WatchmanHQ

Hunting: Look, don't block.

Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC

Linked to suspicious activity but not proven enough to block: a single mention, an older report, shared infrastructure, or something still waiting for validation. Search your logs for these and investigate any hit. Do not block them.

This page lists the indicators that are only on Hunting. Everything on Blocking is worth hunting for too.

5,203 indicators. Numbers in the Sources column link to the original reports.

Indicator (defanged)TypeReported asBlock scopeFirst reportedListSources
103[.]106[.]190[.]217IP addressCommand and controlSearch only2026-07-31HuntingCensys [1] [2]
103[.]226[.]155[.]200IP addressCommand and controlSearch only2026-07-31HuntingCensys [1]
103[.]226[.]155[.]201IP addressCommand and controlSearch only2026-07-31HuntingCensys [1]
103[.]238[.]129[.]112IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
103[.]97[.]128[.]67IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
107[.]175[.]49[.]181IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
130[.]94[.]30[.]48IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
136[.]244[.]95[.]4IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
151[.]243[.]126[.]191IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
156[.]224[.]25[.]7IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
156[.]252[.]63[.]109IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
162[.]4[.]136[.]30IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
177[.]3[.]41[.]61IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
192[.]210[.]239[.]136IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
192[.]229[.]81[.]151IP addressMalware downloadSearch only2026-07-31HuntingCensys [1]
2[.]26[.]22[.]89IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
202[.]162[.]109[.]71IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
202[.]8[.]120[.]249IP addressCommand and controlSearch only2026-07-31HuntingCensys [1]
223[.]26[.]63[.]56IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
38[.]12[.]47[.]193IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
38[.]181[.]52[.]95IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
38[.]22[.]89[.]117IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
38[.]76[.]185[.]209IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
43[.]255[.]156[.]130IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
43[.]98[.]179[.]15IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
45[.]197[.]237[.]210IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
45[.]197[.]237[.]216IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
45[.]207[.]210[.]78IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
5[.]206[.]227[.]115IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
64[.]90[.]10[.]72IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
75[.]119[.]146[.]156IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
80[.]66[.]72[.]87IP addressListed by researchersSearch only2026-07-31HuntingCensys [1]
93[.]152[.]221[.]37IP addressMalware downloadSearch only2026-07-31HuntingCensys [1]
hxxps://t[.]me/YATA0000URLCommand and controlSearch only2026-07-31HuntingCensys [1] [2]
193[.]149[.]176[.]151IP addressPhishingSearch only2026-07-31HuntingHuntress [1]
193[.]149[.]176[.]238IP addressPhishingSearch only2026-07-31HuntingHuntress [1]
216[.]203[.]20[.]95IP addressAttacker addressSearch only2026-07-31HuntingHuntress [1]
45[.]61[.]136[.]129IP addressPhishingSearch only2026-07-31HuntingHuntress [1]
accapple[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
adschecks[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
adsmobi[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
amdcdn[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
amzndev[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
applecdn[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
appledisk[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
appledns[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
applehosts[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
bulksec[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
cdnamz[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
cdnatapple[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
cdnroute[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
checkcdn[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
chromeads[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
cnmag[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
devnetaps[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
dnsapple[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
dnsrelays[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
explorecdn[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
fiddlejoy[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
figmacat[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
funchats[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
gironetcdn[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
goalmate[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
googlenets[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
greencn[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
icloudsnet[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
imails[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
