| 2026-08-21 15:38 | pa-api.salondeguitaredemontreal.com | FAKEUPDATES | SocGholish |  monitorsg |
| 2026-08-21 15:38 | uz7mn8jcpt.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin |  xscon |
| 2026-08-21 15:38 | 89.110.110.119:443 | Unknown RAT | CNCMachineRMS |  netresec |
| 2026-08-21 15:38 | 89.124.79.98:443 | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:38 | 85.158.110.78:443 | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:38 | triotmelon.com | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:37 | 144.124.242.171:443 | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:37 | notepadreleased.com | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:37 | b0bc47a7308bd39a5b638781874a3d8e | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:37 | ca88a6c055a96e1a6fa47e2586d41d2a | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:37 | eba2bbd380b6949a249aba5c3ed13245 | Unknown RAT | CNCMachineRMS | netresec |
| 2026-08-21 15:37 | http://45.150.195.235/tarm | Unknown malware | honeypot |  moldy |
| 2026-08-21 15:37 | 142.93.205.111:12345 | Aisuru | AISURU c2 |  Bitsight |
| 2026-08-21 15:37 | http://45.150.195.235/tarm5 | Unknown malware | honeypot | moldy |
| 2026-08-21 15:37 | http://45.150.195.235/tarm6 | Unknown malware | honeypot | moldy |
| 2026-08-21 15:37 | http://45.150.195.235/tarm7 | Unknown malware | honeypot | moldy |
| 2026-08-21 15:37 | http://45.150.195.235/tmips | Unknown malware | honeypot | moldy |
| 2026-08-21 15:37 | http://45.150.195.235/tmpsl | Unknown malware | honeypot | moldy |
| 2026-08-21 15:37 | tftp://45.150.195.235:69/tarm | Unknown malware | honeypot | moldy |
| 2026-08-21 15:23 | https://cdn.jsdelivr.net/gh/marye4562/trimester/implosive | ClearFake | ClearFake |  threatcat_ch |
| 2026-08-21 15:05 | 186.241.75.21:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 15:05 | 115.159.226.190:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 15:05 | 115.159.226.190:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 14:54 | rowanportico.global | SmartApeSG | SmartApeSG |  varysz |
| 2026-08-21 14:54 | https://rowanportico.global/identity/realm-xml.js | SmartApeSG | SmartApeSG | varysz |
| 2026-08-21 14:53 | vo472a21.eng-aqua-burn.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 14:53 | eng-aqua-burn.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 14:45 | gq2r07sp.easybatteryfixed.org | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-21 14:43 | easybatteryfixed.org | ClearFake | 21August2026 ClearFake Commandline macOS |  Gi7w0rm |
| 2026-08-21 14:25 | http://none/comments | Remus | Remus |  abuse_ch |
| 2026-08-21 14:05 | 8.137.111.232:8080 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-21 14:05 | 8.137.111.232:443 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-21 14:05 | 104.238.57.209:7443 | Unknown malware | Mythic | Anonymous |
| 2026-08-21 13:45 | 202.61.85.104:7800 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 13:45 | 202.61.85.104:7811 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 13:35 | http://gsagasgash.duckdns.org/eternalpacketProcessordefaulttrack.php | DCRat | dcrat RAT | abuse_ch |
| 2026-08-21 13:30 | dez.11gokil.org | Vidar | Vidar |  crep1x |
| 2026-08-21 13:30 | https://dez.11gokil.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | ses.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | ket.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | ljr.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | nhg.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | bob.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | kra.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | brr.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | sto.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | rex.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:07 | bib.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://sto.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://rex.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://bib.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://nhg.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://kra.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://brr.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://ses.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:06 | https://ket.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 13:05 | 8.137.111.232:4433 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-21 13:05 | 20.74.145.114:7443 | Unknown malware | Mythic | Anonymous |
| 2026-08-21 13:05 | 106.54.41.209:44410 | Unknown malware | Viper | Anonymous |
| 2026-08-21 12:53 | 5zh0a5l5.en-flashburnn.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 12:53 | en-flashburnn.com | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 12:33 | xorajahy.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 12:33 | http://113.228.208.46:56903/Mozi.a | Mozi | elf IoT Mozi |  HoneyLabs |
| 2026-08-21 12:33 | http://46.227.184.199:36141/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 12:05 | 36.140.162.173:8082 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 12:05 | 43.134.100.72:4444 | VShell | Vshell | Anonymous |
| 2026-08-21 12:00 | http://zakuiru.shop:9048/reviews | Remus | Remus | abuse_ch |
| 2026-08-21 12:00 | http://xightne.click:7242/categories | Remus | Remus | abuse_ch |
| 2026-08-21 11:48 | 8.137.92.225:443 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-21 11:48 | 68.64.178.130:8081 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-21 11:48 | 68.64.178.130:9443 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-21 11:47 | 162.251.92.64:800 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-21 11:47 | 156.225.18.45:33333 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-21 11:47 | 122.51.12.180:8443 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-21 11:46 | dujexi.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 11:43 | checkout.lat | ClearFake | ClearFake ClickFix etherhiding EtherHidingMagecart | Anonymous |
| 2026-08-21 11:33 | eng--enerflow.com | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 11:10 | 346cf14b787747160f789525e9843663b05a7e588f8fa92b8a2b858a8d54272b | Vidar | |  Grim |
| 2026-08-21 11:10 | 647653bcb618be9cf1883c969cfa3b4b3e3cea13 | Vidar | | Grim |
| 2026-08-21 11:10 | edc8338feddcdc93e69c966d26a8e94e | Vidar | | Grim |
