Blocking: Most likely safe to block.
Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC
Validated, and reported as malicious by at least one credible research team. Includes everything on Confident. Run it in alert or log-only mode for a week or two, look at every hit, then switch to block.
4,178 indicators. Numbers in the Sources column link to the original reports.
| Indicator (defanged) | Type | Reported as | Block scope | First reported | List | Sources |
|---|---|---|---|---|---|---|
7d9f5eb3f704607e6f63681842f48071cc58f2f2e63b16b64a49440cb4b9e6e3 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
8495598b1fec814d72caf76f1460b132071bb7305335331fed3bac9876c6e40c | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
85b5e95cbb5103202abebf8f84b91a286994e61b33ddef53355ab0df2a2b6d9a | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
88544d36beb6dc621c9376806836d0ad109ece64b589605d5674e0c86313d1c0 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
8a64d368ce14c5a1f5e775714bcc02f080d0541360743bb4235e0d640f1787b1 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
94aa88ff6222583b2a5b791ddd655837787e31f59483ed91f860857d3399b84a | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
96488c59287889fcd3b9952ec78b78914fabb901c8b61a7354552439170ed148 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
98e17fe36ff77106bbbb9a04f3e00004bf872b88aab22438076966913ea83322 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
99b5404df81992cad104dd242bc736d75fd6c58af34dc1a75a8ee3c5e1784fa4 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
9d3085eac9a59a94f0473db5ec0173def8777d2f794da281fb1749389ae33cdb | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
9d513a419bf129a42017b29eb7d084451a4f34be0828f6871439ec79f7f9b5fb | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
a71498bfffae8ac694356b3f2436820b396946c9e71c8915e282c1b2fdba4162 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
ab7d531d298f0d77bc7bbbdc36f4f8a1732ceca90ff60e3f225a99b9b10f334e | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
ac99754357bd4a69c1de576977e0ee19c7354f29f7f52a9893b7a60f9c2f5248 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
adbee84e9a43949b0a816f052ffb3c0b7855e078b985fea95532158c3b9389bc | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
b88a7f3288bdf4b97d75dad4e47e5cb3d4e0962b12674a08e32e5f96e762e877 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
bcd7e5964630c34f06a43e48d696d99d7abae6b679509ad839ffa5179a972838 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
c3c09fe219e10808f053e580628aeb87b1f00fc683c810aa828905fe03cda98f | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
c3c6ab58514cd13638cf049332186ef6d4ec7b256913edb1cd66a19437608882 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
c4d2efa57eef0c5defc4ca708ebe35832f8b543cf764beebef56fef6d36d4f69 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
c59ebe5cf45935c7b5f91b5936fe2c8a5feb7ca161e40ca4e3fb93e447373fa6 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
cff25a9c84c893e32a9a75c1dae385934cf917f709efa11172a53ea2337fa109 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
d138d5f4fbc77650bc3be1cbf8fbd0ee292aa30eed5feec1ea7ba02e57da932b | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
d478f867512e18d839180ceafc980c8fb26c3aa7d1c9e96d054819c81afef6f4 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
d948b486c740b66642a5ae29dc1cb80da703ad40296bcda34a1b27216b63a5cd | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
e8bb763bd10e727228ca9a8e3e6cf10bf4de4639b6be680a3abfb181a0adc052 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
e8bc706b0b007d6a122c6b19e87451e550baee793540774db13b9a08803ed76a | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
f025520d648c7799ca5bed4a9be5bee14ac33be1f1e9b20c090c8c6319404fcf | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
f32dfbe4a2c11a975d735297bf76f6497ce9f5789ab8eaaef3fdd182c2f1f7b1 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
f4aceaf5c0740093f8040f5e0f29c7582a1bd7ab2bca628d162fb45c29045063 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
fa7d8c44a0ecb5ec40832d0d2cfe22c47879317177eae88d178e156f1c8d61a3 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
fa7fc029ac13af2f3880151e9c408e9afadeba7b2cff01659806fb7c3c83288d | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
fc789397742aee60b01292b071f79b4165981c31aa431eb1577a47c5911381c3 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Check Point Research [1] |
config[.]hubdisplay[.]lol | Domain | Command and control | That exact host | 2026-09-02 | Blocking | Elastic Security Labs [1] |
health[.]journal-metric[.]lol | Domain | Command and control | That exact host | 2026-09-02 | Blocking | Elastic Security Labs [1] |
metric[.]gardenpark[.]click | Domain | Command and control | That exact host | 2026-09-02 | Blocking | Elastic Security Labs [1] |
monitor5[.]roast-core85[.]click | Domain | Command and control | That exact host | 2026-09-02 | Blocking | Elastic Security Labs [1] |
polygon[.]iwmukj[.]xyz | Domain | Command and control | That exact host | 2026-09-02 | Blocking | Elastic Security Labs [1] |
polygon[.]mnyhgxda[.]xyz | Domain | Command and control | That exact host | 2026-09-02 | Blocking | Elastic Security Labs [1] |
static4[.]livelab[.]one | Domain | Command and control | That exact host | 2026-09-02 | Blocking | Elastic Security Labs [1] |
13d7237d7289e67c2d806a65d52580b453ce4987acbe2c4c4d04833f55ebccfa | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
14b2ac356ed75d10ef40bbaaa48e7dd9fff7de9719c2a43ad123fe843dd4e4e2 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
1617552169df805405b1bb70f742d6eac5af342f31c6e39ff6b9613bd2392354 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
4c897108e8e793d6904110928c996815c302d6975c9bc61162149e855a963d50 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
7c08cf409194056a8517865e5d3433d1499bb8262263b55b49b8b07d9d182fcb | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
adc4aa652965396b52e79435ca54987ae9eb21bf5e67de5e9461b09655165ee4 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
bd97d5cab2d09b001d1b9e08890bce1a2b2cf8542a4b31c86b2def59328cafb2 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
