provisjournal.com
Classification: Malicious
provisjournal.com is a malicious hostname. Linked to Smoke Loader malware. Reported by ThreatFox Abuse.ch (SmokeLoader), last seen 2026-10-13.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 00:35:54.
MITRE ATT&CK associations
Malware families: SMOKE LOADER (S0226)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SmokeLoader | ThreatFox Abuse.ch | 2026-10-13 09:49:34 | 2026-10-13 10:25:05 | malicious-activity | S0226 Smoke Loader |
Tags
c2 smokeloader dofoil sharik smoke smoke loaderIP addresses resolved by this hostname
- 2604:4500:6:10b:0:2:ef1b:62c (2026-10-18 00:35:54)
- 23.227.203.100 (2026-10-18 00:35:54)
Whois information
- Domain
- provisjournal.com
- TLD
- com
- First indexed
- 2026-10-13 10:25:05
- Last updated
- 2026-10-18 00:35:54