| 2026-08-21 11:10 | 729f56d9643c97fa9d9fb4a7696df881cbe0321b | Formbook | | Grim |
| 2026-08-21 11:10 | 88602976f7c64499ef40e4972ac17db6 | Formbook | | Grim |
| 2026-08-21 11:10 | 219d35e9f33b48b3fc1ee51cb4fed27616c09d5f | Coinminer | | Grim |
| 2026-08-21 11:10 | 9853d168bdc4e85fb0c9d2446b5d13ff | Coinminer | | Grim |
| 2026-08-21 11:10 | e89e2ea4c743c87ef7faff9303b9133c54737dd683536cf5e6518374fb130a4a | Formbook | | Grim |
| 2026-08-21 11:10 | dc7fcc0d7d189555827260b3e4acc96a | Vidar | | Grim |
| 2026-08-21 11:10 | 02522eaec42abfb57e780e43fda7ef0cc4f0e6d061c2e35aaa3575d5b62f7c13 | Coinminer | | Grim |
| 2026-08-21 11:10 | acce16056f1fe8efd131034d6d27814ba5fb3e0878cf8147d1983bd73f59eec2 | Vidar | | Grim |
| 2026-08-21 11:10 | 78059e3070682f0ed14015624d8323d4a42fe908 | Vidar | | Grim |
| 2026-08-21 11:10 | 8abd6a3d21097d75fc4970cb1c202c7b30bc709cf2446a94a298e3020578942a | Venus Stealer | | Grim |
| 2026-08-21 11:10 | 31c21965b3661caf899480e5a6bc1e5e411e4518 | Venus Stealer | | Grim |
| 2026-08-21 11:10 | cb470ad87c2982fd1d60b2fa6cbe637d | Venus Stealer | | Grim |
| 2026-08-21 11:09 | eng--burnblend.com | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 11:05 | 66.85.27.43:7443 | Unknown malware | Mythic | Anonymous |
| 2026-08-21 10:58 | ymrtzuano.bio-dantix.com | ClearFake | ClearFake win-0xa770 Windows | Anonymous |
| 2026-08-21 10:58 | 6fkzrm3o.en-en-en-cardioslim.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-21 10:57 | lejournaldelafinance.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 10:57 | assure360.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 10:57 | https://forecast-chaos.com/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://sound-obstacle.com/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://soup-tone.pro/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://seat-aviation.com/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://root-cherry.com/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://carpet-sail.com/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://chief-ignite.pro/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://hair-result.xyz/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://ukwearstore.org | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://193-233-126-53.sslip.io/d3f8a142c9/verification.sct | Unknown malware | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://siege-close.com/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://fashion-chicken.com/n3s9c2a | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://github.com/CyberKayt/test_rpc/raw/refs/heads/main/driverapi.exe | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-21 10:57 | https://infodatalis.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:57 | https://telemetryloop.net | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 10:54 | en-en-en-cardioslim.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 10:54 | bio-dantix.com | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 10:54 | ewey5he5.en-cardioslim.us | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-21 10:53 | jteqecd8.en-flashbrn.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 10:52 | en-flashbrn.com | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 10:37 | xlww5gz9.ener--flow.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 10:34 | htbwm97j.en-cardio-slimtea.us | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-21 10:33 | hxzjofuf.en-en-en-blinzador.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-21 10:33 | 18ppizar.easybatteryfixed.net | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-21 10:32 | ener--flow.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 10:32 | en-en-en-blinzador.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 10:32 | en-cardio-slimtea.us | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 10:32 | easybatteryfixed.net | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 10:05 | 46.63.0.187:3389 | Havoc | Havoc | Anonymous |
| 2026-08-21 09:57 | https://cdn.jsdelivr.net/gh/Max-856/crocs/fulls | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 09:51 | o4epigrc.en-en--echofree.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-21 09:49 | en-en--echofree.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 09:47 | 94.154.32.73:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-21 09:47 | 91.92.40.209:443 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-21 09:47 | 054bvvua.enerflaw.us | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 09:47 | 80.190.77.86:7007 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-21 09:47 | 64.95.13.219:443 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-21 09:47 | 65.1.70.222:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-21 09:45 | enerflaw.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 09:44 | 198.23.185.98:6666 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-21 09:44 | 198.23.185.98:7777 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-21 09:44 | 188.49.86.25:443 | Havoc | drb-ra Havoc | abuse_ch |
| 2026-08-21 09:44 | 185.34.147.35:7707 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-21 09:44 | 185.34.147.34:7707 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-21 09:44 | 185.34.147.33:7707 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-21 09:44 | 185.212.129.143:9000 | Evilginx | drb-ra EvilGinx EvilGoPhish | abuse_ch |
| 2026-08-21 09:44 | 172.239.45.42:8443 | Havoc | drb-ra Havoc | abuse_ch |
| 2026-08-21 09:44 | 172.236.157.30:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-21 09:44 | 169.58.201.247:5000 | Evilginx | drb-ra EvilGinx EvilGoPhish | abuse_ch |
| 2026-08-21 09:44 | 162.35.170.53:2030 | Evilginx | drb-ra EvilGinx EvilGoPhish | abuse_ch |
| 2026-08-21 09:44 | 162.35.105.100:8443 | Evilginx | drb-ra EvilGinx EvilGoPhish | abuse_ch |
| 2026-08-21 09:43 | 128.90.105.217:7209 | DCRat | dcrat drb-ra RAT | abuse_ch |
| 2026-08-21 09:43 | 125.62.77.141:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-21 09:43 | 121.127.253.146:4321 | AdaptixC2 | AdaptixC2 drb-ra | abuse_ch |
| 2026-08-21 09:43 | 109.227.36.61:4433 | DanaBot | DanBot drb-ra | abuse_ch |
| 2026-08-21 09:42 | https://cdn.jsdelivr.net/gh/Max-856/treem/luda | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 09:37 | https://cdn.jsdelivr.net/gh/roadvillnet/fred/iren | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 09:24 | 81.68.249.199:1818 | DCRat | DarkCrystal RAT dcrat |  whoamix302 |
