Newly reported: last 30 days
Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC
Indicators first published by a research team in the 30 days before this release: 0 confident, 1,573 blocking, 333 hunting only. Confident first, then Blocking, then Hunting.
| Indicator (defanged) | Type | Reported as | Block scope | First reported | List | Sources |
|---|---|---|---|---|---|---|
484ab497072ea09f12187b349f5b1c80754e4942408a009cccb20a2a3c8c6506 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
4b614e5c37abaddca162119e42a969945caa681305e246e0ed0060ea9984008b | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
4d0fdce4c098635fe9b296c3a82c74645f9885eb5e383aa44a0fe7e50da3ca3f | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
5168a2696a0ed858f996f388bfe94f952d475158f4ee6206816608936db005ca | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
5555e904101689351a2a1359c9c06da0a57139a9470df7d26823c1b75db55041 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
5a35fcd4458e808ab0fa52bb2a92923b60566ee4d7aaadaac7c95cad3d839562 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
5c5c060b272cd4a5c3767edc0e9478bd35b7e1756e183d0446a5491bd65519cb | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
61a8f5add6c35f99c389012dbb2343061fd0b54611b40490b9a7f0b49d707da0 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
65f4b9292e91abfa5adf42a03526932930c1c0a436bb186a7948fe6770295788 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
6a1dbbfcfe6867ac83d35012b2717084388b4a34707efd0b725466dfd0e8fa56 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
747b1d13bdf06956b5da5f47250fefd5284ebcf7961971732c3d348aa1a2d533 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
75c12795016ae48b1bddd34a9f5adea63a12f58701eae01e1b4ab3d9dfa1513c | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
7969ae5f11fc163049c8eadba06f814f5edece13a707e6087c1c49011a45b838 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
7c2ac9c040b3300bffa7d2e435dbb1bc12e7efd644d2216d603c72121266395c | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
7fa98efba59614cec0b7291aedee98764f8dc037b6cc798c93951a31208e9e32 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
8e1d68906d6de92f359945d3a95da1480e72773a3e8dea7682d6bf0f6699f75f | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
971cb2448b5d67dcc1f5eaa10d12e77f213035ad31230dc2ac7a510610a2059d | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
9b7df409c9a89f7536d3ba7b6d43fb6dbac618c8bb52615ba34cc971ad71bbf3 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
9fc50cf28f86201fda8306926817b1ede41fdd993202515905dd072f6803542f | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
a0e91085f08956a9a7034ace73cee60cb211f5d96f02bc91a026601bde8f2221 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
a13182699a12a8dd9d07c336dbd8de5e9b086b9b09793b7de2e9761aa03ce1dc | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
ad0bd2b45e2416fb1384bf30af068d857e7c06b4226615d66b55b610a34c5670 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
ae1b45fb56b9f1b9cb3ee30d2bb1279c9b90b70bb62f8de305d198c6a4e0585e | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
aea5e9029f9212d05bde10f7806d1f2819be45d167e6fd877b9fb1b11088ac90 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
b31ca75f73a9363b0e35042a41216c3f581eaa0b9cd78cb58f089c2e40babd40 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
b3416726a064dd7f657bbb400adeb365eea7f8bb60783ad2d9da1a1d93768731 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
b75492466462141c56d97b705f0c606faf272577631dc2822aa8d6bda53633b6 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
b8e6e83a73e6e07f8873c364dd2a4b830bceb60758163e2efcd7e387cb604655 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
b90a4e770869c28fd2140acb3ebdc50c113bb6f096b4bbdb9ac87c349c70e85e | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
bd8ddc8f33e0fe43147ee6f1713654996420a27c5d2cd91751ad67124ebc6fe4 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
c8e1239d7276178b6620f47ec4880494be1cb394477b223fc54bffb0947bff50 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
ca14ad0344dc7216f6da29a5cbe4237d886cc5257e8c3a48fb4885a311c9b800 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
cd3509fa82e506cc6f2eeafa0a45d4b8b76a07edadd29779daf00568febcaba7 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
d4cb2f5df16ec9b9c5b796ae55848534e15d4f8b8806f0431108fc7a99a2548a | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
d753a615aedf8e58ffc75b2b7ebd320c0cbe6bcb5cbb885db749a2a85c55d3bf | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
d87201c1299a7f5854929645e6891c6c424d2a690031272bedacba7c5fe73a3e | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
e2eb7703047b37b28dc34e6990205d758a2454b39bc655b460606745fadcb530 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
e2f59d8d5a81583ed482b6c7bf37699efdb2264e452cf7d8cfc0c54dfbd9ab3f | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
e6ff096a0562c0042b09d250bd60272ffcd8d72bd95c563842acf765a8dc8bcf | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
e7e3b0bcd6798634adf8b49d305f3a7b7682e4b76db549682a183c5a186df4bb | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
e809da86bd81463347fa7f922d3e088755a94a331889d32acb55aa8f57778a34 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
f0c1dc6d6daa4d010932c7818ed5f22929c182f58e5f495fabe2fb3cfc835b97 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
f1ef5fe4c0cdcff13cc750c867728b89719f81437bdc49041edd1ae1f3edb4e8 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
fdbd047031c13a17c9f491c9355f44d587584ebe2b8927be8482e6c236c8e1c1 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://d2nq35tel3ucuo[.]cloudfront[.]net/4oyE4n4ozLQ0[.]log | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://d2nq35tel3ucuo[.]cloudfront[.]net/LtVGUSsyUTDA[.]log | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://d2nq35tel3ucuo[.]cloudfront[.]net/TzzyYlYnJ40Z[.]log | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://d2nq35tel3ucuo[.]cloudfront[.]net/tdyvHHVcrci8[.]log | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/5SVIdjpRQjkZ | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/5TGrbjCCLa8M | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/5U7kzhvlYlVF | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/6HJV5qV5BTLs | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/BKvYRxPiGpbM | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/HenUWB51MwpG | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/MKJacn3hFt3Y | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/PbyfSk69AwVf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/byrdvvZEZZlk | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/cX8MChhuVvzz | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/icWMOGLJcfQO | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/nswz3cb9lhuC | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/q9LgxIaU1CJK | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/qMD71Z95clTf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/s0p18dgHR4PZ | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/zlKDeyO3HuUS | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/Qw7Womin4X6N | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxp://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/kVFPxm1uAjOY | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://d2nq35tel3ucuo[.]cloudfront[.]net/9q9OlLKCm0an2ct1[.]js | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://d2nq35tel3ucuo[.]cloudfront[.]net/HsOw0YU9s11dxyr1[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://d2nq35tel3ucuo[.]cloudfront[.]net/LwqPW64Xl0ti3q7s[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://microsoft-flash[.]com/download/flashcenter_pp_ax_install_en[.]exe | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-662ylt3w[.]pages[.]dev/Institutional_Disciplinary_Action_Report_May_2026[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-662ylt3w[.]pages[.]dev/Institutional_Disciplinary_Action_Report_May_2026[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-6g16qsfe[.]pages[.]dev/the%20May%2027%20inauguration%20of%20the%20TPiE[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-6g16qsfe[.]pages[.]dev/the%20May%2027%20inauguration%20of%20the%20TPiE[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-goq6xmbm[.]pages[.]dev/Tehran_Bilateral_Summit_Proceedings_May2026[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-goq6xmbm[.]pages[.]dev/Tehran_Bilateral_Summit_Proceedings_May2026[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-h3qli6kq[.]pages[.]dev/CrossBorder_Repression_Seminar_Agenda[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-h3qli6kq[.]pages[.]dev/CrossBorder_Repression_Seminar_Agenda[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-sv7c1fzs[.]pages[.]dev/Extravaganza%20Latin%20Carnival[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-sv7c1fzs[.]pages[.]dev/Extravaganza%20Latin%20Carnival[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-u0up9qri[.]pages[.]dev/UO%20-C-DAC%20%281%29[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-u0up9qri[.]pages[.]dev/UO%20-C-DAC%20%281%29[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-vtsdod2n[.]pages[.]dev/Extravaganza%20Latin%20Carnival%20post%20copy[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-vtsdod2n[.]pages[.]dev/Extravaganza%20Latin%20Carnival%20post%20copy[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-wgoxp32b[.]pages[.]dev/Internal_Review_Dossier_0520[.]hta | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://my-wgoxp32b[.]pages[.]dev/Internal_Review_Dossier_0520[.]wsf | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/7ChyKauxbnuftp68[.]js | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/AcPP9fCvdjztmho8[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/KOOOT4a76st012bx[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/Ub4RJzNIrfleri8t[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/VD7F3WxnGatherOsState[.]exe[.]mtm | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/VD7F3WxnOsState[.]dat[.]pgy | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/VD7F3Wxnslc[.]dll[.]fsc | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/bzP3NcRPGatherOsState[.]exe[.]thl | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/bzP3NcRPOsState[.]dat[.]mxb | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/bzP3NcRPslc[.]dll[.]czh | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/oaFE7PJHk0h_emqt[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev/vD68BdmB2ky28gcc[.]js | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/0u25lAqY58or53ra[.]js | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/2laZiB2zvnx04jze[.]js | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/8ypvQLxJvggmrz94[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/HeiqAW6ZGatherOsState[.]exe[.]luy | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/HeiqAW6ZOsGather[.]dat[.]syk | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/HeiqAW6Zslc[.]dll[.]pzs | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/HzjNPgRE9ir92e38[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/ThyI9pwewrh_a1pr[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/gpv0IRMtvto6e8t2[.]txt | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/hjgzBskgGatherOsState[.]exe[.]lzj | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/hjgzBskgOsGather[.]dat[.]ael | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/hjgzBskgslc[.]dll[.]iwq | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev/wyLwwCu43j1wf2pg[.]js | URL | Listed by researchers | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
hxxps://www[.]wps-cn[.]com/downloads/flashcenter_pp_ax_install_en[.]exe | URL | Malware download | That exact URL | 2026-09-30 | Blocking | Cisco Talos [1] |
0d8f7bf30aa1ac95d59fed24c433dd2b3d57767f38c088721699c841c6e861d3 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Huntress [1] |
0d93c3a8ded46887f79ac4ca7f238c458de2231243176f6c05062e34f238d19a | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Huntress [1] |
5f69ff7a2e024f94cc5f816fa16c90054b09d9ac430b1f8b0631dfdd4472905e | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Huntress [1] |
7bb594a77f726bf21a49f717024f2915f82f47eb623d2ad305259301de1f1ab4 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Huntress [1] |
b06b581d91f4108900d188c3ee1af18502a8cb65d4e101663b791bd670867485 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Huntress [1] |
e9dee286069afb6b411febb96b91a963cd16baffbf8b6aa951e0ef1a7e0e3879 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Huntress [1] |
hxxps://chat[.]ririmochii[.]workers[.]dev/core[.]js | URL | Command and control | That exact URL | 2026-09-30 | Blocking | Huntress [1] |
adsaw[.]cfd | Domain | Listed by researchers | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
adswre[.]cfd | Domain | Listed by researchers | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
trews[.]cfd | Domain | Listed by researchers | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
f34330d4c6e0aa978dc3af40360c14b31ad51127 | SHA-1 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
02f2ce03a2650f17bfe6e8744eebbf58522016cbdb92af8f2217b5dd4a1ad550 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
