kefel.io

Classification: Malicious

kefel.io is a malicious hostname. Linked to Spica malware. Reported by 1 threat source, last seen 2025-07-26.

Current activity

  • Offline — no longer resolving. Last online 2025-07-26 06:17:59.

MITRE ATT&CK associations

Malware families: SPICA (S1140)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SPICA ThreatFox Abuse.ch 2025-07-24 06:28:37 2025-07-26 06:17:59 malicious-activity S1140 Spica

Tags

apk apt c2 cryptoscam exe fakecryptodashboard fast-flux nodejs pq-hosting russianapt sslreuse

IP addresses resolved by this hostname

Whois information

Domain
kefel.io
TLD
io
First indexed
2025-07-24 07:17:13
Last updated
2025-07-26 06:17:59