| 2026-08-21 09:24 | 128.90.105.217:7070 | DCRat | DarkCrystal RAT dcrat | whoamix302 |
| 2026-08-21 09:24 | 185.185.68.42:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 09:24 | 89.124.80.214:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 09:19 | drivephoto-guest.info | TonRAT | | Anonymous |
| 2026-08-21 09:19 | ejevanjc.info | TonRAT | | Anonymous |
| 2026-08-21 09:19 | extranet-help-desk26.com | TonRAT | | Anonymous |
| 2026-08-21 09:19 | file-load-20.info | TonRAT | | Anonymous |
| 2026-08-21 09:19 | haksdkweqw219dms.com | TonRAT | | Anonymous |
| 2026-08-21 09:19 | img-load2280.info | TonRAT | | Anonymous |
| 2026-08-21 09:19 | load-file0228.info | TonRAT | | Anonymous |
| 2026-08-21 09:19 | load-file2754.info | TonRAT | | Anonymous |
| 2026-08-21 09:19 | reservationcheckid9567.info | TonRAT | | Anonymous |
| 2026-08-21 09:19 | testload19.skin | TonRAT | | Anonymous |
| 2026-08-21 09:19 | file-download.info | TonRAT | | Anonymous |
| 2026-08-21 09:05 | 222.112.70.149:8084 | VShell | Vshell | Anonymous |
| 2026-08-21 09:05 | 1.15.179.110:8084 | VShell | Vshell | Anonymous |
| 2026-08-21 09:00 | 193.26.115.118:8443 | PureLogs Stealer | PureLogsStealer | abuse_ch |
| 2026-08-21 09:00 | https://www.rzrms.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-21 09:00 | https://www.tdvm4q.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-21 08:58 | larosadejerico.es | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 08:58 | logs.bestshoppingday.com | PureLogs Stealer | PureLogsStealer | abuse_ch |
| 2026-08-21 08:57 | eng-brainsong.com | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 08:50 | sii.11gokil.org | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | zaf.11gokil.org | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | ges.1001gacor.org | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | tax.sm188dnsx.top | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | sii.sm188dnsx.top | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | zaf.sm188dnsx.top | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | tax.11gokil.org | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | https://sii.11gokil.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | https://zaf.11gokil.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | https://tax.sm188dnsx.top/ | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | https://sii.sm188dnsx.top/ | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | https://zaf.sm188dnsx.top/ | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | https://tax.11gokil.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 08:50 | https://ges.1001gacor.org/ | Vidar | Vidar | crep1x |
| 2026-08-21 08:48 | 118.25.188.245:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-21 08:48 | 186.169.78.50:6001 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-21 08:48 | 186.169.78.50:1100 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-21 08:48 | 178.16.52.169:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-21 08:48 | 207.189.15.159:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-21 08:48 | 198.12.83.91:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-21 08:48 | 217.156.65.42:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-21 08:48 | 213.145.86.232:31866 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 45.142.141.186:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 188.42.217.40:64323 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 64.90.17.193:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 146.70.155.238:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 43.156.107.94:8887 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 156.224.28.23:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 199.217.98.55:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 31.76.111.38:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 45.153.34.164:61443 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 185.246.220.204:55448 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 185.132.54.254:8888 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 198.13.158.143:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 153.75.82.143:31337 | Sliver | sliver | whoamix302 |
| 2026-08-21 08:48 | 172.111.198.212:56011 | PureRAT | PureHVNC PureRAT ResolverRAT | whoamix302 |
| 2026-08-21 08:48 | 94.96.154.217:17 | Xtreme RAT | ExtRat XTRAT Xtreme RAT | whoamix302 |
| 2026-08-21 08:48 | eng-biobooster.com | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 08:46 | pidorsas.site | IClickFix | ClickFix | threatcat_ch |
| 2026-08-21 08:46 | hulywali.space | IClickFix | ClickFix | threatcat_ch |
| 2026-08-21 08:46 | zaerkos.rest | IClickFix | ClickFix | threatcat_ch |
| 2026-08-21 08:46 | zaeroks.website | IClickFix | ClickFix | threatcat_ch |
| 2026-08-21 08:46 | verokase.xyz | IClickFix | ClickFix | threatcat_ch |
| 2026-08-21 08:45 | 194.116.236.49:2222 | XWorm | XWorm | abuse_ch |
| 2026-08-21 08:45 | dad.adkfarmerdan.com | IClickFix | ClickFix | threatcat_ch |
| 2026-08-21 08:37 | 104.168.5.30:8443 | PureLogs Stealer | PureLogsStealer | abuse_ch |
| 2026-08-21 08:35 | 84.38.129.114:4545 | XWorm | XWorm | abuse_ch |
| 2026-08-21 08:09 | spotalarm.cfd | Unknown Loader | OffLoader | abuse_ch |
| 2026-08-21 08:05 | 118.25.103.144:8888 | Quasar RAT | QuasarRAT | Anonymous |
| 2026-08-21 08:05 | magulewi.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 08:03 | brahmalihvc.online | PureRAT | PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-21 08:03 | 209.99.190.23:56015 | PureRAT | PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-21 08:02 | 217.60.241.32:443 | Unknown RAT | ConnectWise rmm ScreenConnect | abuse_ch |
| 2026-08-21 08:01 | peetg3pz.dentlprime.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-21 08:00 | dentlprime.com | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 07:57 | 115.159.226.190:80 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2026-08-21 07:57 | 186.241.75.21:80 | Cobalt Strike | CobaltStrike cs-watermark-666666666 | abuse_ch |
| 2026-08-21 07:57 | 123.57.42.41:8080 | Cobalt Strike | CobaltStrike cs-watermark-666666666 | abuse_ch |