06ad69b9bebad3cc75b594cc5bb1ca0035ea22bb8a683002ca051d948566426b | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
108ef7e628d7a20bd6241a5b57149e27a6061f467123eb64061975559f8f73dc | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
19035c8e2520fb70b3e2ec5338c14311b88a26cc1fb8304a01494260b6b55af1 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
1a534d04bf30894d20764e91f7e94e0a73f060f0abacc9feeedba427995c83a8 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
374c4934b14a1151ea68847c8627c3f1c0b878f4e673bda3f15e4388dfde0187 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
3ff5e49fd2f2bd0758467763c44d69e781b7460af84a6e3966e2621bc5bf7096 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
40f8e774e1e7a484b78c7ae4336bc47aa9cab20dc8e1e67d89838e807975f9b1 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
529543b4fe6a4c21d28be56dbf92fcac91d8df808d8518b4275c973fa547ad63 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
5bf8cf29ac6803e7269b045dea48003af7cfe48bedfc081b57ff9e86cb08971b | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
67c979dc13961b09f24f85a801e4c918420adca6117c92efbeeeaa68a6344f55 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
6a89de024ca62536de6f5fc10e49896bb1ac330ca39dce30203afdcc45ae237e | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
77fb0e75f4396cb57bbbd28f6dc5310369a87abec9e2acc457aa99a0063ed27a | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
857c2f283de799faa74b56e862c0a9f96e67aa1b4fa4a9e46395098365b99de3 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
c2c004a56de2a99f5b06ceb58d8a4b371fb60fd66ff5936786fe8d8037ead208 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
ccea4e1acc51ac43ba9da76ada00e7e308cc33d9c5c264dff82d1be83e957b88 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
ceb3f7fe9a618ff29a21b126383c23900fad58d6ae2b5552d7e306e4b6acf4b0 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
d232d82e410de12702a67c58acf927304ee42f3e6d81a9d71eca99f9052126db | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
d3cb7ded277b49be06e6a1860f7c7e913e252802e9d32453a185e24797bf53ef | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
d49cc01641c3045bf3119f9d71e7ffd29bfce32ca4b27cc96340716ed4d41cdc | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
dd434f3ffcafeda538d43226665115ba136ad0fdb43dad8536e1368ca9a17b64 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
e31e5da7c58a7e8f89f9629f095edd7d741a1fb0b85fcb39f3818dbd9497b1e3 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
f094b8263471c7b76dbed03d420736449920368fa0eca2ed6b1aea2645138d97 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
bpdaersa[.]click | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
byveo[.]org | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
cyrna[.]top | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
divekickspolic[.]org | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
drasw[.]club | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
etia[.]ca | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
gliderrompercycl[.]com | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
groy[.]cc | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
guach[.]net | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
itechx[.]tel | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
matjk[.]click | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
muvb[.]net | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
qumel[.]link | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
ruten[.]observer | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
secure-dns-hub[.]com | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
stuseamandesilt[.]org | Domain | Malware download | Domain and subdomains | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
103[.]160[.]59[.]97 | IP address | Malware download | That address only | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
103[.]245[.]231[.]248 | IP address | Malware download | That address only | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
103[.]245[.]231[.]79 | IP address | Malware download | That address only | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
2[.]57[.]241[.]246 | IP address | Malware download | That address only | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
45[.]84[.]59[.]66 | IP address | Malware download | That address only | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
89[.]125[.]209[.]168 | IP address | Malware download | That address only | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
699e92a9e0edf7835879d5697bc67138c0b137117f459caf1a44df357407cad9 | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
9707a8694e954e9ee13e839d6e5905ce626c0837c7c90da6d1025bfbe152866b | SHA-256 hash | Malware file | That file | 2026-09-29 | Blocking | Microsoft Threat Intelligence [1] |
6dc495f33d4e1b6beb27cd418c8ed5ae | MD5 hash | Malware file | That file | 2026-09-29 | Blocking | K7 Labs [1] |
ac458ece671fdde066ce60e448f12bc0 | MD5 hash | Malware file | That file | 2026-09-29 | Blocking | K7 Labs [1] |
d24448ec0257adfb258846b3317c3b7c | MD5 hash | Malware file | That file | 2026-09-29 | Blocking | K7 Labs [1] |
d4e0f18025b3f8f329b136bbbee6deea | MD5 hash | Malware file | That file | 2026-09-29 | Blocking | K7 Labs [1] |
d87d7173116eb5fa992ae2b4e57fa025 | MD5 hash | Malware file | That file | 2026-09-29 | Blocking | K7 Labs [1] |
45[.]140[.]205[.]28 | IP address | Listed by researchers | That address only | 2026-09-28 | Blocking | Huntress [1] |
0457414c4504b70115798eee9c8384a8bf9e793461ffb2e0661a6dcc6ed4809f | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
14e3376befd4b7b52de0757b6264da294ac6b0f9e4ff51cb9bc5b19b243fe335 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
20c7befc174a61117770535e809046c75e93c71284bf1a9c6cd532f55b315f53 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
22869e3326fe1de011cd500e666769027126c5c440b76837baf55139f30094e4 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
278e2f3e2f26c18666b89ef774b4af9ce954e36b2bf54a2392608619245d8c48 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
3cd1484cc5bf10e22d79784beba58a75d7b126c46efb5e1a85d6aab884447621 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
54c94f85ba6e950903d5ff42c0971c5a9d0741596be26e06afe7d60ec38edf31 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
6761aad48a3f987238994d92bca97e4b8550e0150607bd67b47b1b6366a371fc | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
91a22cf3154944897cbcaffc7d20d4596e972d280ee134197d41d8d8eefb0fe2 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
