downloading-api.it

Domain

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

July 22, 2026

Last Seen

July 22, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

[article sweep] Used to serve a malicious executable in a phishing campaign

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

Malvertising Campaign Distributes SectopRAT via Fake Claude Desktop App

Jul 23·7 sources

Related Articles (1)

Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with ...

Huntress·Jul 22

Related Entities

Malware Phishing FakeAgent Ethereum 0xc1907d7be91f95903ad66d775c397302e7dd9228 0xe012d0f34cde9b870e9d9ed566ea5f8fd9b92228 SecTopRAT T1041 - Exfiltration Over C2 Channel T1053 - Scheduled Task/Job T1071 - Application Layer Protocol T1566 - Phishing T1574 - Hijack Execution Flow