| 2026-08-21 07:57 | 199.187.25.93:8443 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2026-08-21 07:53 | utuhv.cn | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:53 | wwwvbcsajmj.cn | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:53 | xxnoyhngfg.cn | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:53 | etgul.cn | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:53 | hhwqascxsdr.cc | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 18.166.189.193:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 18.167.107.230:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 18.167.217.149:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 43.198.145.140:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 43.198.220.74:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 95.40.206.48:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 95.41.64.117:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:46 | o2yen35b.en-en--xenburn.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 07:45 | en-en--xenburn.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 07:38 | akmuniverstall.top | Unknown malware | OnyxC2 | abuse_ch |
| 2026-08-21 07:38 | https://akmuniverstall.top/backend/api/app.php | Unknown malware | OnyxC2 | abuse_ch |
| 2026-08-21 07:28 | manouchy.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 07:11 | https://krem.mesoptik.com/v3/telemetry | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:11 | https://krem.mesoptik.com/v3/report | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:11 | https://krem.mesoptik.com/ws/stealer | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:11 | krem.mesoptik.com | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:00 | b5hhv7o8.crownconnectpk.com | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-21 06:59 | talos.com.br | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 06:57 | http://110.38.2.86:48915/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:57 | http://39.34.140.102:40567/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:57 | http://153.117.38.146:46962/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:57 | 89.19.223.68:5555 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-21 06:57 | tomteboda1.se | IClickFix | | Anonymous |
| 2026-08-21 06:44 | myfitnessbox.be | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 06:33 | 147.189.169.192:8041 | Unknown RAT | ConnectWise rmm ScreenConnect | abuse_ch |
| 2026-08-21 06:12 | eng-aquaburn.us | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 06:05 | ayesahrentacar.com | IClickFix | ClearFake ClickFix |  skocherhan |
| 2026-08-21 06:05 | bellaneek.googlemydesign.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | nettbutikk.radiograf.no | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | susantperkins.clientsitedemo.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | huvipuistokeidas.fi | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | ideagallery.co | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | soprisengineering.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | rightwinmedias.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | bishnoivillagesafari.co.in | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | summershairbraidings.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | nobleeventsandrentals.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | twc-recruitment.co.za | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | thebestclean.ro | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | corporateventcatering.co.uk | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | coastalclearwaterdelivery.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | hilamode.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | lfsd423.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | cdevitsol.shop | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | neoventiveinc.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | moveiseuropa.pt | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | pte-sa.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | fcmsafeservice.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | spacelab.com.co | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | windseyecapital.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | bridgecosmeticsurgeryvacation.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | safespacio.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | supremerivanapune.in | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | edukacjanaturalnie.eu | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | glx.br.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | j88t3.network | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | thabett.app | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | ssakranlaw.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | taxvisors.com.au | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | tdvm4q.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | snmm46.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | rzrms.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | texastreeauthority.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | 176.98.182.177:9034 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-21 06:05 | 43.129.180.120:34567 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-21 06:05 | 695ariela.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | http://112.123.98.99:33747/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://110.38.0.239:35178/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://160.30.142.218:57634/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://202.47.57.186:45676/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://202.70.139.165:37412/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | 85.120.253.113:5000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-21 06:05 | https://t.me/m1duus | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-21 06:05 | rmm.fastmoneyclaim.com | Unknown RAT | ConnectWise ScreenConnect | Anonymous |
| 2026-08-21 06:05 | brlogic.biz | Remus | | skocherhan |
| 2026-08-21 06:05 | glooint.biz | Remus | | skocherhan |
| 2026-08-21 06:05 | orgjc7u140.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | fwgij17247.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | lojyny.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | http://125.44.18.27:46218/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://153.117.40.47:46730/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | 176.98.182.216:34567 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-21 06:05 | 31.70.81.171:8808 | AsyncRAT | 8560 asyncrat c2 censys |  sojubear |