9c615db040b88c18ce6b96f30d08797045b7d506f940bea452dc7a6992fdbb8d | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
a27cafb84876a3374ef4aba1062345def6cd0b029eaf8e0dc44fa24fc943f3c6 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
ab65bbfc505dbe1cebe6021fb36e2011f6aa1d64f5d87cee1cbee3fc2a0c7907 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
b59a21a8d4c0c11a9ecbbdbe2a2938499c99c5ebb210c9c6db9683c7ad19f4c4 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
b77575413c0f97eaf31e4a44c884c1ecdc0049ec89916ceb0bf3aaaedc0442fe | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
c4603646701069ebdeabc96f74e1f947355ace8575560986d8393fcc6b88d0b7 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
d3fda1e6cf886fd530bf62e2d16c39ad23ed12a2c933fc211f1f4876ceaa033e | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
d5acf44658f0dce90bd160f15d8e07a96938c81661d87dc7e9cb0107863bfb90 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
e58831766e8d4313db9f8b85f90c3a840aa0d84cfeac285beefa40e39ad0d1fb | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
e614b7d5a7a363fb1b355a87e2e8d9e8a05bbbca08f2cee3d606bdb5015ac53b | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
eff5d63ddf1813962f0d8ad1250cea5486c8bb5dd27c3f432b43957a33e43764 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Huntress [1] |
corp[.]tripswithengine[.]com | Domain | Command and control | That exact host | 2026-09-28 | Blocking | Microsoft Threat Intelligence [1] |
9cb68f986043a576e19d32184c583b7d8f571c7219d8dc0065dced1c13f077ef | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Microsoft Threat Intelligence [1] |
c82520eb03c084226be4eafbff46f56dca0aa8804a2a7f23a085a96afe71ef77 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Microsoft Threat Intelligence [1] |
e842dd7642c8e04b5ec20b6393848a9c904e4832930950c16664fe7800ba382e | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Microsoft Threat Intelligence [1] |
ed082f744f035035900f67edf438f2f7d0528ac501234f63d476d65273cdb9a1 | SHA-256 hash | Malware file | That file | 2026-09-28 | Blocking | Rapid7 [1] |
node-f1ey[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-09-25 | Blocking | Zscaler ThreatLabz [1] |
router-wdoi[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-09-25 | Blocking | Zscaler ThreatLabz [1] |
rpc-gbz5[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-09-25 | Blocking | Zscaler ThreatLabz [1] |
soyyoo-cwpc5n0e[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-09-25 | Blocking | Zscaler ThreatLabz [1] |
whyavc-qwmv6stx[.]vercel[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-09-25 | Blocking | Zscaler ThreatLabz [1] |
45[.]131[.]66[.]106 | IP address | Listed by researchers | That address only | 2026-09-25 | Blocking | Microsoft Threat Intelligence [1] |
64[.]20[.]53[.]230 | IP address | Listed by researchers | That address only | 2026-09-25 | Blocking | Microsoft Threat Intelligence [1] |
162[.]219[.]30[.]165 | IP address | Command and control | That address only | 2026-09-25 | Blocking | Google Threat Intelligence / Mandiant [1] |
610f0c65a3f8e88559f89ed90ea9ee5c | MD5 hash | Malware file | That file | 2026-09-25 | Blocking | K7 Labs [1] |
415898f14843d4a6537cf8f43d328eaf | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Cisco Talos [1] |
d65c7b544a97b0c3f2773b5fcc57d30e | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Cisco Talos [1] [2] |
540080fea97d88ed902c5e4f9a026b4fcd32ab263706c520e00728f1a29578b8 | SHA-256 hash | Malware file | That file | 2026-09-24 | Blocking | Cisco Talos [1] [2] |
cfa1997682e4ed41bc691ba848d845abbe0b75ec97e640c2b015b4d1624a108a | SHA-256 hash | Malware file | That file | 2026-09-24 | Blocking | Cisco Talos [1] |
85[.]137[.]243[.]49 | IP address | Malware download | That address only | 2026-09-24 | Blocking | Censys [1] |
raidforums[.]com | Domain | Malware download | That exact host | 2026-09-24 | Blocking | Sekoia [1] |
a4e525d8825c1bac6dd934ef2c008b5fb9988289190b5b98d854799e07e207e4 | SHA-256 hash | Malware file | That file | 2026-09-24 | Blocking | Sekoia [1] |
d5efdf6f35e9c6edcad5fbec707e6c88570c9d8796bf089c29303d591b94e384 | SHA-256 hash | Malware file | That file | 2026-09-24 | Blocking | Sekoia [1] |
fa210f015399de16bf7cb1e05856d179dfaabb1ecc9bb5fd277f94972a3bdc43 | SHA-256 hash | Malware file | That file | 2026-09-24 | Blocking | Sekoia [1] |
uasputnik[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-24 | Blocking | Arctic Wolf [1] |
107[.]175[.]82[.]242 | IP address | Command and control | That address only | 2026-09-24 | Blocking | Arctic Wolf [1] |
176[.]53[.]159[.]40 | IP address | Malware download | That address only | 2026-09-24 | Blocking | Arctic Wolf [1] |
193[.]178[.]159[.]128 | IP address | Command and control | That address only | 2026-09-24 | Blocking | Arctic Wolf [1] |
06f434695f93d7fd11eeff71358ff69fed79d310a66d993bbcc4ff979c117c90 | SHA-256 hash | Malware file | That file | 2026-09-24 | Blocking | Arctic Wolf [1] |
hxxp://107[.]175[.]82[.]242:9000/wilow/psychedeliclove[.]exe | URL | Malware download | That exact URL | 2026-09-24 | Blocking | Arctic Wolf [1] |
hxxps://uasputnik[.]com/elita[.]msi | URL | Malware download | That exact URL | 2026-09-24 | Blocking | Arctic Wolf [1] |
hxxps://uasputnik[.]com/sputnik[.]html | URL | Command and control | That exact URL | 2026-09-24 | Blocking | Arctic Wolf [1] |
194[.]87[.]89[.]30 | IP address | Malware download | That address only | 2026-09-24 | Blocking | Huntress [1] |
98[.]142[.]252[.]140 | IP address | Command and control | That address only | 2026-09-24 | Blocking | Fortinet Threat Research [1] |
hxxp://98[.]142[.]252[.]140:9000/wmglb | URL | Command and control | That exact URL | 2026-09-24 | Blocking | Fortinet Threat Research [1] |
toria[.]app | Domain | Listed by researchers | Domain and subdomains | 2026-09-24 | Blocking | Securelist [1] |
toria[.]apple03cloudstore[.]com | Domain | Listed by researchers | That exact host | 2026-09-24 | Blocking | Securelist [1] |
00d12d842596bf5ee1805effb4571d30 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
26a0f7cdb9f7dc5ace9a40af825b1538 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
2d69812584269699fade26622e6490c5 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
3ded1d71a822b53b12c3b67bcaf633f5 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
3deeed48fd38f22e369f5c3092bd68a1 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
4203ec932bfcc0907f91732440d6d997 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
6791dad263cac6d63ebba6a4b57e7d71 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
7212229c85852c3bffaf9740002b2f39 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