c66d2b77b9e85c53391891212413ad9a99eb66f4b11c6a431e78884a5b2651e5 | SHA-256 hash | Malware file | That file | 2026-09-02 | Blocking | Elastic Security Labs [1] |
cc8ttkv35b[.]com | Domain | Malware download | Domain and subdomains | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
gehie246[.]com | Domain | Malware download | Domain and subdomains | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
iualef[.]net | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
n7b8t85zsg[.]com | Domain | Malware download | Domain and subdomains | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
oijfwe[.]net | Domain | Malware download | That exact host | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
www[.]gehie246[.]com | Domain | Malware download | That exact host | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
yimxg25tiy[.]com | Domain | Malware download | Domain and subdomains | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
6d6ba2bc9ad414837826f7278bc3e0116f1aeda02d0c2284ed65819f5d9180a8 | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
c6100166e2d3b40388980f7674712ef39e937ac04925ca5d370415399ed73faf | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
hxxp://www[.]gehie246[.]com/712down | URL | Malware download | That exact URL | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
hxxps://www[.]gehie246[.]com/712down | URL | Malware download | That exact URL | 2026-09-01 | Blocking | Microsoft Threat Intelligence [1] |
dontpad[.]com | Domain | Data theft | That exact host | 2026-09-01 | Blocking | Google Threat Intelligence / Mandiant [1] |
aceofspadesmanagement[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
crossdwm[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
digimediaskill[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
dnshnsdev[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
gamebarapp[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
gamebarappinformation[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
glmediaagency[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
greenyjsgfd[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
healthcomfsdpower[.]com | Domain | Command and control | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
healthful-hub[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
healthfullyrecipes[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
healthvitalitycare[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
healthyweightplan[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
hecowime-aqdphyd4bbdef6es[.]westeurope-01[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
helptellerbls[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
hpjumpsrv[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
kyrasey-f8hfexa5cqamh7fk[.]westeurope-01[.]azurewebsites[.]net | Domain | Command and control | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
lifespotify[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
mens-health-online[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
msmanagementgrp[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
msmanagementgrpmedia[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
naturalapplication[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
neumedicahealthcare[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
optimumhealthcredit[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
plugplay[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
refreshhealthandwellness[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
retaildemo[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
rgbteller[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
sahi-finance[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
storview[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
timedrv[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
tubitak[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
userwellgtfs[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
visitfinancedentists[.]com | Domain | Command and control | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
wdisystem[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
wslmenus[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
wslwebui[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-01 | Blocking | Securelist [1] |
1ea83e4e4592b01e4acab63eb867bee5 | MD5 hash | Malware file | That file | 2026-09-01 | Blocking | Securelist [1] |
810f8e3b88eb05f710c09552941d6f56 | MD5 hash | Malware file | That file | 2026-09-01 | Blocking | Securelist [1] |
api[.]504guaratv[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
api[.]b2compages[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
api[.]elcaminodesermadre[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
api[.]ideasnation[.]net | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
api[.]jyfgarriga[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
api[.]rezperfect[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
api[.]shopfoora[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
app[.]bcntextilrep[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
app[.]conviertenoensi[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
app[.]geutex[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
app[.]sentiented[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
app[.]shuchipharmacy[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
app[.]springstore[.]net | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
app[.]stateyatra[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
auth[.]auravp3[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
auth[.]clubvp3[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
auth[.]esalesrep[.]net | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
auth[.]secureswallow[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
auth[.]shuchimed[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
auth[.]speaktowinclients[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
cdn[.]baraldes[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
cdn[.]cobraporganardinero[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
cdn[.]estudiod2[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
cdn[.]planningportfolioweek[.]org | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