| 2026-08-21 06:05 | feculafi.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | vowycuxa.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | e4i5spo3yx.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | 103.242.12.143:1234 | VShell | Vshell | Anonymous |
| 2026-08-21 06:05 | 113.44.89.87:3306 | Unknown malware | Viper | Anonymous |
| 2026-08-21 06:02 | fdl-ambassadeur.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:51 | hulywali.space | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-21 05:47 | 89g7yx01.en-biobooster.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 05:46 | acua-burn.com | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 05:46 | unionswissnautic.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:44 | en-biobooster.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 05:30 | https://faceit-verification.help/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-21 05:09 | waescherei-leo.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | iptrade.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | mnmasonichomes.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | pgdbiz.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | quarterreststudios.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:05 | 113.44.89.87:8080 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 113.44.89.87:80 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 113.44.89.87:443 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 106.54.41.209:9993 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 162.14.109.204:8080 | VShell | Vshell | Anonymous |
| 2026-08-21 04:52 | kqrfb2fo.congigenplus.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-21 04:50 | 202.61.85.172:7800 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 04:50 | 202.61.85.172:7811 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 04:49 | congigenplus.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 03:59 | rechsteiner-holzbau.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 03:51 | xbcuwv1m.defenseflashlight.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-21 03:50 | defenseflashlight.com | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 03:45 | 202.61.139.46:7800 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 03:45 | 202.61.139.46:7811 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 03:44 | gwgsl6k1.en-belly--flush.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 03:23 | pidorsas.site | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-21 03:05 | 211.101.235.94:8088 | VShell | Vshell | Anonymous |
| 2026-08-21 03:05 | 43.136.76.42:8080 | VShell | Vshell | Anonymous |
| 2026-08-21 03:00 | https://rblxgivex.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-21 01:59 | o7ve5wvj.cognigen-plus.net | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-21 01:57 | cognigen-plus.net | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 01:44 | vrivcuff.en-americaneaglependant.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 01:43 | en-americaneaglependant.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 01:05 | 43.140.219.182:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 01:05 | 43.140.219.182:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 01:05 | 157.254.191.87:9999 | VShell | Vshell | Anonymous |
| 2026-08-21 01:04 | schiessgestaltung.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 00:54 | rblxgivex.com | Unknown malware | ClickFix compromised | Anonymous |
| 2026-08-21 00:43 | forecast-chaos.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 00:43 | sound-obstacle.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 00:43 | root-cherry.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 00:10 | http://zakuiru.shop:9048/transactions | Remus | Remus | abuse_ch |
| 2026-08-21 00:05 | 47.109.34.148:8084 | VShell | Vshell | Anonymous |
| 2026-08-21 00:04 | olviro.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:54 | chefvoyage.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:52 | 4vhdn6ve.cognigenpluss.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-20 23:48 | cognigenpluss.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 23:47 | 43.140.219.182:443 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-20 23:44 | c0jcfjcz.eloncod.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 23:42 | eloncod.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 23:42 | owxqk8og.dantilock.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-20 23:39 | dantilock.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 23:38 | verokase.xyz | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-20 23:24 | immorein-wyne.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:09 | susieleeforcongress.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:05 | 101.200.193.211:8082 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 23:05 | 120.55.43.18:8000 | VShell | Vshell | Anonymous |
| 2026-08-20 23:00 | https://apartments-review261634860.sbs/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 22:40 | http://zakuiru.shop:9048/documents | Remus | Remus | abuse_ch |
| 2026-08-20 22:05 | 106.54.41.209:22 | Unknown malware | Viper | Anonymous |
| 2026-08-20 22:05 | 43.134.42.247:8080 | Havoc | Havoc | Anonymous |
| 2026-08-20 22:05 | 129.211.11.213:8443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 21:54 | tlvg.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 21:45 | isl4eo0i.echo--free.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 21:42 | echo--free.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 21:28 | seat-aviation.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-20 21:05 | 80.190.77.86:2004 | AsyncRAT | asyncrat | Anonymous |
| 2026-08-20 21:05 | 82.39.109.102:8090 | DCRat | dcrat | Anonymous |