781ce50001d4b449600afa347c9b0208 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
7df1049cbd56c0bfa4a3364a379b4c2c | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
8dc8561349d144d4661bc66f2ec49f9f | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
8e84b01d5ac9624f0b181ade0e737193 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
980e2134679bc0c609f7659882883d77 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
9a0043d900a9ac78c886c59c9a328fd0 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
9f15fe9c4415cd668334339f705b94d8 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
c53d0ea45dbc622afb7f16ea3eec78bc | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
eb760d5c88f13f7ee0f8f86ba3407123 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
f97d24212fa6a21be0c4d211e10f044c | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
f9f70096aabb4d22a6657014f4853a53 | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
fb90887592655a8c989e443c640167aa | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
fc3ba5ed282d77127efd0b0f2403531b | MD5 hash | Malware file | That file | 2026-09-24 | Blocking | Securelist [1] |
hxxps://slack[.]apple03cloudstore[.]com/installer[.]sh | URL | Malware download | That exact URL | 2026-09-24 | Blocking | Securelist [1] |
hxxps://toria[.]apple03cloudstore[.]com/e3c1a6b00bc31e14/stage2[.]enc | URL | Malware download | That exact URL | 2026-09-24 | Blocking | Securelist [1] |
hxxps://warpcast[.]asia/Toria[.]dmg | URL | Listed by researchers | That exact URL | 2026-09-24 | Blocking | Securelist [1] |
bnbnhura[.]top | Domain | Command and control | Domain and subdomains | 2026-09-23 | Blocking | Group-IB [1] |
cdn[.]dlmafi[.]top | Domain | Listed by researchers | That exact host | 2026-09-23 | Blocking | Group-IB [1] |
definatelynoone[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-23 | Blocking | Group-IB [1] |
tvtap-hd[.]app | Domain | Malware download | Domain and subdomains | 2026-09-23 | Blocking | Group-IB [1] |
tvtap-liveapp[.]com | Domain | Malware download | Domain and subdomains | 2026-09-23 | Blocking | Group-IB [1] |
157[.]90[.]179[.]116 | IP address | Listed by researchers | That address only | 2026-09-23 | Blocking | Group-IB [1] |
216[.]126[.]229[.]216 | IP address | Listed by researchers | That address only | 2026-09-23 | Blocking | Group-IB [1] |
19fef425c3a774e493526126a441a31971db8ac5af84c1d9eef15a272ba02ec1 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
1a992e2b36b2a9a77300b0b0fe7e9c20e127c8257fd203bb4b3eaf1e35e63ce7 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
28a09cd68b1f4212cc61bd2d44d03d55b8bcd7df284bab56cdae8507abc90e3c | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
3b0c49ed1590bceffbefed150bb64545e69e792c5ad63578cc3bca5c5b96f2cb | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
45e16e56c81059f6758dced28a58256287785a8b0815577c1140293589aa2ae1 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
54efee2665d3779f1be0d885409e29e6cd07fe944fa82e5d6eeb832264c7409d | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
5fff21af95bd38b8c11dd73342a55acb75e91ff1936ed0ccb06af28400ef87d4 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
648b34fa952a2806d9f4c272f8bfbadc45c0c370c3d7c2ff0c7ffbb015237ce1 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
76392303f28a7e6f1463a5fa04a19faf40d51d7be6619943a914482b0f3c7f0b | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
77ead085bae72b6cb1c33c55fbd7763c4d8050798c55af3132c3b904084eeb8a | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
95ec481745c64c385c60f6c812585e5060a50e38da44bc1a9f67da3921b1a50f | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
ad2b019cf346b8b4e6b2174a95b1d897ce736087bd06066f31a9d7fd72283e9f | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
af2decf5c5cbff0c0460ab09ad3cff497c765e3cf61e6c45f4e3b5c6a103312c | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
b714f590380e5be8233cd60a4f212d949aff27b3a980e6d644c84b0120dd25b3 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
c6e1235d5cd01a205a191ce48c3d68e9fea620671c0c069593027a0218fad5b0 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
cb29b6348ae4458b6b506f8de9336d0980bbfaf88b1d68be2771b57090d29889 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
dd6d05ff31f64b9ca8ca9334a804dbee5917d6448acb026de4ca818017a04730 | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
fa373aaa95ca512ba9595c3ab41bac892c8c79d4a31f5d74c2f3225b629de52e | SHA-256 hash | Malware file | That file | 2026-09-23 | Blocking | Group-IB [1] |
hxxps://tvtap-liveapp[.]com/dl[.]php | URL | Malware download | That exact URL | 2026-09-23 | Blocking | Group-IB [1] |
megchartedbk7[.]com | Domain | Command and control | Domain and subdomains | 2026-09-22 | Blocking | Huntress [1] |
onlineview365[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-22 | Blocking | Huntress [1] |
readonline365[.]com | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | Huntress [1] |
thatawful[.]boutique | Domain | Command and control | Domain and subdomains | 2026-09-22 | Blocking | Huntress [1] |
viewdocument[.]live | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | Huntress [1] |
67[.]43[.]50[.]11 | IP address | Command and control | That address only | 2026-09-22 | Blocking | Huntress [1] |
1c923c685f97e556f241d0f1880283500a61dc7ecae8cafe75f34c720ff6b918 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
3052352ac811c48590f0239281312c35560fc06b4dc39790e365eb1e7cab8634 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
394c93dfbb7581c66a23c52b20cd90b31415c0825a2eab7107e60ee3fe693c04 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
4a18f65ab7de7be385cbcebc78c9ae49334294f93726822b8900f9b7a324a6b0 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
52b242047a8055c0936b384b952c1c16c1072a590610140b01f4acefa8ae883a | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
54ed18aa883b53794810be0428b3a0167758183c5b3ba5660af747dc81dd5b76 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
9fb5888f9ac99227a35f3e08ca08bfb9eed676e1f91638599eba0d7a5aac847f | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
d7185bd7b450b478c793ece3025bdd867eed70bb7b739a5f26375b5ba6cf0d93 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Huntress [1] |
hxxps://readonline365[.]com/view/image[.]png | URL | Malware download | That exact URL | 2026-09-22 | Blocking | Huntress [1] |
3fb29cf1ef3ce6b187e724c8e7dc4b6a5dfefa50 | SHA-1 hash | Malware file | That file | 2026-09-22 | Blocking | ReversingLabs [1] |
7108c1079ac0de030902b049770e8cb822e82055 | SHA-1 hash | Malware file | That file | 2026-09-22 | Blocking | ReversingLabs [1] |
