confidence
3
Reports
First seenOct 17, 2025
Last seenOct 17, 2025

VirusTotal

Not checked

WHOIS

description
These indicators of compromise (IOCs) were identified through LevelBlue Labs' proprietary collection and threat hunting processes, leveraging AI-driven heuristics to detect anomalous patterns, behavioral analysis of malicious activity, and cross-referenced intelligence from endpoint telemetry and external sources. The IOCs included in this pulse are associated with infostealer malware, designed to harvest sensitive data such as credentials, cookies, and financial information from compromised systems. Use this data to enhance detection rules, block malicious infrastructure, or correlate with existing incident investigations involving data theft. These indicators have been assigned a medium confidence level regarding their maliciousness. They are therefore subject to further review, and feedback is greatly appreciated.

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 7 months ago · Last seen 7 months ago
Appeared in 3 threat reports