cdn[.]shinozen[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]ariesglobalsoft[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]cistecca360[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]emialvarez[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]metodorace[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]premios-king[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]suplenation[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]trythecrowdmakers[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
static[.]turboleadslab[.]com | Domain | Command and control | That exact host | 2026-09-01 | Blocking | Huntress [1] |
us05[.]org | Domain | Malware download | Domain and subdomains | 2026-09-01 | Blocking | Huntress [1] |
2f47cfbb13f7a8a2d30d287f4ddd974fabea6762ad9781d438eb53da41b4582d | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Huntress [1] |
5274e93e35586a341d14b50cdf8413d59c51fd94f32bdc70bfdfb77198367603 | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Huntress [1] |
84437d4239d2a3d90c4faad0a3c0630b2f61a40f7bbd12109bef74d7613b8756 | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Huntress [1] |
8c3b41ea5a85778145a6e5772bfee2eb0f8b027d0af199fb71a76dfb8bb29e5a | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Huntress [1] |
c513a7346484ee69a2931c4a89956ee50aa63e4366ef989315e669d8f10d7485 | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Huntress [1] |
fdd376562aac4be64fb635546a61e1912ff2c353360db73d2c553dcbb5a44f54 | SHA-256 hash | Malware file | That file | 2026-09-01 | Blocking | Huntress [1] |
0d1fce0cb2b9dec26a10f0822aeffb19 | MD5 hash | Malware file | That file | 2026-08-31 | Blocking | Check Point Research [1] |
581e2e2265d0c1509b3799c5a9039374 | MD5 hash | Malware file | That file | 2026-08-31 | Blocking | Check Point Research [1] |
91038aebe528a065c3e995a418db6826 | MD5 hash | Malware file | That file | 2026-08-31 | Blocking | Check Point Research [1] |
de10c6b3dc4619f59bc9c80a0aa15e6a | MD5 hash | Malware file | That file | 2026-08-31 | Blocking | Check Point Research [1] |
e27ae65977287bdfb7b0e15fd3603f85 | MD5 hash | Malware file | That file | 2026-08-31 | Blocking | Check Point Research [1] |
san-sid[.]com | Domain | Malware download | That exact host | 2026-08-31 | Blocking | Unit 42 [1] |
24ab9fe5d5be62d3bf055a0ca4508e8bca2996b6d78649dce8145d8a27bc1c5b | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Unit 42 [1] |
hxxps://san-sid[.]com/owners | URL | Malware download | That exact URL | 2026-08-31 | Blocking | Unit 42 [1] |
c24e99f9437feacaa63766a3cde3fe3d | MD5 hash | Malware file | That file | 2026-08-31 | Blocking | Securelist [1] |
c2[.]installscenter[.]com | Domain | Command and control | That exact host | 2026-08-31 | Blocking | Group-IB [1] [2] |
caixaentradas1inboxshop[.]site | Domain | Malware download | Domain and subdomains | 2026-08-31 | Blocking | Group-IB [1] [2] |
infect[.]online | Domain | Listed by researchers | Domain and subdomains | 2026-08-31 | Blocking | Group-IB [1] [2] |
infectonline[.]store | Domain | Listed by researchers | Domain and subdomains | 2026-08-31 | Blocking | Group-IB [1] [2] |
installscenter[.]com | Domain | Command and control | Domain and subdomains | 2026-08-31 | Blocking | Group-IB [1] [2] |
0cd0cc49ea4ff48c675368f725e183608494f22fefa92d2f33577f70bb6c0d5d | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
0fa785bb9f95b113539bb909da88e6cac9a433a07935571d9bcd2d85746fc5bf | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
10de6185e31539cf01c8b05d9559e65e8693efd695f315de54667ef8c04de39c | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
1510823e7c80b4db5333dd18cd5992881496da30032d6d69b2a82e1c5cf30246 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
30af2ec2437af0f4910d528440715540dbec6a5587f86f327316a7a781c1e2fe | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
3f2f48525cf082672e38808480e214775e03dd943ff2df86172665aad96a5eaa | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
54e313434a7f3fa349e439857e23ab536a95c9927cf62f8358b5cdd9fabf2700 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
67fcfbdaab397ad1273135a3c6aa1d220ab76491cf945df081503401cc9732d2 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
91f225dcc7a01f926b03e8540d8b5e2d6c8e3763cc30f57381d702ce638fa6b0 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
93bb4a4812e77ddc17c2722340d915bd5c8387316bbdbc394c201a28cb9b7c88 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
96960409b6e1abf20eeb689d9e0a170008a15096de6a06ca5ae0d5aa56579042 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
bc91f90a5677404cf9c8f4bed7b36c22027b1549ffefee129b41fab3db3108b8 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
c4dd46e5b450349fd9fbf686a5a22f55f8371123b098104db663a3980646e138 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
cd8fc8effea20d28e76c53f3386c783e55dcb309e1525b27f7a141d51b6f6c78 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
d881a60ccd03b5417a1eed184143a18a333e7e9e9e351596a7a765843643af99 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
f775fe06a4c2563cb03e1aa42eb4e9532840cce9dc168ea2ca97cee7972e6b17 | SHA-256 hash | Malware file | That file | 2026-08-31 | Blocking | Group-IB [1] [2] |
bestsocialmedianewspapper[.]com | Domain | Malware download | Domain and subdomains | 2026-08-29 | Blocking | Microsoft Threat Intelligence [1] |
offlineupdater[.]com | Domain | Malware download | Domain and subdomains | 2026-08-29 | Blocking | Microsoft Threat Intelligence [1] |
18c2090e8a0ae0568af9b87e59eaf8270f23d2909600ed9db91a9444fd8b278f | SHA-256 hash | Malware file | That file | 2026-08-29 | Blocking | Microsoft Threat Intelligence [1] |
1c[.]maxintora[.]com | Domain | Malware download | That exact host | 2026-08-28 | Blocking | Censys [1] |
2oauth[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
approvalrequest-api[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
binance-idexchange[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] [2] |
brevantweuijdis[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
brmconfig[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
ceelorn[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
fdn4apex[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Confident | Censys, Elastic Security Labs [1] [2] |