| 2026-08-20 21:00 | https://ksr-racingparts.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 20:58 | v19k5zdn.cogniclyr.com | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-20 20:57 | cogniclyr.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 20:30 | https://www.accademiadeiromani.it/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 20:23 | iniziativadalasalps.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:5003 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 118.25.37.47:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:46 | 95.133.229.173:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 95.164.123.132:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:46 | 91.92.243.36:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 5.230.201.54:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 5.230.201.54:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 46.246.84.10:2703 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 19:45 | 45.141.215.40:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:45 | 31.59.137.166:56003 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:45 | 217.60.195.196:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:45 | 217.60.195.196:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:45 | 217.217.97.125:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:45 | i1i374tc.echo-fre.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 19:44 | 193.161.193.99:36731 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 19:44 | 172.86.113.226:7443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-08-20 19:43 | 159.203.69.210:4500 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 19:43 | 147.124.221.0:62020 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:41 | echo-fre.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 19:33 | scuolatao.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 19:33 | 39.105.174.162:48238 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 103.40.14.232:51923 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 154.36.158.127:18890 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 110.41.2.64:55558 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 47.238.112.8:50888 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 45.145.228.25:8889 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:31 | 62.60.227.108:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 89.124.124.62:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 193.24.211.108:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 31.76.87.103:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 212.43.156.248:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:30 | zlhmp377.burn-burnblend.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-20 19:29 | 38.190.225.79:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 91.92.241.19:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 87.121.217.100:4343 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.247.189.92:27821 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.43.14.52:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.119.98.107:33223 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.119.98.153:33223 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.119.98.162:33223 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.130.146.22:50050 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.111.143.242:2025 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 104.36.229.142:58003 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 83.106.88.18:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.112.194.41:4784 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 125.86.26.79:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.111.134.122:4040 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 98.142.250.238:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 94.26.68.54:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 185.44.64.196:4777 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.94.9.166:2232 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 80.97.160.224:2027 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 154.91.180.11:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 194.59.31.36:8727 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:28 | burn-burnblend.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 19:26 | 85.11.167.198:57773 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 93.95.229.190:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 209.99.191.90:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 169.58.52.31:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 172.245.195.202:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.237.24.240:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.156.119.90:31338 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.154.43.213:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 2.27.62.226:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 46.8.101.202:61337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 49.232.170.10:29180 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 78.17.212.169:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.237.24.24:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 185.158.112.103:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 104.239.66.7:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 45.140.14.97:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 114.55.105.65:65229 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 182.255.44.231:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 18.136.148.19:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 23.94.252.82:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 69.48.228.147:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 169.58.5.199:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 103.183.74.235:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 156.225.21.226:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 182.255.91.104:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 91.92.42.238:37773 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 89.125.209.103:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 163.172.45.158:6789 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 144.172.102.147:39182 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 46.8.228.101:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 185.18.222.97:31866 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:24 | 45.61.180.161:56001 | PureRAT | PureHVNC PureRAT ResolverRAT | whoamix302 |
| 2026-08-20 19:24 | 104.249.10.86:56003 | PureRAT | PureHVNC PureRAT ResolverRAT | whoamix302 |
| 2026-08-20 19:23 | 45.154.98.38:8808 | AsyncRAT | asyncrat | whoamix302 |
| 2026-08-20 19:23 | 216.250.252.108:6680 | AsyncRAT | asyncrat | whoamix302 |