ea40177789e7a1b972c27c61dffff195dd85c544 | SHA-1 hash | Malware file | That file | 2026-09-22 | Blocking | ReversingLabs [1] |
arubanetworks-inc[.]com | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
aviationpioneers[.]info | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
checkingweb[.]net | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
corporate-sync-gate[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
docsendsr[.]online | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
documentationreviewdocument2026review[.]sbs | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
documentensono[.]sbs | Domain | Phishing | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
documentsonitustechnologies[.]sbs | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
downloaddocumentcontechbuilding[.]sbs | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
emsafetoproceedtaward[.]top | Domain | Listed by researchers | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
legacy-bridge-node[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
localcontex[.]online | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
maillive[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
pdfsecurtoview[.]cfd | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
pdfsecurtoview[.]info | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
pdfsecurtoview[.]sbs | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
pdfsecurtoview365[.]cfd | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
selectivelife03[.]sbs | Domain | Phishing | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
sharepointer-dr[.]com | Domain | Malware download | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
stubborn-academy[.]icu | Domain | Listed by researchers | Domain and subdomains | 2026-09-22 | Blocking | ANY.RUN [1] |
155[.]254[.]26[.]180 | IP address | Malware download | That address only | 2026-09-22 | Blocking | ANY.RUN [1] |
185[.]174[.]102[.]34 | IP address | Listed by researchers | That address only | 2026-09-22 | Blocking | ANY.RUN [1] |
207[.]189[.]19[.]40 | IP address | Listed by researchers | That address only | 2026-09-22 | Blocking | ANY.RUN [1] |
212[.]189[.]40[.]73 | IP address | Malware download | That address only | 2026-09-22 | Blocking | ANY.RUN [1] |
64[.]204[.]180[.]203 | IP address | Malware download | That address only | 2026-09-22 | Blocking | ANY.RUN [1] |
91[.]92[.]41[.]114 | IP address | Malware download | That address only | 2026-09-22 | Blocking | ANY.RUN [1] |
hxxps://localcontex[.]online/AdobecloudReader/pdf_Reader_en_install[.]msi | URL | Malware download | That exact URL | 2026-09-22 | Blocking | ANY.RUN [1] |
hxxps://localcontex[.]online/review[.]signal-doc[.]cloud/[.]DocuSign/ | URL | Malware download | That exact URL | 2026-09-22 | Blocking | ANY.RUN [1] |
250d4fa37488af9b025333fa17705573d721467b203765bc360890b4f5a90cd7 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Cisco Talos [1] |
5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Cisco Talos [1] |
c13cea04f598e2b0c248d603a6e31bd13aabb64d8149c1b6a77b64e0b983a86f | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Cisco Talos [1] |
c4dc171f2513fcaf9d5ecc815a94aee4063b213ab380f80bd3ac422dee5205a7 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Cisco Talos [1] |
eddbd0ecf7195d38fefae5b9d393abfa79e6f3f94bde19308ecef130a05a42e5 | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Cisco Talos [1] |
f5f1f8c3e7b883793800ab6ccf21b3e60bd0730f300b4595fe74a33adc17a63c | SHA-256 hash | Malware file | That file | 2026-09-22 | Blocking | Cisco Talos [1] |
thecovnresation[.]com | Domain | Command and control | Domain and subdomains | 2026-09-21 | Blocking | Volexity [1] |
hxxps://americanprgoress[.]top/chrome_cleanup[.]exe | URL | Malware download | That exact URL | 2026-09-21 | Blocking | Volexity [1] |
1628bb03db87f67661349e169d73ee14ed490bdbf22abfbda08ccc9ebe237974 | SHA-256 hash | Malware file | That file | 2026-09-21 | Blocking | Zscaler ThreatLabz [1] |
2d43d592630ad1e012da63ef7279f95dd4a8e94964e12ca2f996051875574fa6 | SHA-256 hash | Malware file | That file | 2026-09-21 | Blocking | Zscaler ThreatLabz [1] [2] |
625a381981fc2d4c25c981d98b1d66bb2cf5da2dde2f590add0673a857d5b074 | SHA-256 hash | Malware file | That file | 2026-09-21 | Blocking | Zscaler ThreatLabz [1] |
979048a749d8f28d877c7068b1b336ecd1e349869dfb1d7c68118f90e4099bc4 | SHA-256 hash | Malware file | That file | 2026-09-21 | Blocking | Zscaler ThreatLabz [1] |
throughoutes[.]net | Domain | Command and control | Domain and subdomains | 2026-09-21 | Blocking | Huntress [1] |
104[.]164[.]55[.]46 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
146[.]70[.]117[.]239 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
149[.]102[.]229[.]154 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
192[.]42[.]116[.]12 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
192[.]42[.]116[.]50 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
192[.]42[.]116[.]52 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
192[.]42[.]116[.]56 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
192[.]42[.]116[.]97 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
37[.]19[.]210[.]12 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
64[.]190[.]76[.]14 | IP address | Listed by researchers | That address only | 2026-09-21 | Blocking | Securelist [1] |
0108656a3e1ade6ca4f21b084f5e1208 | MD5 hash | Malware file | That file | 2026-09-21 | Blocking | Securelist [1] |
bea5e267f24d7da59f6821bffdbff293 | MD5 hash | Malware file | That file | 2026-09-21 | Blocking | Securelist [1] |
grenight[.]com | Domain | Command and control | Domain and subdomains | 2026-09-18 | Blocking | SentinelLabs [1] |
storage[.]hubpage[.]cloud | Domain | Listed by researchers | That exact host | 2026-09-18 | Blocking | SentinelLabs [1] |
176[.]97[.]114[.]232 | IP address | Listed by researchers | That address only | 2026-09-18 | Blocking | SentinelLabs [1] |
45[.]11[.]59[.]140 | IP address | Listed by researchers | That address only | 2026-09-18 | Blocking | SentinelLabs [1] |
85[.]137[.]56[.]10 | IP address | Listed by researchers | That address only | 2026-09-18 | Blocking | SentinelLabs [1] |
85[.]137[.]56[.]245 | IP address | Command and control | That address only | 2026-09-18 | Blocking | SentinelLabs [1] |
02df07a173ab03b82a4fb6a08973fff8b1467f28 | SHA-1 hash | Malware file | That file | 2026-09-18 | Blocking | SentinelLabs [1] |
5728b11d30586bbfc1d8bd12df1c722a06e767a2 | SHA-1 hash | Malware file | That file | 2026-09-18 | Blocking | SentinelLabs [1] |
c491d477dbe0ae04e9aed9dbe237144c03f73ec4 | SHA-1 hash | Malware file | That file | 2026-09-18 | Blocking | SentinelLabs [1] |
frames-1zm[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-18 | Blocking | K7 Labs [1] |
94b50ace73cc03790678c73b867be129 | MD5 hash | Malware file | That file | 2026-09-18 | Blocking | K7 Labs [1] |
be860a15b7e5d44b0b3d67f598238fad | MD5 hash | Malware file | That file | 2026-09-18 | Blocking | K7 Labs [1] |
c024189e1e7fa0ae6d24353367e8b98d | MD5 hash | Malware file | That file | 2026-09-18 | Blocking | K7 Labs [1] |
ed276b2312f641b00f87fa18e85c48eb | MD5 hash | Malware file | That file | 2026-09-18 | Blocking | K7 Labs [1] |
f1d2fdb7f3b699da69a050c5352a33c2 | MD5 hash | Malware file | That file | 2026-09-18 | Blocking | K7 Labs [1] |
f94de28bd66afc4679f546500db184d4 | MD5 hash | Malware file | That file | 2026-09-18 | Blocking | K7 Labs [1] |
hxxps://publicwavlib[.]pages[.]dev/hdaudio[.]wav | URL | Malware download | That exact URL | 2026-09-18 | Blocking | K7 Labs [1] |
hxxps://publicwavlib[.]pages[.]dev/mav[.]wav | URL | Malware download | That exact URL | 2026-09-18 | Blocking | K7 Labs [1] |
207d9d891ac756b2bfad88aba5682c65 | MD5 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] |
2915b3f8b703eb744fc54c81f4a9c67f | MD5 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] [3] [4] |
38de5b216c33833af710e88f7f64fc98 | MD5 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] [3] [4] |
41444d7018601b599beac0c60ed1bf83 | MD5 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] |
9a47c4d379998ade2f8f99e23a630c06 | MD5 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] |
38d053135ddceaef0abb8296f3b0bf6114b25e10e6fa1bb8050aeecec4ba8f55 | SHA-256 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] |
9896a6fcb9bb5ac1ec5297b4a65be3f647589adf7c37b45f3f7466decd6a4a7f | SHA-256 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] [3] [4] |
9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 | SHA-256 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] [3] [4] |
c4dd71e347a076ba24bdd2d0ee532ef991c1ef25a2431a19f850942ba2ab16b2 | SHA-256 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] |
fed979f93bcaf4e73ebd25748093a92095d5109cbd01d55f97bdc50ce509ad2f | SHA-256 hash | Malware file | That file | 2026-09-17 | Blocking | Cisco Talos [1] [2] |
deadhub[.]org | Domain | Command and control | Domain and subdomains | 2026-09-17 | Blocking | Securelist [1] |
itorrents[.]org | Domain | Malware download | That exact host | 2026-09-17 | Blocking | Securelist [1] |
193[.]23[.]118[.]155 | IP address | Command and control | That address only | 2026-09-17 | Blocking | Securelist [1] |
208[.]64[.]33[.]90 | IP address | Command and control | That address only | 2026-09-17 | Blocking | Securelist [1] |
208[.]94[.]246[.]53 | IP address | Command and control | That address only | 2026-09-17 | Blocking | Securelist [1] |
a0b13781edd7cfdab13d79afff3c83c1 | MD5 hash | Malware file | That file | 2026-09-17 | Blocking | Securelist [1] |
193[.]5[.]65[.]114 | IP address | Listed by researchers | That address only | 2026-09-17 | Blocking | Huntress [1] |
45[.]13[.]122[.]7 | IP address | Command and control | That address only | 2026-09-17 | Blocking | Huntress [1] |
44f0a22b143b79fa760bf31e14c8fff714c8a2a1 | SHA-1 hash | Malware file | That file | 2026-09-17 | Blocking | ESET WeLiveSecurity [1] |
indiatodays[.]org | Domain | Listed by researchers | Domain and subdomains | 2026-09-16 | Blocking | Zscaler ThreatLabz [1] |
theprints[.]org | Domain | Listed by researchers | Domain and subdomains | 2026-09-16 | Blocking | Zscaler ThreatLabz [1] |
a502264fa0b64eecae60498b0c48fca3 | MD5 hash | Malware file | That file | 2026-09-16 | Blocking | SentinelLabs [1] |
1dcafb7f8448683281106b06dd22409a | MD5 hash | Malware file | That file | 2026-09-16 | Blocking | Securelist [1] |
1f3034b706c78b35d8e34044e68c693a | MD5 hash | Malware file | That file | 2026-09-16 | Blocking | Securelist [1] |
3ecd1cd627d0340c92901a478a7caad8 | MD5 hash | Malware file | That file | 2026-09-16 | Blocking | Securelist [1] |
4aa9fb1bf9223dfcdac920759bc7a3c7 | MD5 hash | Malware file | That file | 2026-09-16 | Blocking | Securelist [1] |
631fb131a56caf4ca0f287ed73e876ab | MD5 hash | Malware file | That file | 2026-09-16 | Blocking | Securelist [1] |
getmacouscloud[.]com | Domain | Malware download | Domain and subdomains | 2026-09-16 | Blocking | Unit 42 [1] |
161[.]35[.]146[.]120 | IP address | Command and control | That address only | 2026-09-16 | Blocking | Unit 42 [1] |
188[.]166[.]78[.]138 | IP address | Command and control | That address only | 2026-09-16 | Blocking | Unit 42 [1] |
4504006d1911057be42435d4625f03d83c4d0b7b6898d14beb9cdeba6cf667b9 | SHA-256 hash | Malware file | That file | 2026-09-16 | Blocking | Unit 42 [1] |
6bfcdb4920383375b7e519918df7eb4db751b974b5571a15ce66b82478012620 | SHA-256 hash | Malware file | That file | 2026-09-16 | Blocking | Unit 42 [1] |
71781ad8adefb499aee9bcbe1a166e69ccc37a47066682f617d65c76d8cde88c | SHA-256 hash | Malware file | That file | 2026-09-16 | Blocking | Unit 42 [1] |
7ea6ff8b12c59aaae1ab6f4f5a57045dad5a8127954f3ffd3d1c154d40d7ca3a | SHA-256 hash | Malware file | That file | 2026-09-16 | Blocking | Unit 42 [1] |
a598fcdcd49247312861ff90c16cb4a5d49fede6072e30e7416dd276668fa2a9 | SHA-256 hash | Malware file | That file | 2026-09-16 | Blocking | Unit 42 [1] |
hxxps://ferncore13[.]com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/m1/update | URL | Malware download | That exact URL | 2026-09-16 | Blocking | Unit 42 [1] |
hxxps://ferncore13[.]com/curl/608e70d1338612686917ee5cd300ff7ed8e318dfd787a50257f92142e99bd688 | URL | Malware download | That exact URL | 2026-09-16 | Blocking | Unit 42 [1] |
hxxps://grove-89[.]com/api/metrics/run?event=pasted | URL | Malware download | That exact URL | 2026-09-16 | Blocking | Unit 42 [1] |
192[.]169[.]176[.]54 | IP address | Command and control | That address only | 2026-09-15 | Blocking | Censys [1] |
68[.]178[.]202[.]150 | IP address | Command and control | That address only | 2026-09-15 | Blocking | Censys [1] |
68[.]178[.]205[.]17 | IP address | Command and control | That address only | 2026-09-15 | Blocking | Censys [1] |
canada-post11[.]com | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Silent Push [1] |
11168833[.]com | Domain | Malware download | That exact host | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
11170011[.]com | Domain | Malware download | That exact host | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
1862[.]cc | Domain | Malware download | That exact host | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
312zym001[.]cc | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
80074[.]cc | Domain | Malware download | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
843470[.]cc | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
am125[.]cc | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
appcasino[.]online | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
asg78[.]com | Domain | Command and control | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
cache-cdn[.]org | Domain | Command and control | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
dollycasino[.]com | Domain | Phishing | That exact host | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
dragobet[.]net | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
interisle[.]net | Domain | Command and control | That exact host | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
js[.]cache-mcp[.]com | Domain | Malware download | That exact host | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
mcp-source[.]online | Domain | Command and control | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
puqxr[.]com | Domain | Malware download | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
realz[.]com | Domain | Phishing | That exact host | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
storebet77[.]support | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
summer138[.]fit | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
vip311[.]cc | Domain | Command and control | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
zenplay77-x[.]space | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
zzyud[.]com | Domain | Phishing | Domain and subdomains | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
146[.]103[.]91[.]133 | IP address | Malware download | That address only | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
157[.]185[.]143[.]150 | IP address | Malware download | That address only | 2026-09-15 | Blocking | Infoblox Threat Intel [1] |
gta6mainserver[.]com | Domain | Malware download | Domain and subdomains | 2026-09-15 | Blocking | Huntress [1] |
gta6mainweb[.]com | Domain | Malware download | Domain and subdomains | 2026-09-15 | Blocking | Huntress [1] |
web12api[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-09-15 | Blocking | Huntress [1] |
airduct1[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
amalqasehselangor[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
analysis-id-lfg[.]info | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
annamaclean[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
arushigupta[.]life | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
ascendpopdownloadtoday[.]monster | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
asiana-online[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
betesebplus[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
bluemountainloan[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
boardgamepix[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
boundpopclickgetfile[.]monster | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
breadcabin[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
canflymarketing[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
clickzona[.]net | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
cloudflare-check[.]net | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
connorkimble[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
daleeby[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
di-il[.]com | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
dutyfrees[.]digital | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
familyonlinestore[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
flarclod[.]top | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
gardelectricalcontracting[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
golfcoursetravel[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
golftucsonarizona[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
hanbayjewellery[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
hestiamortgages[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
id-ll[.]com | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
ilaumachque[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
interactivsbroker[.]com | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
islamjamal[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
josephtoone[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
jouncepopdownloadnow[.]com | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
jumppopdownloadsecret[.]monster | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
kawaiininjaclub[.]cfd | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
lastdayornot[.]top | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
launchingramps[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
leosafari[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
lewdstories[.]com | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
lionheadsl[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
locoaudio[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
lyxorgbs[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
maidsradar[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
medfinadvisory[.]com | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
nanakshahicoin[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
photobyroyan[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
pigeononpinguin[.]top | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
ploutouscapitalus[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
plumber-charlotte[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
premiumfastloans[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
primemarkets360[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
redwing-max[.]biz | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
safetybygrace[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
sanremomodauomo[.]com | Domain | Malware download | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
scribblebubblebibi[.]top | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
searlepub[.]com | Domain | Command and control | Domain and subdomains | 2026-09-14 | Blocking | Sekoia [1] |
sisaradistributors[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
socialseoguru[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
solidfuelsupplier[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
starbreezehvac[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |
straighteightlogistics[.]com | Domain | Malware download | That exact host | 2026-09-14 | Blocking | Sekoia [1] |