gojirotomiodid[.]com | Domain | Command and control | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
google[.]2oauth[.]com | Domain | Malware download | That exact host | 2026-08-28 | Blocking | Censys [1] [2] |
karlenagida[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
kolitersdones[.]com | Domain | Command and control | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
leybers[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
liviliy[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
lozopro[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
lumirevax[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
lumirevion[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
meeggs[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
mimede[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
miralunexerfty[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
mmm-vps[.]online | Domain | Command and control | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
nexorivapgfk[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
permanenttrajectories[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
silvariona[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
silvarvexa[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
solaventro[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
soltrivena[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
solvariquejio[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
talmorvexa[.]world | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
tervixacom[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
tidalcoastapparel[.]com | Domain | Malware download | That exact host | 2026-08-28 | Blocking | Censys [1] |
update[.]maxintora[.]com | Domain | Malware download | That exact host | 2026-08-28 | Blocking | Censys [1] |
usersecuritycheck[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
virellixerxa[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
web02message[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
www[.]maxintora[.]com | Domain | Malware download | That exact host | 2026-08-28 | Blocking | Censys [1] |
x2664[.]com | Domain | Malware download | Domain and subdomains | 2026-08-28 | Blocking | Censys [1] |
07887055939e238184514110da990226b02e804e2371cb309487f7159171a3e7 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
13fc18e817241856dcef3989d6986a2dd428f3f4e31a4815723ea9510999a61c | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
1e9e7cdedcd4d20eb846a0268bccdb6aa817662516fb7cf62be930031c2c1885 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
2c24d7a819f8d15a1104875e20b7831be9a02580c01a349f6e39f3790b41b81c | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
2d7285c93866597e28c4686194456e9a6eb22fe80287461990da13dab1a9e0b5 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
2edf10f0af08c32b7721becc063297d09362e76e1f5a18f0d81837752363b578 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
512651fc5770932be61f513294fb738216d3ba923bda47bfcd5b328e2fc5636c | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
533428a3cf69e6fbf7a0b34f8915f8b9f6ba2e012ab8c9172e636f76b0f1d565 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
56ebaf8922749b9a9a7fa2575f691c53a6170662a8f747faeed11291d475c422 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
63aa18c32af7144156e7ee2d5ba0fa4f5872a7deb56894f6f96505cbc9afe6f8 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
6ffe12cdfe0a36dec4b4a40ecdafb4097b1af7c340b0fcecf9f5c67b7fa8b299 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
84ad46c293d749dbacc68a3bcf4a6a964343aa444a3b12e103cfe8f962f24762 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
9862075e68c565d5ad78b8a0dcf6c193092103c9607899c72eefa482b9c8f008 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
98cdd6ef9f5e6c06154423ab221550b683f2a4c9018d88ffcce085f92be88b6d | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
aa4fc4eb78d08de797220a8b9c1db3f8a584ffcb85dda47b71a11eb306280395 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
b0199da4b67416f24f3d235b4d6d64d2b9cff96f3e38141e3920b90b5bf633e6 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
b0935a6e5a81f3bed34367ebb87a96543a5a2a2b2fe4596e96e655b7715a3e28 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
b13da09f347597ea72d3ab075265bb37ae86c24f8c8cc6545e5255c9703dee1d | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
b59c9d532b2593cb0331f2f97f68896702bb5e8e868e2f07913542e4cbf7e195 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
bf3da65748ada560e893f4952c6bafab53ebf1b888a535092d2815f0f93ec781 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
c32d53280bca6e28060c44c43bd688a7d36e315909bb36ddaebb4d6517debeae | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
c36b5c170d1e59a957fc67f17df28605e275ec6e01f3d4c03531f6fd251c5189 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
ce61f3c40a71659843ad0defa40e226ba7d51b594ce09af4e496c661c6b7a09f | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
da7c33e5770216c550cc6dd67a1fc3194a10102e6f064df11f6241fe24c999c5 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
dadc9e33f8a1063c7cbd696e7527b45169075c708870b1b00f0cccddede1f1fb | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
e09980d1b1c508eb29d2931ac92f8d0a7e49ca5fe6ab6277fabf097a0b033b63 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
e0a40fb1573c73316920c296574b90cc52072e337b5c3e5b16355dfc3e306c44 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
e6b595c19b931960c18d562fe16bd4fa05d724b812d10945c2f965bf836783a8 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
eb819bf728b64b98a1c7e91e7da428addb8108a1ccd9500023952084e5a036ca | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
edb68fc8857d9c789c7cac806ccf988008a898bf5e8fe61908f558666eceefed | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
ee2c978c13fb248005b9c5d82b231fc7b38f9a3281ff1f73132b0ec0363b0b18 | SHA-256 hash | Malware file | That file | 2026-08-28 | Blocking | Censys [1] |
hxxp://89[.]34[.]90[.]111/tzast[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://approvalrequest-api[.]com/333[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://approvalrequest-api[.]com/55555555[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://binance-idexchange[.]com/333[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] [2] |