| 2026-08-20 19:13 | apartments-review261634860.sbs | Unknown malware | ClickFix compromised | Anonymous |
| 2026-08-20 19:13 | osuna.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 19:13 | dbagroup.cl | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 19:05 | 129.211.11.213:8888 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:05 | 129.211.11.213:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:05 | 124.221.47.107:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:05 | 124.221.47.107:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:03 | fdl-int.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:50 | http://cleasion.click:8202/reviews | Remus | Remus | abuse_ch |
| 2026-08-20 18:50 | 31.97.119.76:8202 | Remus | RemusStealer | abuse_ch |
| 2026-08-20 18:49 | zto37lic.blenzador.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-20 18:48 | blenzador.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 18:45 | https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=YmbK | Vidar | Vidar | abuse_ch |
| 2026-08-20 18:45 | https://62.238.46.160 | Vidar | Vidar | abuse_ch |
| 2026-08-20 18:43 | aiuti.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:43 | longhibau.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:40 | http://zakuiru.shop:9048/exports | Remus | Remus | abuse_ch |
| 2026-08-20 18:40 | http://vexdico.shop:8539/messages | Remus | Remus | abuse_ch |
| 2026-08-20 18:40 | http://palaera.click:7242/contacts | Remus | Remus | abuse_ch |
| 2026-08-20 18:40 | http://kupzovo.shop:7567/folders | Remus | Remus | abuse_ch |
| 2026-08-20 18:33 | pomarus.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:33 | medstar.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:32 | ksr-racingparts.com | IClickFix | ClickFix fake-plugin | varysz |
| 2026-08-20 18:13 | yourcapital.co.za | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | zeilberger-hartl.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.saema.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.salam-med.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.stengel-immobilienservice.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.tecnomecc.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.the-speech-house.co.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.thejokedealers.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.weddart.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | yduocdanang.edu.vn | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.kapowschool.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.karl-koenig-schule.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.luke4meridian.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.luracast.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.magicpropertyleads.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.nexuspublishing.co.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.poemsaboutmydeath.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.polsteraktuell.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.ckig-energy.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.completehomeopathy.co.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.crawfordvillage.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.dcreport.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.duepiani.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.echelog.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.eli.org.il | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.executivehairadditions.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.glispazzacamino.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.heartlinesliterarymagazine.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.iac-md.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.imec.africa | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | upstate.press | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | usclaimssolutions.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | vaclavklema.cz | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | vfr-kesselstadt.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | wisedrywall.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | writingjobspot.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.accademiadeiromani.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.accessladdersuk.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.azazel.pl | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.bethelveterinary.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.bookatl.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.build.4yourinfo.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.caffechirico.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | nepajunkremoval.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | novopren.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | nuba.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | peopletraq.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | physiciancareerplanning.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | preprod.eglisealbi.fr | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | selflove.hayaalkhalifa.co | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | surgeortho.co.za | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | taiwanmcm.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | tecnifarch.multisite.tecnifar.neev.tech | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | thetabchurch.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | unicharmpet.co.id | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | isaincucina.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | jennasrainbow.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | judahcompany.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | lalla-essaouira.marocboutons.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | loinc.org.tw | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | louwalkercenter.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | mandala-net.bestmarketing.website | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | marketgrandrapids.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | meeresbrandung.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | metroceramics.