50 indicators
KongTuke — Indicators of Compromise
Samit Hota·
#ioc#kongtuke
Overview
Indicators of compromise associated with KongTuke. 50 indicators listed below.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| domain | oosterhout.click | July 18, 2026 | 100% |
| url | https://oosterhout.click/api/v1/session | July 18, 2026 | 100% |
| url | https://oosterhout.click/api/v1/verify | July 18, 2026 | 100% |
| url | https://oosterhout.click/api/v1/status | July 18, 2026 | 100% |
| domain | monteiro.click | July 17, 2026 | 100% |
| url | https://monteiro.click/api/v1/verify | July 17, 2026 | 100% |
| url | https://monteiro.click/api/v1/session | July 17, 2026 | 100% |
| url | https://monteiro.click/api/v1/status | July 17, 2026 | 100% |
| url | https://tommy-aa.lol/f | July 17, 2026 | 100% |
| domain | tommy-aa.lol | July 17, 2026 | 100% |
| url | https://ritchie.click/o9qhk2jz.js | July 17, 2026 | 100% |
| url | https://ritchie.click/pvgdgpjx.js | July 16, 2026 | 100% |
| url | https://tommy-or.lol/f | July 16, 2026 | 100% |
| domain | tommy-or.lol | July 16, 2026 | 100% |
| url | https://ritchie.click/ha1es146.js | July 16, 2026 | 100% |
| url | https://ritchie.click/mmaxs0rs.js | July 16, 2026 | 100% |
| url | https://ritchie.click/lkg91c5q.js | July 16, 2026 | 100% |
| url | https://ritchie.click/t4et81av.js | July 16, 2026 | 100% |
| url | https://ritchie.click/l46p3f8z.js | July 16, 2026 | 100% |
| url | https://ritchie.click/85iuztos.js | July 16, 2026 | 100% |
| url | https://ritchie.click/gkbfcesb.js | July 16, 2026 | 100% |
| url | https://ritchie.click/q7eu4gpd.js | July 16, 2026 | 100% |
| url | https://ritchie.click/jh2fg27r.js | July 16, 2026 | 100% |
| url | https://ritchie.click/7kv57ax9.js | July 16, 2026 | 100% |
| url | https://ritchie.click/5mv24f3u.js | July 15, 2026 | 100% |
| url | https://ritchie.click/n2bw9boq.js | July 15, 2026 | 100% |
| domain | bitista.icu | July 15, 2026 | 100% |
| url | https://bitista.icu/file.js | July 15, 2026 | 100% |
| url | https://bitista.icu/api/v1/session | July 15, 2026 | 100% |
| url | https://ritchie.click/m5t9l50e.js | July 15, 2026 | 100% |
| url | https://bitista.icu/api/v1/verify | July 15, 2026 | 100% |
| url | https://bitista.icu/api/v1/status | July 15, 2026 | 100% |
| url | https://ritchie.click/ksbfgehn.js | July 15, 2026 | 100% |
| url | https://f-codebase.lol/f | July 15, 2026 | 100% |
| domain | f-codebase.lol | July 15, 2026 | 100% |
| url | https://ritchie.click/frxhgs71.js | July 15, 2026 | 100% |
| url | https://ritchie.click/vyfk8uki.js | July 15, 2026 | 100% |
| url | https://ritchie.click/1pgdux6i.js | July 15, 2026 | 100% |
| url | https://ritchie.click/y6noj7h0.js | July 15, 2026 | 100% |
| url | https://ritchie.click/bgmmbr3x.js | July 15, 2026 | 100% |
| url | https://ritchie.click/i7sh56je.js | July 15, 2026 | 100% |
| url | https://ritchie.click/usfp4ldu.js | July 15, 2026 | 100% |
| url | https://ritchie.click/i7r4dbm3.js | July 15, 2026 | 100% |
| url | https://ritchie.click/3ypepkhb.js | July 15, 2026 | 100% |
| url | https://ritchie.click/ybsunal3.js | July 15, 2026 | 100% |
| url | https://ritchie.click/ahbod5es.js | July 15, 2026 | 100% |
| url | https://ritchie.click/slyp1crx.js | July 15, 2026 | 100% |
| url | https://ritchie.click/vdej742l.js | July 15, 2026 | 100% |
| url | https://ritchie.click/cpr5bp4s.js | July 14, 2026 | 100% |
| ip:port | 162.33.179.231:80 | July 14, 2026 | 75% |
Related content