littledns[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
maganet[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
mindelgate[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
netapsdev[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
netcdnamz[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
netcorps[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
rigmanet[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
testjoys[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
vigmanet[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
whiteads[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
wincdn[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
windsecure[.]ruDomainCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
151[.]243[.]109[.]188IP addressCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
178[.]208[.]92[.]129IP addressCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
178[.]208[.]92[.]168IP addressCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
91[.]108[.]106[.]229IP addressCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
95[.]142[.]35[.]206IP addressCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
95[.]142[.]35[.]34IP addressCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
95[.]142[.]37[.]159IP addressCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
hxxps://amzndev[.]ru/d/zw_sfp64URLCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
hxxps://googlenets[.]ru/d/zw_sfp64URLCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
hxxps://whiteads[.]ru/d/zw_sfp64URLCommand and controlSearch only2026-07-31HuntingUnit 42 [1]
104[.]243[.]35[.]131IP addressListed by researchersSearch only2026-07-30HuntingCensys [1]
38[.]60[.]157[.]212IP addressListed by researchersSearch only2026-07-30HuntingCensys [1]
5[.]180[.]41[.]35IP addressCommand and controlSearch only2026-07-30HuntingCensys [1]
78[.]128[.]113[.]10IP addressCommand and controlSearch only2026-07-30HuntingCensys [1]
ctyuhjerf[.]kozow[.]comDomainCommand and controlSearch only2026-07-30HuntingSecurelist [1]
gycudore[.]kozow[.]comDomainCommand and controlSearch only2026-07-30HuntingSecurelist [1]
rgnojb[.]casacam[.]netDomainCommand and controlSearch only2026-07-30HuntingSecurelist [1]
tyhbgtyuj[.]gleeze[.]comDomainCommand and controlSearch only2026-07-30HuntingSecurelist [1]
uyhvfredc[.]accesscam[.]orgDomainCommand and controlSearch only2026-07-30HuntingSecurelist [1]
wedfcvbn[.]gleeze[.]comDomainCommand and controlSearch only2026-07-30HuntingSecurelist [1]
154[.]196[.]162[.]76IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
154[.]196[.]187[.]73IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
195[.]86[.]120[.]2IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
212[.]11[.]39[.]138IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
45[.]138[.]157[.]165IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
45[.]32[.]152[.]50IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
45[.]61[.]149[.]112IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
45[.]77[.]136[.]228IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
64[.]7[.]198[.]130IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
95[.]179[.]141[.]26IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
95[.]179[.]210[.]138IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
2a571f6cee42a17d873f4c942649813fMD5 hashMalware fileSearch only2026-07-30HuntingSecurelist [1]
api[.]deepseek[.]comDomainListed by researchersSearch only2026-07-30HuntingUnit 42 [1]
dashscope[.]aliyuncs[.]comDomainListed by researchersSearch only2026-07-30HuntingUnit 42 [1]
89[.]125[.]66[.]101IP addressCommand and controlSearch only2026-07-30HuntingSecurelist [1]
103[.]216[.]221[.]95IP addressCommand and controlSearch only2026-07-29HuntingHuntress [1]
85[.]206[.]161[.]241IP addressCommand and controlSearch only2026-07-29HuntingHuntress [1]
157[.]245[.]88[.]153IP addressListed by researchersSearch only2026-07-28HuntingHuntress [1]
162[.]243[.]31[.]111IP addressListed by researchersSearch only2026-07-28HuntingHuntress [1]
167[.]71[.]150[.]1IP addressListed by researchersSearch only2026-07-28HuntingHuntress [1]
209[.]97[.]151[.]148IP addressListed by researchersSearch only2026-07-28HuntingHuntress [1]
64[.]227[.]15[.]20IP addressListed by researchersSearch only2026-07-28HuntingHuntress [1]
172[.]86[.]98[.]113IP addressCommand and controlSearch only2026-07-28HuntingGroup-IB, Securelist [1] [2]
safedata[.]s3[.]wasabisys[.]comDomainData theftSearch only2026-07-26HuntingDarktrace [1]
38[.]27[.]106[.]117IP addressData theftSearch only2026-07-26HuntingDarktrace [1]
38[.]27[.]106[.]123IP addressData theftSearch only2026-07-26HuntingDarktrace [1]
38[.]27[.]106[.]128IP addressData theftSearch only2026-07-26HuntingDarktrace [1]
pool[.]hasvault[.]proDomainCommand and controlSearch only2026-07-25HuntingDarktrace [1]
14[.]176[.]1[.]47IP addressAttacker addressSearch only2026-07-25HuntingDarktrace [1]
145[.]241[.]123[.]102IP addressAttacker addressSearch only2026-07-25HuntingDarktrace [1]
185[.]62[.]1[.]8IP addressMalware downloadSearch only2026-07-25HuntingDarktrace [1]
clickup-attachments[.]comDomainMalware downloadSearch only2026-07-23HuntingMicrosoft Threat Intelligence [1]
ecajovna[.]skDomainMalware downloadSearch only2026-07-23HuntingMicrosoft Threat Intelligence [1]
pixeldrain[.]comDomainMalware downloadSearch only2026-07-23HuntingMicrosoft Threat Intelligence [1]
t90141296286[.]p[.]clickup-attachments[.]comDomainMalware downloadSearch only2026-07-23HuntingMicrosoft Threat Intelligence [1]
hxxps://pixeldrain[.]com/api/file/3v92oJiLURLMalware downloadSearch only2026-07-23HuntingMicrosoft Threat Intelligence [1]
hxxps://t90141296286[.]p[.]clickup-attachments[.]com/t90141296286/fb39c3a9-3161-40ad-847b-0683e0409d6f/Financial_report[.]batURLMalware downloadSearch only2026-07-23HuntingMicrosoft Threat Intelligence [1]
dlrz-web[.]oss-cn-beijing[.]aliyuncs[.]comDomainListed by researchersSearch only2026-07-23HuntingGroup-IB [1]
161[.]35[.]236[.]255IP addressListed by researchersSearch only2026-07-23HuntingGroup-IB [1]
178[.]128[.]108[.]89IP addressListed by researchersSearch only2026-07-23HuntingGroup-IB [1]
192[.]252[.]186[.]62IP addressPhishingSearch only2026-07-23HuntingGroup-IB [1]
43[.]106[.]71[.]28IP addressMalware downloadSearch only2026-07-23HuntingGroup-IB [1]
8[.]217[.]190[.]58IP addressCommand and controlSearch only2026-07-23HuntingGroup-IB [1]
5ca8758c-02d0-4a72-89c8-d468b66dda41[.]comDomainListed by researchersSearch only2026-07-22HuntingHuntress [1]
download-app[.]usDomainMalware downloadSearch only2026-07-22HuntingHuntress [1]
downloading-api[.]it[.]comDomainMalware downloadSearch only2026-07-22HuntingHuntress [1] [2]
104[.]194[.]133[.]210IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]17[.]143IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]20[.]32IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]20[.]95IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]21[.]86IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]22[.]118IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]24[.]255IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]24[.]67IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
107[.]189[.]26[.]86IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
191[.]101[.]80[.]211IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
195[.]110[.]58[.]222IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
2[.]24[.]131[.]246IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]114[.]190IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]117[.]145IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]117[.]67IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]122[.]134IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]122[.]235IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]122[.]82IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]123[.]122IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]124[.]17IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
45[.]59[.]125[.]228IP addressCommand and controlSearch only2026-07-22HuntingHuntress [1]
01058telecom[.]deDomainMalware downloadSearch only2026-07-21HuntingReversingLabs [1]
qedhsp[.]cprltdf[.]esDomainMalware downloadSearch only2026-07-21HuntingReversingLabs [1]
wihportal[.]sbsDomainMalware downloadSearch only2026-07-21HuntingReversingLabs [1]
172[.]86[.]126[.]195IP addressMalware downloadSearch only2026-07-21HuntingCensys [1]
144[.]172[.]108[.]205IP addressListed by researchersSearch only2026-07-21HuntingSecurelist [1]
216[.]126[.]237[.]197IP addressListed by researchersSearch only2026-07-21HuntingSecurelist [1]
brandswithintegrity[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
brandtrustmasters[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
buildyouronlineidentity[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
flexievolve[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
flexiscalesystems[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
functionalityfirst[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
guardedwebsolutions[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
guardwebsolutions[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
marketadaptabletech[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
modernwebbalance[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
navigatingdigitalchange[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
onlinebrandinghub[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
onlineidentityperfection[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
performancereputation[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
prowebsitemakers[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
qualityfirstonline[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
reliablebusinesstech[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
reputationboosters[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
scalableadapt[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
securedecisionmakers[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
securedecisionmaking[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
theconsistencyfactor[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
trustinbrands[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
turnideastoresults[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
waschmaschinenmarkt[.]deDomainListed by researchersSearch only2026-07-21HuntingANY.RUN [1]
almacensantangel[.]comDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
digital-magicians[.]comDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