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | milmurales.cl | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | moreliferecoverycenter.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | mycomeal.sec.ventures | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | mysite.web3namibia.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | comedyconnection.net | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | confidence.itecnifar.pt | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | cortinatgesesteba.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | cutaxyl.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | demo.fcuece.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | development.icgruppen.se | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | doc-hino.onelink-iot.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | engratitud.com.izi.xjw.temporary.site | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | expresskasse.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | fcuaa.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | fondazionetriulza.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | icdcs2023.icdcs.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | iffd.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | academia.imoney.com.do | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | al-marri.partners | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | altamareaseatours.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | azchristianschools.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | baekho.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | campaign.parquet.co.il | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | catharinelumby.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | fundacioanaribot.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | 1to1meet.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | selloranges.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | kancelarijaristovic.rs | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | remarkabletech.co.nz | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | premiegarage.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | powerpluspro.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | parquet.co.il | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | eye-com.net | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | steampunksalpha.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:05 | 124.221.47.107:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:05 | 124.221.47.107:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:05 | 118.25.37.47:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:05 | 118.25.37.47:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:03 | cruiserandco.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:03 | restaurantsawadika.ca | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:03 | nadiaspeaks.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 17:42 | a8ps09r7.easybatteryfixed.us | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 17:41 | easybatteryfixed.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 17:30 | https://psicopress.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 17:26 | blog.myfit.ai | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:26 | blog.unikas.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:26 | binaprogram.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:23 | adfox.ai | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:22 | amb-aero.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:05 | 103.185.249.199:8082 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 17:05 | 118.25.37.47:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 17:05 | 8.156.69.245:8084 | VShell | Vshell | Anonymous |
| 2026-08-20 17:05 | 106.54.41.209:10001 | Unknown malware | Viper | Anonymous |
| 2026-08-20 17:05 | 106.54.41.209:8080 | Unknown malware | Viper | Anonymous |
| 2026-08-20 16:53 | implexions.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 16:53 | first-point.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 16:47 | 95.164.123.132:53105 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 95.164.123.132:56545 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 95.164.123.132:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.92.47.94:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.92.47.94:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.124.98.25:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.124.98.25:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:46 | 45.141.215.40:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:46 | 217.217.97.125:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:45 | 213.152.186.188:32605 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:45 | 213.152.186.188:32635 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:44 | 192.109.139.69:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:44 | 192.109.139.69:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:43 | 104.168.70.163:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:34 | kestrelgable.top | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:30 | vdyhrgylv.bio--booster.com | ClearFake | ClearFake win-0xa770 Windows | Anonymous |
| 2026-08-20 16:30 | sedgeoriel.co | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:29 | https://sedgeoriel.co/version/secure-json.js | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:15 | 156.234.7.46:443 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-20 16:14 | boepk30823.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-20 16:08 | 207.56.137.45:9245 | HypeAgent | HypeAgent | abuse_ch |
| 2026-08-20 16:08 | hype.activeworkshops.com | HypeAgent | HypeAgent | abuse_ch |
| 2026-08-20 16:07 | https://hype.activeworkshops.com:9245/hype/ws | HypeAgent | HypeAgent | abuse_ch |
| 2026-08-20 16:07 | copperreliquary.info | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:06 | https://copperreliquary.info/version/secure-json.js | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:05 | 106.54.41.209:21119 | Unknown malware | Viper | Anonymous |
| 2026-08-20 16:05 | 178.156.181.26:7443 | Unknown malware | Mythic | Anonymous |
| 2026-08-20 16:02 | paton-welding.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 15:56 | 41csh0wo.en-usa-sugarmute.us | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |