THREATNOIR
Subscribe
Back to Feed
Threat IntelligenceJun 9, 2026

"SERVER": yuhvgbzsa66biqeatbmdvfo5b5jjefcmz5t2vjuvco5qtdkshfpabyid[.]onion "BUNDLE_PORT": 8443 "O...

New dark web domain and port associated with 'deus' operator and 'msi_new1' tag.

Read at source

Summary

A new dark web domain, yuhvgbzsa66biqeatbmdvfo5b5jjefcmz5t2vjuvco5qtdkshfpabyid[.]onion, has been identified. This domain is associated with the operator 'deus' and tagged as 'msi_new1'. The bundle port is listed as 8443, suggesting a potential command and control or data exfiltration channel.

Indicators of Compromise

  • domain — yuhvgbzsa66biqeatbmdvfo5b5jjefcmz5t2vjuvco5qtdkshfpabyid[.]onion

Entities

deus (threat_actor)