Indicator
http://130.94.6.228/apt.tar.gz
Type url · source intel_report_ingest
Investigation
18
Verdict
MENTIONED — 1 report, unverified
- What is this
- URL observed in Intel Report Ingest.
- Should you care
- Weak signal — mentioned in 1 report, not corroborated across feeds.
- What to do
- No action — weak signal.
What this is
URL indicator: http://130.94.6.228/apt.tar.gz
Mentioned in Mandiant / Google Threat Intelligence Blog research ingest
Live page
Screenshot of the actual page, via urlscan.io — hover to view full.
via urlscan.io· scanned 2026-06-27
Threat detail
Exploitation status and malware-family attribution from stored fields.
exploitation: unknown
Graph preview
Neighborhood topology — open the graph for interactive pivots.
Loading graph…
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
- Related alerts, reports, and entities
Structured pivots from local graph context.
- Open intel graph (neighborhood)
See edges, pivots, and corroboration at a glance.
- Investigation canvas
Full inspector with neighbor expansion.