hxxp://fdn4apex[.]com/fdn4apex[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://google[.]2oauth[.]com/go[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://karlenagida[.]com/123[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://karlenagida[.]com/player[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://tidalcoastapparel[.]com/s[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://usersecuritycheck[.]com/12[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://web02message[.]com/web02message[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxp://x2664[.]com/x2664[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxps://brmconfig[.]com/video[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
hxxps://hurmadll[.]com/twenty[.]mp4 | URL | Malware download | That exact URL | 2026-08-28 | Blocking | Censys [1] |
109d5c9a9581a4ccabd092ffb67bbc3a8e98e807239cd41141fac46fd107a7b7 | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
35712dc8aa497371ce48a36975781dfc3a120ce5c99dc209637b05751bf4e8e9 | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
38ec1f5e23f65b10ae3027beabfa0bf7f9fb686355a9e33c7e7e44e6a998e04c | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
7108ff29916d064216aa2ece7fb395f1e3a73d12d19895bffc0bd46806cbf85a | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
7295090c2cb63ebc43f932451971c41f9d015d2741e97ae3d9855f5ae87cff94 | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
832e68e12ebf62b60cfe2a7b45e5948fcc364a74c8d73c3748b267617bcfb242 | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
83d16cd963b1926a9967e6928340f099abf983ca496639cfddd9d63e327db3d2 | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
aa8cda8a9a7835a72d1b832985c5976873d2c6e791524039b809ce4441d3f69f | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
da90b1219dcf1bf23e604b182b7737e188825df7205ea7b172231de66aeba293 | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
fa2ca62a47819417736d4edc59692bc920fb571d7eae468918f2fffc8920da53 | SHA-256 hash | Malware file | That file | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
hxxp://154[.]36[.]188[.]98:8080/Sz9110[.]bin | URL | Malware download | That exact URL | 2026-08-27 | Blocking | Proofpoint Threat Insight [1] |
aewaterdelivery[.]com | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
aimemtools[.]cfd | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
dev-tools[.]cfd | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
memaiagent[.]cfd | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
secupd[.]cfd | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
softwareguard[.]cfd | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
sys-tools[.]cfd | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
zkevopenanu[.]cfd | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | ReversingLabs [1] |
hxxp://158[.]94[.]208[.]7/files/8705834433/8njNDcy[.]exe | URL | Malware download | That exact URL | 2026-08-26 | Blocking | ReversingLabs [1] |
hxxp://158[.]94[.]211[.]222/files/1660459253/W3Trdgs[.]exe | URL | Malware download | That exact URL | 2026-08-26 | Blocking | ReversingLabs [1] |
hxxp://158[.]94[.]211[.]222/files/bur/fast[.]exe | URL | Malware download | That exact URL | 2026-08-26 | Blocking | ReversingLabs [1] |
hxxp://85[.]239[.]147[.]6/files/5851730241/IQEr4wy[.]exe | URL | Malware download | That exact URL | 2026-08-26 | Blocking | ReversingLabs [1] |
hxxp://85[.]239[.]147[.]6/files/Leetootoo/random[.]exe | URL | Malware download | That exact URL | 2026-08-26 | Blocking | ReversingLabs [1] |
hxxp://91[.]92[.]241[.]243/files/file_391c1e83ac309020[.]exe | URL | Malware download | That exact URL | 2026-08-26 | Blocking | ReversingLabs [1] |
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_03e1dd22b8ec149f[.]exe | URL | Malware download | That exact URL | 2026-08-26 | Blocking | ReversingLabs [1] |
contabilidad[.]icu | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | Arctic Wolf [1] |
documentodigital[.]cloud | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | Arctic Wolf [1] |
soportedigital[.]cloud | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | Arctic Wolf [1] |
visualizarpdf[.]online | Domain | Command and control | Domain and subdomains | 2026-08-26 | Blocking | Arctic Wolf [1] |
c9da1b08a39491dfdbede6ff4c1a2d383f57cb29e2d3532aee08d6e0a5c1dda6 | SHA-256 hash | Malware file | That file | 2026-08-26 | Blocking | Arctic Wolf [1] |
5orka[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
5orka[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
au1[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
au1[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
bel1[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
bel1[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
bridge1[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
bridge1[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
can2[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
can2[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
cloud[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
cloud[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
jp2[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
jp2[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
locat[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-26 | Blocking | Group-IB [1] |
sau1[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
sau1[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
sau2[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
sau2[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
sau3[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
sau3[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
tiktok-u[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-26 | Blocking | Group-IB [1] |
