http://oracle.zzhreceive.top/b2f628/b.sh
Classification: Malicious
http://oracle.zzhreceive.top/b2f628/b.sh is a malicious URL. Linked to Kinsing malware. 11 sightings from 3 threat sources, last seen 2026-07-13. Seen in BR.
Current activity
- Offline — no longer resolving. Last online 2026-10-13 13:17:13.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: KINSING (S0599)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, across technology, education and manufacturing networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2026-07-13 15:10:12 | 2026-07-13 15:10:12 | anomalous-activity country_code:br industry:technology-and-telecommunications malware | |
| Kinsing | Maltiverse Threat Observatory | 2026-07-13 14:30:06 | 2026-07-13 14:50:04 | anomalous-activity country_code:br industry:education-and-nonprofits industry:manufacturing malware | S0599 Kinsing |
| Kinsing | ThreatFox Abuse.ch | 2026-07-13 14:17:20 | 2026-07-13 14:25:04 | malicious-activity | S0599 Kinsing |
| Malware Download | URLhaus Abuse.ch | 2022-02-21 17:19:13 | 2022-02-21 17:19:13 | malicious-activity |
Tags
malware_download b2f628 cryptojacking redis shell h2minerURL information
- Hostname
- oracle.zzhreceive.top
- Domain
- zzhreceive.top
- TLD
- top
- SHA-256
d4aaed8d5baddf99007b1204aca44a67cc27dbe4dd81cef743ee4b831b1ca7da- First indexed
- 2022-02-21 18:16:09
- Last updated
- 2026-10-13 13:17:13
- Last online
- 2026-10-13 13:17:13