faeytrdeaw[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
figyuyrqwr[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
hfyuayustrv[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
hsahyteiows[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
jsiruytrawey[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
kawosyetw[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
kawuuterta[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
laiwutrencr[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
lasiduutfe[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
maisytawe[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
nciyeyrawoe[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
nviuawusye[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
nvsieyrrawe[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
pmcjsuyraw[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
viuyeyrwqs[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
xkcifgieusr[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
yicoweytcbtw[.]gu[.]ccDomainListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
89[.]34[.]90[.]99IP addressListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
hxxps://almacensantangel[.]com/wp-includes/assets/YourSSA_Documents_0000000676152_05_187_2026_Document_0000000676152[.]rarURLListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
hxxps://digital-magicians[.]com/photo295825092412[.]zip?_r=ea623202URLListed by researchersSearch only2026-07-20HuntingProofpoint Threat Insight [1]
188[.]40[.]64[.]61IP addressCommand and controlSearch only2026-07-18HuntingElastic Security Labs [1]
195[.]26[.]248[.]212IP addressCommand and controlSearch only2026-07-18HuntingElastic Security Labs [1]
176[.]32[.]34[.]135IP addressListed by researchersSearch only2026-07-16HuntingSecurelist [1]
104[.]239[.]66[.]86IP addressCommand and controlSearch only2026-07-16HuntingFortinet Threat Research [1]
107[.]174[.]34[.]137IP addressCommand and controlSearch only2026-07-16HuntingFortinet Threat Research [1]
46[.]183[.]223[.]21IP addressCommand and controlSearch only2026-07-16HuntingFortinet Threat Research [1]
101[.]36[.]104[.]87IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
103[.]138[.]13[.]30IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
144[.]48[.]6[.]46IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
152[.]32[.]160[.]239IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
152[.]32[.]222[.]113IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
43[.]106[.]30[.]226IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
47[.]80[.]22[.]58IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
8[.]220[.]193[.]189IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
8[.]220[.]194[.]108IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
8[.]220[.]209[.]155IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
8[.]220[.]214[.]132IP addressCommand and controlSearch only2026-07-16HuntingSecurelist [1]
aplicacao[.]cbm[.]mt[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
arcese[.]urlsand[.]comDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
camaradelassance[.]mg[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
camaraparaguacu[.]sp[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
circ[.]rs[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
condemat[.]sp[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
ferrazdevasconcelos[.]sp[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
floresdegoias[.]go[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
funrespol[.]pc[.]ro[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
loginam[.]sesp[.]es[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
lontra[.]mg[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
pinhalgrande[.]rs[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
policiacivil[.]pe[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
portaldrh[.]tjba[.]jus[.]brDomainMalware downloadSearch only2026-07-16HuntingANY.RUN [1]
prodoc[.]ap[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
protocolo[.]sorocaba[.]sp[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
seplag[.]mt[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
timon[.]ma[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
url[.]de[.]m[.]mimecastprotect[.]comDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
www[.]funrespol[.]pc[.]ro[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
www[.]pinhalgrande[.]rs[.]gov[.]brDomainListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
158[.]94[.]208[.]120IP addressListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
185[.]219[.]83[.]191IP addressCommand and controlSearch only2026-07-16HuntingANY.RUN [1]
188[.]137[.]246[.]189IP addressListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
195[.]177[.]94[.]103IP addressMalware downloadSearch only2026-07-16HuntingANY.RUN [1]
45[.]141[.]119[.]188IP addressListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
79[.]110[.]49[.]32IP addressMalware downloadSearch only2026-07-16HuntingANY.RUN [1]
91[.]92[.]241[.]181IP addressListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://arcese[.]urlsand[.]com/?u=hxxps%3A%2F%2Fcamaraparaguacu[.]sp[.]gov[.]br%2Foficio%2Fx2eDBGceCF&e=dd4b7717&h=be3cf1fa&f=y&p=y&m=4gql0c4CXBz334DURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/docURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/doc/DcUXKm/S7q88tURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/doc/DzAe8SxvcaURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/doc/R0RU5TEpc2URLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/doc/i00hqHrGFrURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/doc/js[.]brnUl8ZURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/doc/naNXNW0tQ7URLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/doc/wsVPWyP0iLURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://camaraparaguacu[.]sp[.]gov[.]br/oficio/mGeI1KrXITURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://cas5-0-urlprotect[.]trendmicro[.]com/wis/clicktime/v1/query?url=hxxps%3a%2f%2fpoa[.]sp[.]gov[.]br%2fdown[.]php&umid=a1a41f4a-228b-4622-9a1f-5fd4cbc68d26&rct=1779114363&auth=18576cf8abd7812271cef15c8c401c7207caa231-a9e499076e60cd525b23d7c667f1929bc0a9b294URLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://circ[.]rs[.]gov[.]br/OficioDigital[.]exeURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://condemat[.]sp[.]gov[.]br/certificate/APL3SJ9e/723406349/URLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://ferrazdevasconcelos[.]sp[.]gov[.]br/down[.]phpURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://floresdegoias[.]go[.]gov[.]br/levantamento/v6aq7x/prm9yGURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://lontra[.]mg[.]gov[.]br/arquivo[.]phpURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://marapoama[.]sp[.]gov[.]br/doc/4h7Bae/Mn9K3NURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://marapoama[.]sp[.]gov[.]br/documento/L5fHnY/d13mLfURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://marapoama[.]sp[.]gov[.]br/levantamento/M5nkwP/dM0CgCURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://marapoama[.]sp[.]gov[.]br/oficio/LA9ks3d/ldo9JodAS/vYnerL/fkeA5rURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://poa[.]sp[.]gov[.]br/doc/KhDvexT9QX/t4iVaErskjURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://poa[.]sp[.]gov[.]br/doc/k9l00oFolA/4mZKTCE4exURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://poa[.]sp[.]gov[.]br/doc/wBvCEwP3tO/oSKmMKG1swURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://poa[.]sp[.]gov[.]br/documento/3QFKMM71/527058494/URLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://poa[.]sp[.]gov[.]br/oficio/anexo/VQC7WEcfURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://protocolo[.]sorocaba[.]sp[.]gov[.]br/protocolo/kitsigns[.]jsp?yd=DtmcOmPD4GdPF9H06LU6tVN8lm2467QxWGDEOmFL0qWjScIylunV8re%2B0cZMiJ6OURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://protocolo[.]sorocaba[.]sp[.]gov[.]br/protocolo/signkit[.]jsp?yd=5F8bz2Lapfi%2Bf41ZRmsNAtfvOls6zkkpOSPYO4UqALf0x8Hv%2BZcPRgcBznBl0tHURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://url[.]de[.]m[.]mimecastprotect[.]com/s/cFJoCr2PqncDzNRl7U7fmf4fQ3q?domain=camaraparaguacu[.]sp[.]gov[.]brURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://www[.]funrespol[.]pc[.]ro[.]gov[.]br/procedimento/aQbax7Lq4RURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
hxxps://www[.]pinhalgrande[.]rs[.]gov[.]br/down[.]phpURLListed by researchersSearch only2026-07-16HuntingANY.RUN [1]
ipfs[.]ioDomainListed by researchersSearch only2026-07-16HuntingMicrosoft Threat Intelligence [1]
hxxps://ipfs[.]io/ipfs/Qmet4fhsAaWMBUxNDfREHwgiyDeSWy4YSYs9wiKUW5jGyfURLListed by researchersSearch only2026-07-16HuntingMicrosoft Threat Intelligence [1]
codebasecode[.]comDomainCommand and controlSearch only2026-07-16HuntingElastic Security Labs [1]
memshowblob[.]forumDomainMalware downloadSearch only2026-07-16HuntingElastic Security Labs [1]
hxxps://172[.]67[.]165[.]144/files/telemetriawork/telepuz[.]dllURLListed by researchersSearch only2026-07-16HuntingElastic Security Labs [1]
hxxps://172[.]67[.]215[.]214/files/telemetriawork/telepuz[.]dllURLListed by researchersSearch only2026-07-16HuntingElastic Security Labs [1]
hxxps://steamcommunity[.]com//profiles/76561199705801219URLCommand and controlSearch only2026-07-16HuntingElastic Security Labs [1]
ethereum-rpc[.]publicnode[.]comDomainCommand and controlSearch only2026-07-15HuntingUnit 42 [1] [2]
example[.]comDomainCommand and controlSearch only2026-07-15HuntingUnit 42 [1] [2]
execution[.]jsDomainMalware downloadSearch only2026-07-15HuntingUnit 42 [1]
85[.]137[.]53[.]71IP addressCommand and controlSearch only2026-07-15HuntingMicrosoft Threat Intelligence, Unit 42 [1] [2]
91[.]195[.]240[.]123IP addressListed by researchersSearch only2026-07-15HuntingUnit 42 [1]
94[.]154[.]172[.]43IP addressListed by researchersSearch only2026-07-15HuntingUnit 42 [1]
hxxps://github[.]com/helloworm00/hello-worldURLCommand and controlSearch only2026-07-15HuntingUnit 42 [1]
hxxps://github[.]com/oven-sh/bun/releases/download/bun-v1[.]3[.]13/URLMalware downloadSearch only2026-07-15HuntingUnit 42 [1]
cfcybernews[.]euDomainListed by researchersSearch only2026-07-15HuntingUnit 42 [1]
high[.]cpu[.]co[.]uaDomainMalware downloadSearch only2026-07-15HuntingUnit 42 [1]
rezy1337[.]ted[.]geDomainMalware downloadSearch only2026-07-15HuntingUnit 42 [1]
vrunabo[.]suDomainMalware downloadSearch only2026-07-15HuntingUnit 42 [1]
107[.]174[.]133[.]119IP addressMalware downloadSearch only2026-07-15HuntingUnit 42 [1]
154[.]6[.]197[.]43IP addressAttacker addressSearch only2026-07-15HuntingUnit 42 [1]
185[.]10[.]68[.]127IP addressListed by researchersSearch only2026-07-15HuntingUnit 42 [1]
194[.]46[.]59[.]169IP addressCommand and controlSearch only2026-07-15HuntingUnit 42 [1]
209[.]182[.]237[.]133IP addressCommand and controlSearch only2026-07-15HuntingUnit 42 [1]
37[.]32[.]24[.]195IP addressListed by researchersSearch only2026-07-15HuntingUnit 42 [1]
45[.]145[.]185[.]229IP addressMalware downloadSearch only2026-07-15HuntingUnit 42 [1]
hxxp://188[.]166[.]2[.]226/OwO/Tsunami[.]x86URLAttacker addressSearch only2026-07-15HuntingUnit 42 [1]
aaalen[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
aabiz[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
abal[.]myDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
aspireglobal[.]ltdDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
buenne[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
dufllot[.]sbsDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
enerdizerandtron[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
espaciocf[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
ihrsupportcenter[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
ilersls[.]orgDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
rundwasser[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
smartcontrolengineer[.]comDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
sonnenbrillenspot[.]deDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
starwellmedia[.]comDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
trisrnareprjdocz[.]comDomainListed by researchersSearch only2026-07-14HuntingANY.RUN [1]
185[.]182[.]193[.]21IP addressCommand and controlSearch only2026-07-09HuntingMicrosoft Threat Intelligence [1]
212[.]8[.]248[.]104IP addressCommand and controlSearch only2026-07-09HuntingMicrosoft Threat Intelligence [1]
opa[.]tlsd[.]shopDomainListed by researchersSearch only2026-07-09HuntingHuntress [1]
relay[.]dltsolutions[.]topDomainListed by researchersSearch only2026-07-09HuntingHuntress [1]
relay[.]eurofin[.]digitalDomainListed by researchersSearch only2026-07-09HuntingHuntress [1]
vtps[.]usDomainListed by researchersSearch only2026-07-09HuntingHuntress [1]
gestionmontelavaria2026[.]onlineDomainCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
negratomasa2026[.]onlineDomainCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
185[.]242[.]246[.]169IP addressCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
216[.]250[.]112[.]100IP addressMalware downloadSearch only2026-07-08HuntingElastic Security Labs [1]
68[.]211[.]161[.]46IP addressMalware downloadSearch only2026-07-08HuntingElastic Security Labs [1]
hxxp://185[.]242[.]246[.]169/dashboard2/recData[.]phpURLCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
hxxp://216[.]250[.]112[.]100/validation[.]txtURLMalware downloadSearch only2026-07-08HuntingElastic Security Labs [1]
hxxp://68[.]211[.]161[.]46/files/URLMalware downloadSearch only2026-07-08HuntingElastic Security Labs [1]
hxxp://68[.]211[.]161[.]46/validation[.]txtURLMalware downloadSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://185[.]242[.]246[.]169/b/editor[.]phpURLCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://gestionmontelavaria2026[.]online/b/editor[.]phpURLCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://gestionmontelavaria2026[.]online/dashboard2/recData[.]phpURLCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://negratomasa2026[.]online/b/editor[.]phpURLCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://negratomasa2026[.]online/b/keysnegativas[.]txtURLAttacker addressSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://negratomasa2026[.]online/b/urlsscams[.]txtURLPhishingSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://negratomasa2026[.]online/dashboard2/logs[.]phpURLData theftSearch only2026-07-08HuntingElastic Security Labs [1]
hxxps://negratomasa2026[.]online/dashboard2/recData[.]phpURLCommand and controlSearch only2026-07-08HuntingElastic Security Labs [1]
justwatch[.]comDomainMalware downloadSearch only2026-07-07HuntingUnit 42 [1]
116[.]203[.]243[.]208IP addressCommand and controlSearch only2026-07-07HuntingUnit 42 [1]
136[.]243[.]203[.]109IP addressCommand and controlSearch only2026-07-07HuntingUnit 42 [1]
136[.]243[.]203[.]111IP addressCommand and controlSearch only2026-07-07HuntingUnit 42 [1]
138[.]199[.]246[.]13IP addressCommand and controlSearch only2026-07-07HuntingUnit 42 [1]
ofuscador[.]pyDomainMalware downloadSearch only2026-07-07HuntingANY.RUN [1]
149[.]56[.]12[.]51IP addressCommand and controlSearch only2026-07-07HuntingANY.RUN [1]
198[.]245[.]53[.]26IP addressListed by researchersSearch only2026-07-07HuntingANY.RUN [1]
hxxp://198[.]245[.]53[.]26/payload[.]phpURLMalware downloadSearch only2026-07-07HuntingANY.RUN [1]
hxxp://198[.]245[.]53[.]26/st[.]phpURLMalware downloadSearch only2026-07-07HuntingANY.RUN [1]
7-zip[.]orgDomainMalware downloadSearch only2026-07-07HuntingInfoblox Threat Intel [1]
7zip[.]comDomainMalware downloadSearch only2026-07-07HuntingInfoblox Threat Intel [1]
api[.]betflixfree[.]netDomainListed by researchersSearch only2026-07-07HuntingInfoblox Threat Intel [1]
api[.]isharkvpn[.]comDomainListed by researchersSearch only2026-07-07HuntingInfoblox Threat Intel [1]
api[.]snaptik[.]ioDomainListed by researchersSearch only2026-07-07HuntingInfoblox Threat Intel [1]
api[.]wirevpn[.]appDomainListed by researchersSearch only2026-07-07HuntingInfoblox Threat Intel [1]
api[.]wirevpn[.]ioDomainListed by researchersSearch only2026-07-07HuntingInfoblox Threat Intel [1]
smartproxy[.]orgDomainPhishingSearch only2026-07-07HuntingInfoblox Threat Intel [1]
update[.]whtatsapp[.]netDomainPhishingSearch only2026-07-07HuntingInfoblox Threat Intel [1]
update[.]wirevpn[.]appDomainListed by researchersSearch only2026-07-07HuntingInfoblox Threat Intel [1]
wirevpn[.]appDomainCommand and controlSearch only2026-07-07HuntingInfoblox Threat Intel [1]
wirevpn[.]ccDomainCommand and controlSearch only2026-07-07HuntingInfoblox Threat Intel [1]
wirevpn[.]ioDomainCommand and controlSearch only2026-07-07HuntingInfoblox Threat Intel [1]
api[.]goautolink[.]comDomainData theftSearch only2026-07-07HuntingHuntress [1]
aussiecleaningservices[.]comDomainPhishingSearch only2026-07-07HuntingHuntress [1]
businesshelpcenterpageid563252[.]netlify[.]appDomainPhishingSearch only2026-07-07HuntingHuntress [1]
hxxps://sw[.]run/VerificationURLPhishingSearch only2026-07-07HuntingHuntress [1]
194[.]87[.]57[.]81IP addressListed by researchersSearch only2026-07-07HuntingSeqrite [1]
198[.]54[.]120[.]13IP addressListed by researchersSearch only2026-07-07HuntingSeqrite [1]
2[.]23[.]88[.]201IP addressListed by researchersSearch only2026-07-07HuntingSeqrite [1]
adserviceupdate[.]comDomainCommand and controlSearch only2026-07-06HuntingCheck Point Research [1]
auth[.]hospitalinstallation[.]comDomainCommand and controlSearch only2026-07-06HuntingCheck Point Research [1]
google[.]com[.]hospitalinstallation[.]comDomainCommand and controlSearch only2026-07-06HuntingCheck Point Research [1]
hospitalinstallation[.]comDomainCommand and controlSearch only2026-07-06HuntingCheck Point Research [1]
hxxps://adserviceupdate[.]com/cac[.]aspxURLCommand and controlSearch only2026-07-06HuntingCheck Point Research [1]
hxxps://hygienehistory[.]com/cac[.]aspxURLCommand and controlSearch only2026-07-06HuntingCheck Point Research [1]
104[.]238[.]221[.]69IP addressListed by researchersSearch only2026-07-06HuntingHuntress [1]
zusyyredrs[.]loveDomainListed by researchersSearch only2026-07-03HuntingK7 Labs [1]
app[.]beamers[.]siDomainPhishingSearch only2026-07-02HuntingCensys [1]
app[.]splunk[.]meDomainPhishingSearch only2026-07-02HuntingCensys [1]
autosecure[.]cyDomainPhishingSearch only2026-07-02HuntingCensys [1]
beamers[.]siDomainMalware downloadSearch only2026-07-02HuntingCensys [1]
beta[.]splunk[.]meDomainPhishingSearch only2026-07-02HuntingCensys [1]
blxup[.]shopDomainPhishingSearch only2026-07-02HuntingCensys [1]
freerobux[.]topDomainPhishingSearch only2026-07-02HuntingCensys [1]
gateway[.]beamers[.]siDomainPhishingSearch only2026-07-02HuntingCensys [1]
oblox[.]shopDomainPhishingSearch only2026-07-02HuntingCensys [1]
r[.]oblox[.]com[.]etDomainPhishingSearch only2026-07-02HuntingCensys [1] [2]
rblox[.]shopDomainPhishingSearch only2026-07-02HuntingCensys [1]
rblxo[.]shopDomainPhishingSearch only2026-07-02HuntingCensys [1]
robbux[.]comDomainPhishingSearch only2026-07-02HuntingCensys [1]
robiox[.]com[.]grDomainPhishingSearch only2026-07-02HuntingCensys [1]
robiox[.]com[.]psDomainPhishingSearch only2026-07-02HuntingCensys [1]
robiox[.]com[.]uaDomainPhishingSearch only2026-07-02HuntingCensys [1]
roblox[.]etDomainPhishingSearch only2026-07-02HuntingCensys [1]
robloxfree[.]comDomainPhishingSearch only2026-07-02HuntingCensys [1]
robloxgift[.]liveDomainPhishingSearch only2026-07-02HuntingCensys [1]
robloxiuty[.]topDomainPhishingSearch only2026-07-02HuntingCensys [1]
robuxcity[.]icuDomainPhishingSearch only2026-07-02HuntingCensys [1]
robuxcity[.]worldDomainPhishingSearch only2026-07-02HuntingCensys [1]
robuxlive[.]sbsDomainPhishingSearch only2026-07-02HuntingCensys [1]
robuxstorm[.]topDomainPhishingSearch only2026-07-02HuntingCensys [1]
rollbux[.]topDomainPhishingSearch only2026-07-02HuntingCensys [1]
shortsurl[.]cfdDomainPhishingSearch only2026-07-02HuntingCensys [1]
shortsurl[.]spaceDomainPhishingSearch only2026-07-02HuntingCensys [1]
shorturls[.]funDomainPhishingSearch only2026-07-02HuntingCensys [1]
splunk[.]meDomainMalware downloadSearch only2026-07-02HuntingCensys [1]
verify-bloxlink[.]cfdDomainPhishingSearch only2026-07-02HuntingCensys [1]
verify-bloxlink[.]siteDomainPhishingSearch only2026-07-02HuntingCensys [1]
www[.]r[.]oblox[.]com[.]etDomainPhishingSearch only2026-07-02HuntingCensys [1]
www[.]robiox[.]com[.]grDomainPhishingSearch only2026-07-02HuntingCensys [1]
www[.]robiox[.]com[.]psDomainPhishingSearch only2026-07-02HuntingCensys [1]
www[.]robiox[.]com[.]uaDomainPhishingSearch only2026-07-02HuntingCensys [1]
www[.]roblox[.]etDomainPhishingSearch only2026-07-02HuntingCensys [1]
www[.]shorturls[.]funDomainPhishingSearch only2026-07-02HuntingCensys [1]
zblox[.]shopDomainPhishingSearch only2026-07-02HuntingCensys [1]
179[.]43[.]150[.]242IP addressMalware downloadSearch only2026-07-02HuntingCensys [1]
45[.]11[.]229[.]230IP addressPhishingSearch only2026-07-02HuntingCensys [1]
bistro-reserve-now[.]netDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
consensus-protocol-v4[.]orgDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
debank[.]auctionDomainPhishingSearch only2026-07-02HuntingZscaler ThreatLabz [1]
digital-asset-mart[.]orgDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
edge-compliance-node[.]orgDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
identity-breach-response[.]orgDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
market-insight-global[.]comDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
permits[.]global-transit-authority[.]orgDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
py-lib-repository[.]devDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
visual-media-rights-group[.]orgDomainListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/bot-compliance-middlewareURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/digital-asset-arbitrage-cliURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/global-visa-automation-cliURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/llm-fact-check-protocolURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/mig-institutional-api-clientURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/opentable-resy-bypasserURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/requests-secure-v2URLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/royalty-free-image-scraperURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/session-token-leak-detectorURLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
hxxps://github[.]com/Open-Agent-Utilities/sneaker-drop-monitor-v2URLListed by researchersSearch only2026-07-02HuntingZscaler ThreatLabz [1]
all-toll-free[.]loseyourip[.]comDomainListed by researchersSearch only2026-07-01HuntingSecurelist [1]
all-toll-free[.]publicvm[.]comDomainListed by researchersSearch only2026-07-01HuntingSecurelist [1]
cloudsynn[.]comDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
defendercontrol[.]downloadDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
direct-download[.]giize[.]comDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
download-full-version[.]ooguy[.]comDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
edgeserv[.]ruDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
ehostservers[.]xyzDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
file-download-crosshairx[.]giize[.]comDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
fileget[.]loseyourip[.]comDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
free-download[.]camdvr[.]orgDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
lossless-scaling[.]downloadDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
managedevice[.]xyzDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
manageserver[.]xyzDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
mora1987[.]work[.]gdDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
mpc-update[.]giize[.]comDomainListed by researchersSearch only2026-07-01HuntingSecurelist [1]
pingpanl[.]proDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
pingserv[.]proDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
r[.]manage-server[.]xyzDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
serverdnsplan[.]netDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
servermanagemen[.]xyzDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
tmod-loader[.]comDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
tmodloader[.]downloadDomainMalware downloadSearch only2026-07-01HuntingSecurelist [1]
winservec[.]netDomainCommand and controlSearch only2026-07-01HuntingSecurelist [1]
185[.]254[.]97[.]249IP addressCommand and controlSearch only2026-07-01HuntingSecurelist [1]
198[.]23[.]185[.]81IP addressListed by researchersSearch only2026-07-01HuntingSecurelist [1]
2[.]59[.]134[.]97IP addressMalware downloadSearch only2026-07-01HuntingSecurelist [1]
45[.]145[.]41[.]205IP addressCommand and controlSearch only2026-07-01HuntingSecurelist [1]
hxxps://direct-download[.]giize[.]com/dns-jumper/iopbsr4hymbo7nfa1q7jURLMalware downloadSearch only2026-07-01HuntingSecurelist [1]
api[.]build-notifier[.]ioDomainMalware downloadSearch only2026-07-01HuntingUnit 42 [1]
hxxps://api[.]build-notifier[.]io/v1/pipeline/eventsURLMalware downloadSearch only2026-07-01HuntingUnit 42 [1]
api[.]mapbox[.]comDomainMalware downloadSearch only2026-06-30HuntingSekoia [1]
cloudflare-dns[.]comDomainCommand and controlSearch only2026-06-30HuntingSekoia [1]
dns[.]alidns[.]comDomainMalware downloadSearch only2026-06-30HuntingSekoia [1]
91[.]132[.]163[.]78IP addressData theftSearch only2026-06-30HuntingSekoia [1]
hxxp://91[.]132[.]163[.]78:8001/assets/static/bundle[.]ext[.]min[.]de5b2bc9[.]jsURLData theftSearch only2026-06-30HuntingSekoia [1]
hxxps://api[.]mapbox[.]com/datasets/v1/frankley/cmor0tcxf008i1mmpd7apt903/features/dm370543acmdopk296nahbtuaURLCommand and controlSearch only2026-06-30HuntingSekoia [1]
hxxps://github[.]com/bolubey/CVE-2026-0257URLMalware downloadSearch only2026-06-30HuntingSekoia [1]
hxxps://github[.]com/bolubey/CVE-2026-50751URLMalware downloadSearch only2026-06-30HuntingSekoia [1]
hxxps://github[.]com/lincemorado97/CVE-2025-14847URLMalware downloadSearch only2026-06-30HuntingSekoia [1]
hxxps://github[.]com/lincemorado97/CVE-2025-55182_CVE-2025-66478URLMalware downloadSearch only2026-06-30HuntingSekoia [1]
hxxps://github[.]com/lincemorado97/CVE-2025-64446_CVE-2025-58034URLMalware downloadSearch only2026-06-30HuntingSekoia [1]
hxxps://github[.]com/ogenich/CVE-2026-10520URLMalware downloadSearch only2026-06-30HuntingSekoia [1]