uae1[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae1[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae10[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae10[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae11[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae11[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae12[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae12[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae13[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae13[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae14[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae14[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae2[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae2[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae3[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae3[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae4[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae4[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae5[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae5[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae6[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae6[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae7[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae7[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae8[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae8[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae9[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uae9[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uk1[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uk1[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uk2[.]locat[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
uk2[.]tiktok-u[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-26 | Blocking | Group-IB [1] |
07dd28b748656e9e1a870c538d6df68c | MD5 hash | Malware file | That file | 2026-08-26 | Blocking | Group-IB [1] |
db58adc4a6c192520ed509b20a928279 | MD5 hash | Malware file | That file | 2026-08-26 | Blocking | Group-IB [1] |
ces[.]yeyr[.]lol | Domain | Malware download | That exact host | 2026-08-25 | Blocking | Censys [1] |
errr[.]onllee[.]com | Domain | Malware download | That exact host | 2026-08-25 | Blocking | Censys [1] |
havijmail[.]com | Domain | Malware download | Domain and subdomains | 2026-08-25 | Blocking | Censys [1] |
orapopo[.]store | Domain | Malware download | Domain and subdomains | 2026-08-25 | Blocking | Censys [1] |
www[.]racon[.]online | Domain | Malware download | That exact host | 2026-08-25 | Blocking | Censys [1] |
2026t4form17718[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
crataxsummary1007341[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
docshared[.]org | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
fillingconfirmation[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
getdl[.]jorix[.]cyou | Domain | Listed by researchers | That exact host | 2026-08-25 | Blocking | ANY.RUN [1] |
mornixa[.]cfd | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
officialsummarybycra[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
pdfmarchlitestatementsscannedforyou[.]gixar[.]sbs | Domain | Listed by researchers | That exact host | 2026-08-25 | Blocking | ANY.RUN [1] |
reportstastementformarchreviewyourssaast[.]harnivo[.]cfd | Domain | Listed by researchers | That exact host | 2026-08-25 | Blocking | ANY.RUN [1] |
sharedconfirmationslip[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
statemendetailsfilessenderderf[.]netlify[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
voretix[.]icu | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
wurel[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-25 | Blocking | ANY.RUN [1] |
132d864bb199105d639edb115249302243eafdb0fc21efb86cc6b6c0d49866f0 | SHA-256 hash | Malware file | That file | 2026-08-25 | Blocking | ANY.RUN [1] |
41b731279b1778a9f578e4ed2589f46c4bef32793b292862cf96279a3ead1c41 | SHA-256 hash | Malware file | That file | 2026-08-25 | Blocking | ANY.RUN [1] |
51f0cc172ced2e90acbc01c2872c697644380e597076350a6b286c96ab7ccb42 | SHA-256 hash | Malware file | That file | 2026-08-25 | Blocking | ANY.RUN [1] |
4jio[.]com | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
flosyr[.]com | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
link72[.]com | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
oculus-app[.]com | Domain | Malware download | That exact host | 2026-08-24 | Blocking | The DFIR Report [1] |
pltechoo[.]pro | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
q82[.]net | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
reficon[.]pro | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
stats[.]us3[.]org | Domain | Malware download | That exact host | 2026-08-24 | Blocking | The DFIR Report [1] |
tax[.]dll[.]lat | Domain | Malware download | That exact host | 2026-08-24 | Blocking | The DFIR Report [1] |
to[.]ghredir[.]com | Domain | Malware download | That exact host | 2026-08-24 | Blocking | The DFIR Report [1] |
ts[.]remdos[.]com | Domain | Malware download | That exact host | 2026-08-24 | Blocking | The DFIR Report [1] |
tx[.]platdir[.]com | Domain | Malware download | That exact host | 2026-08-24 | Blocking | The DFIR Report [1] |
url90[.]com | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
us00[.]net | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
ustechnio[.]com | Domain | Malware download | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
wapp[.]live | Domain | Listed by researchers | Domain and subdomains | 2026-08-24 | Blocking | The DFIR Report [1] |
hxxps://stats[.]us3[.]org/matomo[.]php | URL | Malware download | That exact URL | 2026-08-24 | Blocking | The DFIR Report [1] |
dtm[.]kijangturbo88[.]top | Domain | Command and control | That exact host | 2026-08-23 | Blocking | Darktrace [1] |
micronsoftwares[.]com | Domain | Malware download | Domain and subdomains | 2026-08-23 | Blocking | Darktrace [1] |
1e13c2c9eac72daf63fd00a9946878949e159ae6ec51b54ec64f942d79d61913 | SHA-256 hash | Malware file | That file | 2026-08-23 | Blocking | Darktrace [1] |
a2[.]kshahnd[.]sbs | Domain | Malware download | That exact host | 2026-08-21 | Blocking | Securelist [1] |
a2[.]mdsjhd[.]sbs | Domain | Malware download | That exact host | 2026-08-21 | Blocking | Securelist [1] |
a2[.]nmnsny[.]sbs | Domain | Malware download | That exact host | 2026-08-21 | Blocking | Securelist [1] |
admin[.]uipoxy[.]com | Domain | Malware download | That exact host | 2026-08-21 | Blocking | Securelist [1] |
pxyedge[.]com | Domain | Malware download | Domain and subdomains | 2026-08-21 | Blocking | Securelist [1] |
t2[.]kshahnd[.]sbs | Domain | Malware download | That exact host | 2026-08-21 | Blocking | Securelist [1] |
t2[.]mdsjhd[.]sbs | Domain | Malware download | That exact host | 2026-08-21 | Blocking | Securelist [1] |
t2[.]nmnsny[.]sbs | Domain | Malware download | That exact host | 2026-08-21 | Blocking | Securelist [1] |
3ad4bf5a86d26ffbf09cae42af330a98 | MD5 hash | Malware file | That file | 2026-08-21 | Blocking | Securelist [1] |
de77c3303e93c9450424759f1741441c | MD5 hash | Malware file | That file | 2026-08-21 | Blocking | Securelist [1] |
hxxp://144[.]217[.]243[.]201/vr34der34/dex3[.]68[.]png | URL | Malware download | That exact URL | 2026-08-21 | Blocking | Securelist [1] |
hxxp://144[.]217[.]243[.]201/vr34der34/sh65[.]io | URL | Malware download | That exact URL | 2026-08-21 | Blocking | Securelist [1] |
my-invite[.]org | Domain | Phishing | Domain and subdomains | 2026-08-20 | Blocking | Google Threat Intelligence / Mandiant [1] |
statistic-ms[.]live | Domain | Command and control | Domain and subdomains | 2026-08-20 | Blocking | Google Threat Intelligence / Mandiant [1] |
1d9299799a7b8da67c44ebec064d64542c27645f8e84de4a22ca3f6cbc843e3c | SHA-256 hash | Malware file | That file | 2026-08-20 | Blocking | Google Threat Intelligence / Mandiant [1] |
2c7f4165967d6f7737b3fef87959846920b57a5368b531ad1427c7214d4c41a2 | SHA-256 hash | Malware file | That file | 2026-08-20 | Blocking | Google Threat Intelligence / Mandiant [1] |
c5826032207d623a7f6caec8465af7364eccc355f9a48897da2a54f3e4420265 | SHA-256 hash | Malware file | That file | 2026-08-20 | Blocking | Google Threat Intelligence / Mandiant [1] |
0b10a1e48df2884a7a8a1ebf5aa903207955433c8ea00d7602c78be6e6c177cc | SHA-256 hash | Malware file | That file | 2026-08-20 | Blocking | Silent Push [1] |
1foqo[.]lat | Domain | Malware download | Domain and subdomains | 2026-08-19 | Blocking | Huntress [1] |
apple-googleapi[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-19 | Blocking | Huntress [1] |
apple[.]eu03hub[.]com | Domain | Malware download | That exact host | 2026-08-19 | Blocking | Huntress [1] |
docsend[.]online | Domain | Malware download | Domain and subdomains | 2026-08-19 | Blocking | Huntress [1] |
docsend[.]web12api[.]com | Domain | Listed by researchers | That exact host | 2026-08-19 | Blocking | Huntress [1] |
eu03hub[.]com | Domain | Command and control | Domain and subdomains | 2026-08-19 | Blocking | Huntress [1] [2] |
msedgewebview1[.]pro | Domain | Malware download | Domain and subdomains | 2026-08-19 | Blocking | Huntress [1] |
msedgewebview2[.]pro | Domain | Malware download | Domain and subdomains | 2026-08-19 | Blocking | Huntress [1] |
signow[.]web12api[.]com | Domain | Malware download | That exact host | 2026-08-19 | Blocking | Huntress [1] |
281f1d9e0638517ac90d61e47fd8be60 | MD5 hash | Malware file | That file | 2026-08-19 | Blocking | Huntress [1] |
6dd77235aaa99153ad790b5e59b49372 | MD5 hash | Malware file | That file | 2026-08-19 | Blocking | Huntress [1] |
8ca79bd95f73a7f984b95e487dc1552b | MD5 hash | Malware file | That file | 2026-08-19 | Blocking | Huntress [1] |
cd08e22dbfe032d15b54217f4f4ed350 | MD5 hash | Malware file | That file | 2026-08-19 | Blocking | Huntress [1] |
f4769ba9e8065727ef26cca72e894f83 | MD5 hash | Malware file | That file | 2026-08-19 | Blocking | Huntress [1] |
15afe14b5db2896d35a0c4f3139db85158da120fa90613c975c88f10bbbcc420 | SHA-256 hash | Malware file | That file | 2026-08-19 | Blocking | Huntress [1] |
hxxps://1foqo[.]lat/core4 | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://2fksf[.]lat/res10[.]php | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://2fksf[.]lat/res11[.]php | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://3pqow[.]lat/res12[.]php | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://docsend[.]online/download/drivers | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://docsend[.]web12api[.]com/api/launcher/start | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://eu03hub[.]com/get_file?file=X | URL | Command and control | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://eu07connect[.]com/api/commands/ | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
hxxps://gapidriver[.]com/installer/GapiUpdate[.]application | URL | Malware download | That exact URL | 2026-08-19 | Blocking | Huntress [1] |
aclaraciones-digital[.]online | Domain | Listed by researchers | Domain and subdomains | 2026-08-19 | Blocking | Group-IB [1] [2] |
balonx[.]online | Domain | Listed by researchers | Domain and subdomains | 2026-08-19 | Blocking | Group-IB [1] [2] |
callbalonx[.]info | Domain | Listed by researchers | Domain and subdomains | 2026-08-19 | Blocking | Group-IB [1] [2] |
panelbalonxfs[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-08-19 | Blocking | Group-IB [1] [2] |
soporte-aclaracion[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-08-19 | Blocking | Group-IB [1] [2] |
v-k[.]com[.]ua | Domain | Command and control | That exact host | 2026-08-18 | Blocking | Check Point Research [1] |
0080d0dd72eda4850a02e51c0e5c6f768423dfe970cafae2ab52ceee75972b40 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
10babb15e08f9fbd72cce11713a273b971c910dd5bdb989a3f6ff4d9c8e372c0 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
11a635d70444605ede1de0aa227a9fd7cfa4554e75bea93ce18b639ca571a42e | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
23cbabfe3ca3a7f1eb365f772d6a4ed8095cb8f7755622cc82e804478259dc70 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
2adbb2c206be7f23bf77f8f50d1ac0f809511c0b4591421931f81a6eaa42c68c | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
38602b76f6c65644b01fa4d81708251c159a883253cda8876396dc7212324ab9 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
3ba161ca7b8dcf389ec3236c9ddfb943e9d1766181b1b81a227649cad46132a8 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
3ed8f2cc8da4853fd770ff38f0cbce6d9d4a84e75a828fc0cec3e3ec60db94f9 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
4dee2fe98d4da75ffb259c03b50202212dafc85691429a28641a8068eddea504 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
65550f6d0ffec8421f703cdc7273d9c0563b3d480fe6702bad294a18afe72143 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
712e557373fba45bdd66d52e395b8af7ccf7006e6e82d4e1db0736e738d0d4fb | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
7d3604d0728b242c72bd144b8661ebf63c1042a4f5dd441bc8c8507c701df20c | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
8337bf29100a5871b1275227006dc2a43b21b751e5ce7e2032364fd78af59ac5 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
8d1e23630a6695fa9c793d73832f59436c98bba30ed81c16d01b549bd17feab4 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
9765b1342cc7eb982a73bb1f94c6c500b63dc817073b76ea926c1097078d3527 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
976cfa57e1efacbe517b7e3441e9473d275ec1d9ad8ab69ddf8ae3a966aaa153 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
99bcb531d6dd3c93d3f28f03d6e4659c865a4ffbd2fb514e809017f3446a940b | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
b3dff910b350ace27d64cbd79405cb154a1967e366d7b88170c3e8303b1d08ad | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
b79b9b027f76579555069a7506d946648a8cb3126c0dda837dc9fee0e5c79489 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
cab7f141fd6f2c58055b3731ef6a64b8a2d4d88a974770b047da19c0904322f0 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
cc8aa2bd7bf74ca0bbc5cb03a7b18eae73094b450d11654528c05685fe12e0c9 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
f042240c3de00c46dee625916bf246b7e87481e4081a6a97208b091409766e41 | SHA-256 hash | Malware file | That file | 2026-08-18 | Blocking | Check Point Research [1] |
adp[.]pslcertlive[.]site | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
ars[.]greebys[.]com | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
bsf[.]allmetreod[.]com | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
bverster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
cer[.]septey[.]shop | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
cer[.]verpox[.]shop | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
cureaveritax[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
dverster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
everster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
fureaveritax[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
fverster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
gacorslot7d[.]com | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
galatasaraydanhaberler[.]com | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
gverster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
hpn[.]bandhiem[.]com | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
hverster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
iverster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
jureaveritax[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
jverster[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
pureaveritax[.]store | Domain | Phishing | Domain and subdomains | 2026-08-18 | Blocking | ANY.RUN [1] |
ver[.]verpox[.]shop | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
vrf[.]atskinsonel[.]com | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
vrf[.]gavernova[.]com | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
vrf[.]iar0nline[.]com | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
wes[.]cadsta[.]online | Domain | Phishing | That exact host | 2026-08-18 | Blocking | ANY.RUN [1] |
gizmodo[.]cc | Domain | Malware download | Domain and subdomains | 2026-08-18 | Blocking | Recorded Future Insikt Group [1] |
tech-crunch[.]org | Domain | Malware download | Domain and subdomains | 2026-08-18 | Blocking | Recorded Future Insikt Group [1] |
20675a659c338f7267fd09bacb431f4491f061d3acf42d07aca2dec3d25fa549 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Zscaler ThreatLabz [1] |
f59f32c9af4fa8a5dbd4668df8893593bc0c4324816cbf9b956acedcbfb8cdb6 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Zscaler ThreatLabz [1] |
f96ff2f3abbff7f382ace509b90e54853b4b61c402ecde27d82f1c17b414867b | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Zscaler ThreatLabz [1] |
appupdate[.]0cmds20cj2cdf8[.]workers[.]dev | Domain | Command and control | That exact host | 2026-08-17 | Blocking | Seqrite [1] |
maui-cocktailbar[.]com | Domain | Command and control | Domain and subdomains | 2026-08-17 | Blocking | Seqrite [1] |
mediumser[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-17 | Blocking | Seqrite [1] |
register[.]mediumser[.]com | Domain | Command and control | That exact host | 2026-08-17 | Blocking | Seqrite [1] |
regupdate[.]eamakfu49dc28wa[.]workers[.]dev | Domain | Command and control | That exact host | 2026-08-17 | Blocking | Seqrite [1] |
0803521a7e9081f46f8f9f61d72371ecc1f49657f10202fffa9a33f581d8bb39 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
26f735cbbb1257be94e6d01656a35bf66a8ae9c34868548d69ec5cb588f9f916 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
4a1a1b1455c3ea91a3d9203ebff025553227302cede6077e821d303655e2c9f2 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
575305cdaeb1d2187ca6d5ebe32f4c3e3fb53f5ccbe1c0cc257a7f71d84e6f35 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
aeff39943e254c34187e4a60be3d09d49687439e709eeb4be2b1984310d8ba5c | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
c4b4647795567ab15528edd1ab1bf37fb50e21b442e59a653051061973e87c02 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
cd147efe37003399e174951927e5fe727a4481756b116f0204a14a64cc62b059 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
daeac66441b88ba22806f6617058a2dbf1ea0ddcc6c94f291542ea853ac6f9d3 | SHA-256 hash | Malware file | That file | 2026-08-17 | Blocking | Seqrite [1] |
hxxps://appupdate[.]0cmds20cj2cdf8[.]workers[.]dev/A3cmf0q9ASCion | URL | Command and control | That exact URL | 2026-08-17 | Blocking | Seqrite [1] |
hxxps://regupdate[.]eamakfu49dc28wa[.]workers[.]dev/vere0zme82cadre | URL | Command and control | That exact URL | 2026-08-17 | Blocking | Seqrite [1] |
black-popular[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-14 | Blocking | Securelist [1] |
whatismybestthing[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-14 | Blocking | Securelist [1] |
2d7c8780e97409770a9d4f31c66c9d63 | MD5 hash | Malware file | That file | 2026-08-14 | Blocking | Securelist [1] |