ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.

663

IOCs shared (past 24 hours)

VShell

Most seen malware family (past 24 hours)

1'767'437

IOCs in corpus

Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

ioc:ms-debug-services.com ( run)
malware:CobaltStrike ( run)
tag:TA505 ( run)
threat_type:cc_skimming ( run)
uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)	IOC	Malware	Tags	Reporter
2026-09-12 04:09	cdn-rcs-cloud.beer	ClearFake	ClearFake ClickFix ErrTraffic etherhiding	Anonymous
2026-09-11 05:34	egyoast.cloud	ACR Stealer	ACRStealer	abuse_ch
2026-09-10 10:40	https://cloud-flare-authenticator.click	Stealc	Stealc	abuse_ch
2026-09-08 05:44	loveaibae.cloud	Unknown Loader	etherhiding	varysz
2026-09-02 23:13	https://raw.githubusercontent.com/frantario/cloud/refs/heads/main/situated	ClearFake	ClearFake	threatcat_ch
2026-09-02 20:53	stg-hiktool-hkstaging.kinsta.cloud	IClickFix	ClickFix ErrTraffic LENAI	skocherhan
2026-08-27 11:45	https://cloud.calltop.com.br/apps/web/linux.bin	XMRIG	cryptomining CVE-2026-60004 Gitea Linuxsys monero xmrig	d351d3r
2026-08-26 12:52	https://idealvgtrens.com/cloud/x/6157/	Lumma Stealer	credential-phishing Fake-Captcha google-sites-lure m365	Sir_XX
2026-08-26 12:52	https://idealvgtrens.com/cloud/x/6157/server.php	Lumma Stealer	credential-phishing Fake-Captcha google-sites-lure m365	Sir_XX
2026-08-24 07:51	stg-thinkoralimplantsandperiodon-thinkoralstg.kinsta.cloud	IClickFix	ClearFake ClickFix	skocherhan
2026-08-24 07:51	stg-batrice-blwstaging.kinsta.cloud	IClickFix	ClearFake ClickFix	skocherhan
2026-08-18 07:27	testedlife.cloud	Unknown Loader	etherhiding	varysz
2026-08-18 07:17	gpsite.cloud	Unknown Loader	etherhiding	varysz
2026-08-18 07:17	growzen.cloud	Unknown Loader	etherhiding	varysz
2026-08-14 08:57	maps-i.cloud	IClickFix	ClickFix etherhiding gated	varysz
2026-08-13 05:53	https://cloud-flare-authenticator.link/	Stealc	c2 Loader PG Stealc stealer	Bitsight
2026-08-12 13:05	cloud-flare-authenticator.link	Stealc	Stealc	abuse_ch
2026-08-12 13:05	cloud-flare-authenticator.click	Stealc	Stealc	abuse_ch
2026-08-06 13:20	http://58.218.215.67:443/cloud-site/header-and-footer/shopping-cart.png	Cobalt Strike	CobaltStrike	abuse_ch
2026-08-06 13:20	http://113.113.100.46:443/cloud-site/header-and-footer/shopping-cart.png	Cobalt Strike	CobaltStrike	abuse_ch
2026-07-30 07:01	anakatok.cloud	IClickFix	Base c2 ClickFix etherhiding	varysz
2026-07-27 15:54	teaspor.cloud	Remus	Remus	Myrtus0x0
2026-07-27 15:54	exuviai.cloud	Remus	Remus	Myrtus0x0
2026-07-26 20:18	stg-techsummit-tsstaging.kinsta.cloud	ClearFake	ClearFake ClickFix	skocherhan
2026-07-26 20:18	mitravel.kinsta.cloud	ClearFake	ClearFake ClickFix	skocherhan
2026-07-26 20:18	mansablive.kinsta.cloud	ClearFake	ClearFake ClickFix	skocherhan
2026-07-23 15:46	cloud-svc.site	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-07-23 08:29	cloud-pic.info	TonRAT		Anonymous
2026-07-19 16:38	https://recaptcha.boit.cloud/recaptcha-verify	Unknown malware	ClickFix	Anonymous
2026-07-19 07:37	https://alababababa.cloud/cVGvQio6.txt	Unknown malware	ClickFix	Anonymous
2026-07-18 17:33	nykaa.cloud	Unknown malware	ClickFix	ClickFixer
2026-07-18 13:36	cloud-scn.info	Unknown Loader		Anonymous
2026-07-16 12:07	https://nykaa.cloud/?__cf_chl_f_tk=s9E_M0.0thAbE5QhoOfMRMfP_WCBEvi9TNh8W2CdnPE-1783412894-1.0.1.1-pWen9T.IbakHP2Za25DiFM_FCjcXPWiFxTygAHHwcA4	Unknown malware	ClickFix	CarsonWilliams
2026-07-12 19:11	validateinfo.cloud	Unknown Loader		Anonymous
2026-07-10 11:00	ohnymfxm.btyek.cloud	ClearFake	ClearFake win-0x4679 Windows	Anonymous
2026-07-10 10:17	huzlrwhe.btyek.cloud	ClearFake	ClearFake win-0x4679 Windows	Anonymous
2026-07-10 10:03	vacnkjqi.btyek.cloud	ClearFake	ClearFake win-0x4679 Windows	Anonymous
2026-07-10 03:52	cmdzspvk.btyek.cloud	ClearFake	ClearFake win-0x4679 Windows	Anonymous
2026-07-06 08:28	photohotels-visit.cloud	Unknown Loader		Anonymous
2026-07-04 07:50	frfjuzh.btyek.cloud	ClearFake	ClearFake win-0x4679 Windows	Anonymous
2026-06-30 04:50	cloud.api-middle-connect.com	magecart		Localhost123
2026-06-29 16:28	cloud-atlas.digital	ClearFake	ClearFake ClickFix etherhiding	Anonymous
2026-06-29 16:28	cloud-forge.digital	ClearFake	ClearFake ClickFix etherhiding	Anonymous
2026-06-29 16:28	cloud-sphere.digital	ClearFake	ClearFake ClickFix etherhiding	Anonymous
2026-06-29 16:28	cloud-meridian.digital	ClearFake	ClearFake ClickFix etherhiding	Anonymous
2026-06-29 16:28	cloud-orbit.digital	ClearFake	ClearFake ClickFix etherhiding	Anonymous
2026-06-29 16:27	cloud-lattice.digital	ClearFake	ClearFake ClickFix etherhiding	Anonymous
2026-06-29 16:27	cloud-beacon.digital	ClearFake	ClearFake ClickFix etherhiding	Anonymous
2026-06-29 16:01	cloud.api-middle-connect.com	ClearFake	ClearFake ClickFix etherhiding EtherHidingMagecart	Anonymous
2026-06-29 13:39	cloud-save-image.sbs	ClearFake	ClearFake ClickFix ErrTraffic etherhiding	Anonymous
2026-06-29 13:39	verification-cdn-cloud.beer	ClearFake	ClearFake ClickFix ErrTraffic etherhiding	Anonymous
2026-06-29 13:38	anlytic-js-cloud.beer	ClearFake	ClearFake ClickFix ErrTraffic etherhiding	Anonymous
2026-06-29 07:24	https://rpc-cloud.beer/api/	ClearFake	ClearFake ClickFix etherhiding Polygon stealer	Anonymous
2026-06-23 09:16	photo-drivedownload.cloud	Unknown Loader		Anonymous
2026-06-22 11:41	https://rpc-cloud.beer	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-22 11:41	https://istile-c-cloud.beer	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-22 11:41	https://wldsc-api-cloud.click	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-22 11:41	https://cloud-safe.click	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-22 11:41	https://img-cdn-cloud.click	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-22 11:41	https://cloud-safe.cfd/	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-22 11:41	https://img-cdn-cloud.cfd/	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-22 11:41	wldsc-api-cloud.click	Unknown malware	dead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS	Anonymous
2026-06-17 11:31	photo-drive-look.cloud	Unknown Loader		Anonymous
2026-06-11 16:42	www.sharingfile.cloud	Unknown malware		Anonymous
2026-06-08 09:45	hotelsphotosite.cloud	Unknown malware		Anonymous
2026-06-08 09:45	photohotelcheck.cloud	Unknown malware		Anonymous
2026-06-04 13:03	cloud-flare-authenticator.link	SectopRAT	ClickFix FakeCloudflare multi-os opendir SectopRAT	Lenny3BO
2026-06-04 13:03	https://cloud-flare-authenticator.link/verified.ps1	SectopRAT	ClickFix FakeCloudflare multi-os opendir SectopRAT	Lenny3BO
2026-06-04 08:17	cloud.white-monster.xyz	Unknown malware		abuse_ch
2026-05-28 14:40	verify-auth-cloud.com	Unknown malware	antibot botd-gated fingerprintjs obfuscatorio phishing rrweb	Lenny_3BO
2026-05-28 14:40	https://verify-auth-cloud.com/assets/index.js	Unknown malware	antibot botd-gated fingerprintjs obfuscatorio phishing rrweb	Lenny_3BO
2026-05-28 14:40	https://verify-auth-cloud.com/api/config	Unknown malware	antibot botd-gated fingerprintjs obfuscatorio phishing rrweb	Lenny_3BO
2026-05-28 14:40	https://verify-auth-cloud.com/api/log	Unknown malware	antibot botd-gated fingerprintjs obfuscatorio phishing rrweb	Lenny_3BO
2026-05-26 23:37	z9sb13jt.cloud-beacon.digital	ClearFake	ClearFake	Anonymous
2026-05-26 23:36	33xmfjam.cloud-beacon.digital	ClearFake	ClearFake	threatcat_ch
2026-05-26 11:34	9awu4igb.cloud-lattice.digital	ClearFake	ClearFake	Anonymous
2026-05-26 11:33	b4syunwp.cloud-lattice.digital	ClearFake	ClearFake	threatcat_ch
2026-05-24 18:35	hqcmiiiu.cloud-orbit.digital	ClearFake	ClearFake	Anonymous
2026-05-24 18:33	hfy48lay.cloud-orbit.digital	ClearFake	ClearFake	threatcat_ch
2026-05-24 18:33	cloud-orbit.digital	ClearFake	24May2026 ClearFake Commandline macOS	Gi7w0rm
2026-05-23 14:56	rpc-cloud.beer	Vidar	ClickFix ErrTraffic Vidar	varysz
2026-05-23 14:54	istile-c-cloud.beer	Vidar	ClickFix ErrTraffic Vidar	varysz
2026-05-23 14:54	img-cdn-cloud.cfd	Vidar	ClickFix ErrTraffic Vidar	varysz
2026-05-23 14:54	img-cdn-cloud.click	Vidar	ClickFix ErrTraffic Vidar	varysz
2026-05-23 08:58	cloud-safe.cfd	Vidar	ClickFix ErrTraffic Vidar	varysz
2026-05-23 08:58	cloud-safe.click	Vidar	ClickFix ErrTraffic Vidar	varysz
2026-05-21 19:15	cloud-sync-engine.christmas	ClearFake	ClearFake	threatcat_ch
2026-05-21 18:05	0frduisp.cloud-meridian.digital	ClearFake	ClearFake	Anonymous
2026-05-21 18:04	r1iugua4.cloud-meridian.digital	ClearFake	ClearFake	threatcat_ch
2026-05-21 15:13	anlytic-js-cloud.beer	Unknown malware	ClickFix	threatcat_ch
2026-05-20 15:39	https://recaptcha.boit.cloud/	Unknown malware	ClickFix	CarsonWilliams
2026-05-19 05:16	cloud.integritybusinessolutions.com	Unknown malware	borland-vcl merlin proxydll THEMIDA	Lenny_3BO
2026-05-17 21:02	tiv2dcd7.cloud-sphere.digital	ClearFake	ClearFake	threatcat_ch
2026-05-17 21:02	cloud-sphere.digital	ClearFake	17May2026 ClearFake Commandline macOS	Gi7w0rm
2026-05-17 17:03	aimgrub2-cloud-sphere-get.garden	ClearFake	ClearFake	threatcat_ch
2026-05-17 08:52	2b7f1jfa.cloud-forge.digital	ClearFake	ClearFake	Anonymous
2026-05-17 08:51	u9n82l2u.cloud-forge.digital	ClearFake	ClearFake	threatcat_ch
2026-05-17 08:51	cloud-forge.digital	ClearFake	17May2026 ClearFake Commandline macOS	Gi7w0rm
2026-05-16 20:50	wwk6os4i.cloud-atlas.digital	ClearFake	ClearFake	Anonymous
2026-05-16 20:49	h930qz07.cloud-atlas.digital	ClearFake	ClearFake	threatcat_ch
2026-05-16 08:12	cloud-infrastructure.garden	ClearFake	16May2026 ClearFake Commandline Windows	Gi7w0rm
2026-05-15 05:13	cloud-sync.courses	ClearFake	ClearFake	threatcat_ch
2026-05-14 12:33	https://vaci-cloud.b-cdn.net/Sound.zip	Unknown malware	ClickFix novii Python-embed	Lenny_3BO
2026-05-14 09:52	cloud-infrastructure-management-platform.wiki	ClearFake	ClearFake	threatcat_ch
2026-05-12 14:49	api.masscan.cloud	Unknown malware		johannes
2026-05-12 08:24	digital-node-cloud-ops-manual.wiki	ClearFake	12May2026 ClearFake Commandline Windows	Gi7w0rm
2026-05-12 02:29	global-cloud-infra-logic-manual.wiki	ClearFake	ClearFake	threatcat_ch
2026-05-11 23:11	cloud-stack-run-base.co	ClearFake	ClearFake	threatcat_ch
2026-05-11 22:03	global-cloud-infra-logic.co	ClearFake	11May2026 ClearFake Commandline Windows	Gi7w0rm
2026-05-10 18:56	prediksitaysen88.cloud	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-05-10 04:06	cloud.cloudflowops.co	ClearFake	ClearFake	Anonymous
2026-05-09 18:06	cloud.cloudproxyserv.pics	ClearFake	9May2026 ClearFake Commandline Windows	Gi7w0rm
2026-05-08 07:04	https://cloud-view.org/adobe/Reader_en_install.exe	Unknown malware	Fake Adobe	HuntYethHounds
2026-05-08 07:04	https://cloud-view.org/adobe/	Unknown malware	Fake Adobe	HuntYethHounds
2026-05-08 07:04	cloud-view.org	Unknown malware	Fake Adobe	HuntYethHounds
2026-05-05 06:18	https://iyrixstack.cloud	Unknown malware	ClickFix	HuntYethHounds
2026-05-05 06:17	iyrixstack.cloud	Unknown malware	ClickFix	HuntYethHounds
2026-05-05 06:01	https://growthmagnet.cloud	Unknown malware	ClickFix	HuntYethHounds
2026-05-05 06:01	growthmagnet.cloud	Unknown malware	ClickFix	HuntYethHounds
2026-05-03 07:32	https://weppa.cloud/	Unknown malware	ClickFix	CarsonWilliams
2026-05-02 06:32	weppa.cloud	IClickFix	ClickFix compromised etherhiding Polygon Vidar	varysz
2026-05-02 05:25	cloud-kaps.sarahkapsreit.work	ClearFake	1May2026 ClearFake Commandline Windows	Gi7w0rm
2026-05-02 05:24	cr-cloud.crinkdimit.work	ClearFake	1May2026 ClearFake Commandline Windows	Gi7w0rm
2026-05-01 07:14	zero.masscan.cloud	Shai-Hulud		johannes
2026-04-30 17:43	vaci-cloud.b-cdn.net	Unknown malware	ClickFix fingerfix python-sideload	Lenny_3BO
2026-04-30 17:43	https://vaci-cloud.b-cdn.net/Python.zip	Unknown malware	ClickFix fingerfix python-sideload	Lenny_3BO
2026-04-27 06:06	rouge-4v.bexis-cloud.in.net	ClearFake	27April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-27 05:25	soft-2.bexis-cloud.in.net	ClearFake	27April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-27 01:11	iron-8.bexis-cloud.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-27 01:06	petit-mond-5.bexis-cloud.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-27 00:53	kalt-berg-7.bexis-cloud.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-27 00:41	dark-star-1.bexis-cloud.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-26 10:26	https://updatedata.us/cloud/Windows/invite.php	Unknown malware	Fake Microsoft Teams	HuntYethHounds
2026-04-25 14:39	igotnofriendsonlineorirl-imgonnakmslmao.skyhanni.cloud	Unknown malware	DoubleFantasy Gibberish LiteLLM payload teampcp telnyx	johannes
2026-04-22 08:32	https://ms.com-audio.cloud/files/	MaskGramStealer	ClickFix MaskGramStealer	abuse_ch
2026-04-22 07:50	ms.com-audio.cloud	Unknown malware	ClickFix	threatcat_ch
2026-04-22 07:16	https://vasijl-cloud.b-cdn.net/Peton.zip	ClearFake		Anonymous
2026-04-20 23:05	cloud.lurstanmailer.com	XWorm	XWorm	abuse_ch
2026-04-19 12:52	cloud-node6.de4xpamil.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-19 12:35	https://view-cloud.com/adobe/Reader_en_install.exe	Unknown malware	Fake Adobe Reader	HuntYethHounds
2026-04-19 12:34	https://view-cloud.com/adobe/	Unknown malware	Fake Adobe Reader	HuntYethHounds
2026-04-19 12:31	view-cloud.com	Unknown malware	Fake Adobe Reader	HuntYethHounds
2026-04-19 11:33	cloud-gate4.po8vtirel.in.net	ClearFake	ClearFake	Anonymous
2026-04-18 03:56	cloud-node6.dexpor1el.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-17 18:39	union.moosynomo.cloud	Unknown RAT	rmm simplehelp	abuse_ch
2026-04-14 19:56	trutal.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	vafil.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	vasom.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	truroncol002.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	stripanfincol.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	strisantez.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	stritez64.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	stritonpaz51.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	trevaz.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	tridensintal.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	trigem8.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	tritonriz.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	tritonvaz.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	trujanpunbil.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	sprudor.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	sprumanim.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	sprumannal.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	sprutentum.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	sprutil.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	staval45.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	stravinpanfar.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	stresonlingor.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:56	strilenmonvir75.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	propinmenpal.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	prudintum.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	pruwintanpaz.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	scregunvir.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	scroder.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	scrotentonriz.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	presar08.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	pribanhennal.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	prisonpaz.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	prisonrongor.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	plenonsandiz4.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	plenonzol4.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	plepal240.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	plolintar.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	grugoncinnal.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	grunonmanvel.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	grural.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	plaminpor.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 19:55	planal.contabilsmart.cloud	Astaroth	astaroth guildma	abuse_ch
2026-04-14 13:15	https://srv1057220.hstgr.cloud/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-14 12:02	research.cloud-ip.cc	Remcos	c2 domain RAT remcos triage	DonPasci
2026-04-14 11:32	https://stg-titanresearch-staging.kinsta.cloud/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-14 09:48	https://prediksitaysen88.cloud/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-14 04:29	gate6-box.cloud-storage-unit.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-14 04:24	svc5-cdn.cloud-storage-unit.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-14 04:18	vault4-io.cloud-storage-unit.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-14 04:13	api3-dir.cloud-storage-unit.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-14 04:07	node2-obj.cloud-storage-unit.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-14 04:02	file1-raw.cloud-storage-unit.in.net	ClearFake	ClearFake	Anonymous
2026-04-10 23:01	api2-cloud.8rivastyinfamy.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-06 19:24	cloud-draft.conceptmatrix.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-04 17:48	https://freshhomrecipe.cloud	Unknown malware	ClickFix finger	HuntYethHounds
2026-04-04 17:47	freshhomrecipe.cloud	Unknown malware	ClickFix finger	HuntYethHounds
2026-04-04 17:02	mesh-cloud.technofabric.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-04 07:07	models.litellm.cloud	Unknown malware	teampcp	TheRavenFile
2026-04-01 10:19	loud-cloud.brillwhistleb.in.net	ClearFake	ClearFake	Anonymous
2026-04-01 03:08	cloud-ring.digisphere.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-30 22:06	cloud-vault.nexushaven.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-29 22:54	point-cloud.topographictrace.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-27 14:50	https://cloud-verif.com	Unknown malware	ClickFix	HuntYethHounds
2026-03-27 14:49	cloud-verif.com	Unknown malware	ClickFix	HuntYethHounds
2026-03-25 22:13	https://docs-espaces-pros.cloud	Unknown malware	ClickFix	HuntYethHounds
2026-03-25 22:13	docs-espaces-pros.cloud	Unknown malware	ClickFix	HuntYethHounds
2026-03-22 12:08	https://istile-c-cloud.beer/api/css.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-22 12:07	istile-c-cloud.beer	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-21 13:34	https://drinknowadaysadssite.kinsta.cloud	Unknown malware	ClickFix WebDav	HuntYethHounds
2026-03-21 13:33	drinknowadaysadssite.kinsta.cloud	Unknown malware	ClickFix WebDav	HuntYethHounds
2026-03-20 10:32	https://rpc-cloud.beer/api/css.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-20 10:31	rpc-cloud.beer	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-18 20:03	cloud-w11-store.densa-materia.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-18 16:19	cloud-w12-store.vectorbase.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-18 03:40	cloud-w22-store.fluido-v.cfd	ClearFake	ClearFake	Anonymous
2026-03-17 23:22	cloud-w2-store.veloxfundo.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-17 21:34	https://www.portaildocs.cloud/onedrive	Unknown malware	ClickFix	HuntYethHounds
2026-03-17 21:33	https://www.portaildocs.cloud/dropbox	Unknown malware	ClickFix	HuntYethHounds
2026-03-17 21:33	portaildocs.cloud	Unknown malware	ClickFix	HuntYethHounds
2026-03-17 17:59	https://verification-cdn-cloud.beer/api/css.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-17 17:58	verification-cdn-cloud.beer	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-16 22:58	z9-cloud-v1.pietraforte.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-16 18:35	cloud-v5-store.plasmaviva.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-16 00:45	b1-cloud-store.terralibre.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-15 21:02	cloud-v10-store.petittravail.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-15 17:19	cloud-v2-store.petitreseauv.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-15 09:34	https://cloud-save-image.sbs/api/index.php	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-15 09:33	https://cloud-save-image.sbs/api/css.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-15 09:33	cloud-save-image.sbs	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-15 06:48	cloud-drive-v7.fortezzarossa.in.net	ClearFake	14March2026 ClearFake Commandline Windows	Gi7w0rm
2026-03-15 02:57	cloud-z1-store.petitniveaux.in.net	ClearFake	ClearFake	Anonymous
2026-03-14 17:06	cloud-drive-a1.vitasicura.in.net	ClearFake	ClearFake	Anonymous
2026-03-14 02:45	cloud-drive-x.bleusoleil.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-13 20:33	cloud-storage-b.fortezzablu.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-13 04:20	cloud-storage-5.vittoriastrada.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-11 11:37	wldsc-api-cloud.click	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-11 11:37	https://wldsc-api-cloud.click/api/index.php	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-03-07 17:38	9niang.cloud	Cobalt Strike	CobaltStrike	abuse_ch
2026-03-07 06:52	cloud-ker.horsesence.in.net	ClearFake	ClearFake	threatcat_ch
2026-03-06 05:49	separticle.cloud	Unknown malware	phishing tycoon	TheRavenFile
2026-03-04 08:47	https://verification-cloud.com/panel/login.php	Fickle Stealer	c2 fickle URLscan	juroots
2026-03-04 08:47	https://cloud-verificate.com/panel/login.php	Fickle Stealer	c2 fickle URLscan	juroots
2026-03-02 07:05	logspot.aktuel.cloud	StrelaStealer	StrelaStealer	threatcat_ch
2026-03-02 05:06	smartdriverfix.cloud	ClearFake	ClearFake	TheRavenFile
2026-03-02 05:06	webcamdrivers.cloud	ClearFake	ClearFake	TheRavenFile
2026-03-02 05:06	webcamwizard.cloud	ClearFake	ClearFake	TheRavenFile
2026-03-02 05:06	drivercams.cloud	ClearFake	ClearFake	TheRavenFile
2026-03-02 05:06	drive-release.cloud	ClearFake	ClearFake	TheRavenFile
2026-03-02 05:06	web-cam.cloud	ClearFake	ClearFake	TheRavenFile
2026-02-23 07:17	enor.cloud	IClickFix	ClickFix	TheRavenFile
2026-02-20 14:19	lingering-verify-cloud.pages.dev	IClickFix	ClickFix	TheRavenFile
2026-02-16 14:50	secure-cloud-link.bleuforet.coupons	ClearFake	ClearFake	threatcat_ch
2026-02-16 12:27	https://img-cdn-cloud.click/api/css.js	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-16 12:27	https://cloud-safe.click/api/css.js	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-16 07:01	cloud-m3.plum5parcel.coupons	ClearFake	ClearFake	threatcat_ch
2026-02-15 22:58	2.cloud-safe.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 22:57	https://2.cloud-safe.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 22:57	1.cloud-safe.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 22:57	https://1.cloud-safe.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 22:44	img-cdn-cloud.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 22:44	https://img-cdn-cloud.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 22:16	cloud-safe.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 22:16	https://cloud-safe.cfd	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 20:49	cloud-safe.click	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 20:48	https://cloud-safe.click	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 20:42	img-cdn-cloud.click	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 20:42	https://img-cdn-cloud.click	Unknown malware	ClickChain ClickFix ErrTraffic	HuntYethHounds
2026-02-15 20:27	cloud-st1.perk9parcel.coupons	ClearFake	ClearFake	threatcat_ch
2026-02-14 15:21	creators--cloud.com	IClickFix	ClickFix	TheRavenFile
2026-02-14 15:21	tentori.cloud	IClickFix	ClickFix	TheRavenFile
2026-02-13 16:11	www.jellyfishsaigon.cloud	Formbook	c2 Formbook	juroots
2026-02-13 16:11	http://www.jellyfishsaigon.cloud/gn29/	Formbook	c2 Formbook	juroots
2026-02-13 07:28	7zip.cloud	Unknown malware	upStage	juroots
2026-02-12 09:25	cloud-file-explorer.netlify.app	IClickFix	ClickFix	TheRavenFile
2026-02-12 09:19	lingering-verify-cloud-86ee.pages.dev	IClickFix	ClickFix	TheRavenFile
2026-02-11 15:01	test.my-video-live.cloud	IClickFix	ClickFix	TheRavenFile
2026-02-11 15:01	steam-cloud.pro	IClickFix	ClickFix	TheRavenFile
2026-02-07 07:25	folder-cloud-processor-core.in.net	ClearFake	ClearFake stage2 Wildcard Windows	Gi7w0rm
2026-02-06 11:27	cloud.aaddigitalstrategies.com	FAKEUPDATES	SocGholish	monitorsg
2026-01-30 13:00	http://cloud.uniprolaptimer.com:5042/	Eye Pyramid		ishivtripathi
2026-01-30 09:35	sdfikguoriqoir.cloud	IClickFix	distribution IClickFix	crep1x
2026-01-28 12:53	static.cos-tencent.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-01-27 16:05	norbert-dev1.cydardev.cloud	Havoc	AMAZON-02 AS16509 c2 censys Havoc	DonPasci
2026-01-27 13:02	https://cdn.jsdelivr.net/gh/relight-73-unsigned/tk-hz-ctrl/22-api-cloud	ClearFake	ClearFake	threatcat_ch
2026-01-24 16:41	cloud.sigmamarketing.eu	Unknown Stealer	ClickFix validin	DaveLikesMalwre
2026-01-17 22:19	deterministic-physics.api-cloud-dispatch-core.in.net	ClearFake	ClearFake	threatcat_ch
2026-01-16 13:07	https://jlpg.slgame.cloud/	Unknown malware	FakeGooglePlayStore	juroots
2026-01-16 11:32	kidlipsy.cloud	Mirai	c2 Mirai	juroots
2026-01-16 11:31	www.tglobal.cloud	Formbook	c2 Formbook	juroots
2026-01-16 11:31	www.convertfusionpro.cloud	Formbook	c2 Formbook	juroots
2026-01-16 11:31	http://www.tglobal.cloud/fz46/	Formbook	c2 Formbook	juroots
2026-01-16 11:31	http://www.convertfusionpro.cloud/n43s/	Formbook	c2 Formbook	juroots
2026-01-13 17:06	dvdev.cloud	Unknown Stealer	ClickFix validin	DaveLikesMalwre
2026-01-07 05:32	https://cdn.jsdelivr.net/gh/gstatic-kh5q7ekh/cdn-114-cloud/ach	ClearFake	ClearFake	threatcat_ch
2026-01-06 16:03	lavender-wallaby-90664.zap.cloud	Bashlite	AS206996 c2 censys Gafgyt open-dir ZAP-HOSTING	DonPasci
2026-01-06 08:22	sagent.zabbixcloud.cloud	SparkRAT	c2 domain SparkRAT VirusTotal	DonPasci
2026-01-05 19:20	xid.zabbixcloud.cloud	VShell	c2 domain triage Vshell	DonPasci
2026-01-05 14:56	https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-113-cloud/eos24	ClearFake	ClearFake	threatcat_ch
2026-01-05 14:44	https://github.com/gstatic-kh5q6ekh/cdn-113-cloud/blob/main/eos24)	ClearFake	ClearFake	threatcat_ch
2026-01-05 09:15	https://net-acceleration-sg.cloud/	SpyNote	c2 Spynote URLscan	juroots
2026-01-05 09:15	http://www.net-acceleration-sg.cloud/	SpyNote	c2 Spynote URLscan	juroots
2026-01-05 07:47	https://github.com/gstatic-kh5q6ekh/cdn-113-cloud/releases/download/static/id-owf836aos	ClearFake	ClearFake	threatcat_ch
2026-01-04 05:00	https://steam-cloud.pro/murluwldeeqekoapxr	Unknown malware	ClickFix	CarsonWilliams
2025-12-28 15:56	bot.johenlg.cloud	Mirai	28December2025 iocbottest	Gi7w0rm
2025-12-25 09:13	cloud.entert2inru8.ru	ClearFake	ClearFake	threatcat_ch
2025-12-23 13:15	cloud.skysh1eld.ru	ClearFake	ClearFake	threatcat_ch
2025-12-21 13:44	cloud.f1atte5tudies.ru	ClearFake	ClearFake	threatcat_ch
2025-12-20 12:37	cloud.nightf0rm.ru	ClearFake	ClearFake	threatcat_ch
2025-12-18 07:01	rtrdedge1.samsungcdn.cloud	Mirai	kimwolf	abuse_ch
2025-12-15 18:38	cloud.mintl1ne.ru	ClearFake	ClearFake	threatcat_ch
2025-12-15 08:32	quantizedcontroller.cloud-ip.cc	Cobalt Strike	c2 CobaltStrike	juroots
2025-12-14 05:47	cloud.stormf0x.ru	ClearFake	ClearFake	threatcat_ch
2025-12-10 09:08	cloud.na5optwe7ty.ru	ClearFake	ClearFake	threatcat_ch
2025-12-08 19:00	srv1133832.hstgr.cloud	Unknown Stealer	censys ClickFix	DaveLikesMalwre
2025-12-08 19:00	rl-soc-siem.mori.cloud	Unknown Stealer	censys ClickFix	DaveLikesMalwre
2025-12-08 07:53	api.gigaversecentiliumai.cloud	Unknown malware	ClickFix	ninjacatcher
2025-12-07 20:34	theforestrecovery.kinsta.cloud	Unknown Stealer	ClickFix	DaveLikesMalwre
2025-12-07 20:34	nova-mogucnost.lunatik.cloud	Unknown Stealer	ClickFix	DaveLikesMalwre
2025-12-07 20:34	mail.enor.cloud	Unknown Stealer	ClickFix	DaveLikesMalwre
2025-12-05 04:47	cloud.softcrest.ru	ClearFake	ClearFake	threatcat_ch
2025-12-05 02:58	cloud.silverh1ll.ru	ClearFake	ClearFake	threatcat_ch
2025-12-04 11:41	https://www.test.my-video-live.cloud/1	Unknown malware	URLscan	juroots
2025-12-04 10:38	cloud.f1owreci7at.ru	ClearFake	ClearFake	threatcat_ch
2025-12-04 08:56	https://www.test.my-video-live.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-12-04 08:56	test.my-video-live.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-12-04 08:56	http://www.test.my-video-live.cloud/1	Unknown malware	ClickFix	HuntYethHounds
2025-12-03 18:57	cloud.deepvalley.ru	ClearFake	ClearFake	threatcat_ch
2025-12-03 07:14	archivosdwn.cloud	Metamorfo		Gi7w0rm
2025-12-03 07:14	cfdimex.cloud	Metamorfo		Gi7w0rm
2025-12-03 07:14	facturasm.cloud	Metamorfo		Gi7w0rm
2025-12-03 07:14	facturasmex.cloud	Metamorfo		Gi7w0rm
2025-12-02 21:17	cloud.a5pirbo0rda.ru	ClearFake	ClearFake	threatcat_ch
2025-12-01 07:08	cloud.dareck.it.com	Remcos	c2 remcos	juroots
2025-12-01 07:08	cloud.juzgadorama.it.com	Remcos	c2 remcos	juroots
2025-12-01 04:58	cloud.p0larday.ru	ClearFake	ClearFake	threatcat_ch
2025-11-30 08:11	https://lingering-verify-cloud.pages.dev/	Unknown malware	ClickFix	CarsonWilliams
2025-11-29 15:59	https://lingering-verify-cloud-86ee.pages.dev/	Unknown malware	ClickFix	CarsonWilliams
2025-11-28 07:43	ember-cloud.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.8u2a9.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.8y7o4.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.bvuf-2.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.cl0udmark.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.cloudkreis.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.comp0tsab3e.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.spyingte1ess.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.ve1vetc0ves.ru	ClearFake	ClearFake	500mk500
2025-11-28 07:43	cloud.windfiare.ru	ClearFake	ClearFake	500mk500
2025-11-28 06:04	cloud.comp0tsab3e.ru	ClearFake	ClearFake	threatcat_ch
2025-11-27 18:02	tentori.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-11-27 18:02	https://tentori.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-11-25 17:52	https://enor.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-11-25 17:51	enor.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-11-25 16:59	https://creators--cloud.com	Unknown malware	ClickFix	HuntYethHounds
2025-11-25 16:58	creators--cloud.com	Unknown malware	ClickFix	HuntYethHounds
2025-11-25 02:58	cloud.cl0udmark.ru	ClearFake	ClearFake	threatcat_ch
2025-11-22 17:16	betterbuy.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-11-22 17:16	https://betterbuy.cloud	Unknown malware	ClickFix	HuntYethHounds
2025-11-21 16:04	cloud.windfiare.ru	ClearFake	ClearFake	threatcat_ch
2025-11-19 21:47	cloud.ve1vetc0ves.ru	ClearFake	ClearFake	threatcat_ch
2025-11-18 00:27	cloud.spyingte1ess.ru	ClearFake	ClearFake	threatcat_ch
2025-11-13 12:49	cloud.netsolutionpoint.com	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-11-08 01:17	cloud.cloudkreis.ru	ClearFake	ClearFake	threatcat_ch
2025-11-03 07:34	https://cloud-verificator.com/panel/login.php	Unknown Stealer	c2 FrickleStealer URLscan	juroots
2025-11-02 16:00	www.srv1061577.hstgr.cloud	Hook	AS-HOSTINGER AS47583 c2 censys HookBot	DonPasci
2025-10-28 21:46	www.ytenode.cloud	Formbook	c2 Formbook	juroots
2025-10-28 21:46	www.eonesens.cloud	Formbook	c2 Formbook	juroots
2025-10-28 21:46	http://www.ytenode.cloud/zl28/	Formbook	c2 Formbook	juroots
2025-10-28 21:46	http://www.eonesens.cloud/zl28/	Formbook	c2 Formbook	juroots
2025-10-26 07:39	vps-2624.onecom-cloud.one	Mirai	Mirai	seckle
2025-10-23 20:02	office.othersepoxfrontier-win.cloud	Havoc	AS29802 c2 censys Havoc HVC-AS	DonPasci
2025-10-23 20:02	msfed.othersepoxfrontier-win.cloud	Havoc	AS29802 c2 censys Havoc HVC-AS	DonPasci
2025-10-23 20:02	id.othersepoxfrontier-win.cloud	Havoc	AS29802 c2 censys Havoc HVC-AS	DonPasci
2025-10-23 20:02	outlook.optumseragamaglas-ouns.cloud	Havoc	AS29802 c2 censys Havoc HVC-AS	DonPasci
2025-10-22 22:00	dotfoods.othersepoxfrontier-win.cloud	Havoc	AS29802 c2 censys HVC-AS	dyingbreeds_
2025-10-22 22:00	dotfoods.mellor-engineering.cloud	Havoc	AS29802 c2 censys HVC-AS	dyingbreeds_
2025-10-22 22:00	csp.mellor-engineering.cloud	Havoc	AS29802 c2 censys HVC-AS	dyingbreeds_
2025-10-22 22:00	loginii.optumseragamaglas-ouns.cloud	Havoc	AS29802 c2 censys HVC-AS	dyingbreeds_
2025-10-22 22:00	usa.optumseragamaglas-ouns.cloud	Havoc	AS29802 c2 censys HVC-AS	dyingbreeds_
2025-10-19 06:35	https://server11.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-10-17 10:27	http://cloudflare.passthrough.cloud/	Unknown malware	FakeCaptcha URLQuery	juroots
2025-10-16 16:17	cloud.8y7o4.ru	ClearFake	ClearFake	threatcat_ch
2025-10-16 12:58	cloud.8u2a9.ru	ClearFake	ClearFake	threatcat_ch
2025-10-16 11:08	cloud.bvuf-2.ru	ClearFake	ClearFake	threatcat_ch
2025-10-10 06:20	www.somissplentstaphs.cloud	Formbook	c2 Formbook	juroots
2025-10-10 06:20	www.lipopodlirotlitotic.cloud	Formbook	c2 Formbook	juroots
2025-10-10 06:20	www.galaxyjsc.cloud	Formbook	c2 Formbook	juroots
2025-10-10 06:20	www.dosaindriftydrummy.cloud	Formbook	c2 Formbook	juroots
2025-10-10 06:20	http://www.somissplentstaphs.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-10-10 06:20	http://www.lipopodlirotlitotic.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-10-10 06:20	http://www.galaxyjsc.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-10-10 06:19	http://www.dosaindriftydrummy.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-10-10 05:19	cloud.iloveanimals.shop	Unknown Stealer	infostealer stealit	burger
2025-10-03 14:22	www.gileplanner.cloud	Formbook	c2 Formbook	juroots
2025-10-03 14:21	http://www.gileplanner.cloud/sg36/	Formbook	c2 Formbook	juroots
2025-09-29 18:25	www.ixiam.cloud	Formbook	c2 Formbook	juroots
2025-09-29 18:24	http://www.ixiam.cloud/gw28/	Formbook	c2 Formbook	juroots
2025-09-29 16:31	sbufiles.cloud	Unknown malware		abuse_ch
2025-09-27 02:48	clearate.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-09-26 16:01	update.00m-i.cloud	Havoc	AS8075 c2 censys Havoc MICROSOFT-CORP-MSN-AS-BLOCK	DonPasci
2025-09-23 08:35	https://cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-09-18 13:39	https://server6.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-09-16 05:35	https://server13.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-09-16 05:35	https://server4.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-09-16 05:35	https://server10.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-09-10 08:15	www.uynta.cloud	Formbook	c2 Formbook	juroots
2025-09-10 08:15	www.tlantida-sh.cloud	Formbook	c2 Formbook	juroots
2025-09-10 08:15	http://www.uynta.cloud/ol06/	Formbook	c2 Formbook	juroots
2025-09-10 08:15	http://www.tlantida-sh.cloud/ol06/	Formbook	c2 Formbook	juroots
2025-09-09 16:49	cloud.amazoncdn.shop	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-09-09 04:00	srv649721.hstgr.cloud	Unknown malware	AS-HOSTINGER AS47583 c2 censys UNAM	dyingbreeds_
2025-09-08 12:18	https://server14.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-08-28 06:54	www.intechwizard.cloud	Formbook	c2 Formbook	juroots
2025-08-28 06:54	http://www.intechwizard.cloud/d26z/	Formbook	c2 Formbook	juroots
2025-08-26 08:16	https://nexus-cloud-360.com:1888/gateway/87ewrkt3.6uv9w	Rhadamanthys		burger
2025-08-26 04:00	cloud.xinzyun.cn	Cobalt Strike	AS401696 c2 censys COGNETCLOUD	dyingbreeds_
2025-08-24 16:49	dns.qqq911.dns-cloud.net	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-08-23 06:09	dragonshop.cloud	Unknown malware	fakeupdate	HuntYethHounds
2025-08-22 11:18	https://nexus-cloud-360.com:1888/gateway/3buhk023.sdphc	Rhadamanthys		burger
2025-08-22 05:45	https://nexus-cloud-360.com:1888/gateway/9xrretqm.e33ds	Rhadamanthys		burger
2025-08-22 05:45	https://nexus-cloud-360.com:1888/gateway/7yu2mndw.5ypfm	Rhadamanthys		burger
2025-08-22 05:45	nexus-cloud-360.com	Rhadamanthys		burger
2025-08-19 04:12	fixclomyfodp.cloud	ClearFake	ClearFake ClickFix	threatcat_ch
2025-08-18 02:48	cloud.defenderblt.com	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-08-16 15:41	http://www.ofvbufybsvirfg.cloud/eza8/	Formbook	c2 Formbook	juroots
2025-08-16 15:41	ofvbufybsvirfg.cloud	Formbook	c2 Formbook	juroots
2025-08-16 15:36	https://server3.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-08-16 15:36	https://server8.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-08-16 15:36	https://server9.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-08-15 22:15	www.hampseru.cloud	Formbook	c2 Formbook	juroots
2025-08-15 22:15	http://www.hampseru.cloud/ua09/	Formbook	c2 Formbook	juroots
2025-08-06 09:53	https://server15.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-08-05 12:01	static.nulltrace.cloud	Havoc	AMAZON-AES AS14618 c2 censys Havoc	DonPasci
2025-08-04 14:19	daskldalkdalskdktktk.cloud	ClearFake	ClearFake ClickFix	threatcat_ch
2025-08-04 14:19	zincheckyou.cloud	ClearFake	ClearFake ClickFix	threatcat_ch
2025-08-04 08:19	www.tokia.cloud	Formbook	c2 Formbook	juroots
2025-08-04 08:19	http://www.tokia.cloud/ko23/	Formbook	c2 Formbook	juroots
2025-08-01 13:42	https://server5.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-08-01 12:00	server44.mentality.cloud	Remcos	c2 domain RAT remcos triage	DonPasci
2025-07-31 05:40	https://server12.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-07-30 09:10	1.www.richinimpianti.cloud	Vidar	5%563 Vidar	abuse_ch
2025-07-30 09:10	https://1.www.richinimpianti.cloud	Vidar	5%563 Vidar	abuse_ch
2025-07-30 05:30	www.icobrokers.cloud	Formbook	c2 Formbook	juroots
2025-07-30 05:30	http://www.icobrokers.cloud/gw29/	Formbook	c2 Formbook	juroots
2025-07-29 15:10	https://o.1.richinimpianti.cloud	Vidar	5%563 Vidar	abuse_ch
2025-07-29 15:10	o.1.richinimpianti.cloud	Vidar	5%563 Vidar	abuse_ch
2025-07-27 21:35	udjnbvuw.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	uejsdnyer.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	urjvnisa6.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	uwksdnio.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	vne4jsk.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	ydhvdbie.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	yfdnvwik.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	yrvbhsjni.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	nrfusleio.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	qfcjvniwo.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	svnek94n.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	jhfneios.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	kefheub.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	kjsoiejrf.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	ksdjvieoa.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	ksvnieskv.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	mzcheuqa.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	ncewb8eo.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	nciwnkwe.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	ewvnewii.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:35	hdvuewvn.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:32	cxwivnwf.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:32	dceivkso.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:32	alfeinvceo.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:32	bvuewkc.cloud	Unknown malware		HuntYethHounds
2025-07-27 21:32	bvuwjksd.cloud	Unknown malware		HuntYethHounds
2025-07-27 16:52	https://server7.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-07-27 16:52	https://server16.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-07-26 12:49	cioud.nsebseshop.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-07-25 07:14	https://server2.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-07-25 07:14	https://server1.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-07-19 07:05	cloudflare.blazing-cloud.com	Unknown malware	ClickFix	HuntYethHounds
2025-07-16 22:49	ns3.nsebseshop.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-07-16 22:49	ns2.nsebseshop.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-07-16 22:49	ns1.nsebseshop.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-07-16 09:00	www.uestrasenda.cloud	Formbook	c2 Formbook	juroots
2025-07-16 09:00	http://www.uestrasenda.cloud/um09/	Formbook	c2 Formbook	juroots
2025-07-12 12:24	cloud.youroboter.com	Quasar RAT	c2 quasar	juroots
2025-07-02 06:08	www.ooyoo.cloud	Formbook	c2 Formbook	juroots
2025-07-02 06:08	www.inebreak.cloud	Formbook	c2 Formbook	juroots
2025-07-02 06:07	http://www.ooyoo.cloud/l36c/	Formbook	c2 Formbook	juroots
2025-07-02 06:07	http://www.inebreak.cloud/ms14/	Formbook	c2 Formbook	juroots
2025-06-26 13:19	mainstomp.cloud	TransferLoader	c2 TransferLoader	juroots
2025-06-26 12:29	http://cloud-flaer-verif.com/log-in	KongTuke	Kongtuke	monitorsg
2025-06-26 12:29	cloud-flaer-verif.com	KongTuke	Kongtuke	monitorsg
2025-06-23 06:46	https://myinetverif.cloud/F5L.dof	Lumma Stealer	LummaStealer	Chamindu_X
2025-06-18 15:50	http://knees.nidnaver.cloud/free0510/view.php	Kimsuky	APT kimsuky	abuse_ch
2025-06-18 15:50	http://toes.nidnaver.cloud/free0510/dn.php	Kimsuky	APT kimsuky	abuse_ch
2025-06-16 19:56	www.risttechfled.cloud	Formbook	c2 Formbook	juroots
2025-06-16 19:56	http://www.risttechfled.cloud/o09a/	Formbook	c2 Formbook	juroots
2025-06-13 11:24	quanthic.cloud	Unknown malware	ClickFix	juroots
2025-06-10 22:33	qqmusic.cloud	Lumma Stealer		JhonferC
2025-06-10 04:58	cloud.optimumcs.org	Cobalt Strike	AS14956 c2 censys ROUTERHOSTING	dyingbreeds_
2025-06-09 08:50	http://server9.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-06-07 19:37	us-la-cn2-1.natfrp.cloud	NjRAT	7June2025 iocbottest	Gi7w0rm
2025-06-07 08:50	cf-session.cloud	Unknown malware	ClickFix	juroots
2025-06-07 08:49	www.od19.cloud	Formbook	c2 Formbook	juroots
2025-06-07 08:49	www.hietbilamdep.cloud	Formbook	c2 Formbook	juroots
2025-06-07 08:48	http://www.od19.cloud/hi07/	Formbook	c2 Formbook	juroots
2025-06-07 08:48	http://www.hietbilamdep.cloud/hi07/	Formbook	c2 Formbook	juroots
2025-06-07 08:46	http://server16.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-06-07 08:46	http://server4.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-06-04 19:54	http://chainlink-api-v3.cloud/api/	Unknown malware	OtterCookie	juroots
2025-06-04 19:54	http://chainlink-api-v3.cloud/api/service/token/56e15ef3b5e5f169fc063f8d3e88288e	Unknown malware	OtterCookie	juroots
2025-06-04 07:50	www.soggilysootsstative.cloud	Formbook	c2 Formbook	juroots
2025-06-04 07:50	www.idlersinduedinfeft.cloud	Formbook	c2 Formbook	juroots
2025-06-04 07:50	www.aborteracciteadmetus.cloud	Formbook	c2 Formbook	juroots
2025-06-04 07:50	www.binarybingenbiscay.cloud	Formbook	c2 Formbook	juroots
2025-06-04 07:50	http://www.soggilysootsstative.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-06-04 07:50	http://www.idlersinduedinfeft.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-06-04 07:50	http://www.aborteracciteadmetus.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-06-04 07:50	http://www.binarybingenbiscay.cloud/tu90/	Formbook	c2 Formbook	juroots
2025-06-04 05:37	https://cloud-flare-verify.com/	Unknown malware	ClickFix	Overkill1984zzz
2025-06-03 05:54	http://server13.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-06-01 19:36	http://server1.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-05-31 09:22	multiperfect.cloud	NetSupportManager RAT	c2 NetSupport	juroots
2025-05-30 14:56	www.opureai.cloud	Formbook	c2 Formbook	juroots
2025-05-30 14:56	http://www.opureai.cloud/d26m/	Formbook	c2 Formbook	juroots
2025-05-29 13:58	cloud.msapp.workers.dev	Unknown malware	APT41 TOUGHPROGRESS	juroots
2025-05-27 17:02	www.iflixplus.cloud	Formbook	c2 Formbook	juroots
2025-05-27 17:01	www.d777game.cloud	Formbook	c2 Formbook	juroots
2025-05-27 17:01	http://www.iflixplus.cloud/le23/	Formbook	c2 Formbook	juroots
2025-05-27 17:01	http://www.d777game.cloud/le23/	Formbook	c2 Formbook	juroots
2025-05-26 05:41	https://sffjxgbi.elementor.cloud/wp-content/plugins/background-image-cropper/ipjeid.php?rsop=dbbyf4	Latrodectus	Latrodectus	pancak3lullz
2025-05-24 11:14	https://joekdo.com/cloud.msi	Unknown malware	ClickFix CoreSecThree	HuntYethHounds
2025-05-24 06:34	server25.mentality.cloud	XenoRAT	c2 XenoRAT	juroots
2025-05-23 12:09	http://server8.cdneurop.cloud/	Glupteba	c2 glupteba URLQuery	juroots
2025-05-17 11:21	https://mainstomp.cloud/MDcMkjAxsLKsT	Unknown Loader	TransferLoader	juroots
2025-05-16 10:37	betbot.mchbee.cloud	Mirai	c2 Mirai	juroots
2025-05-15 13:08	https://ch1.s3.fr-par.scw.cloud/Two-Factor-Auth-Challenge-Next-V6B7.html	Unknown malware	FakeCaptcha URLscan	juroots
2025-05-15 08:47	https://12.innospark.cloud/vpnmcg.txt	Lumma Stealer	Lumma malware	Chamindu_X
2025-05-13 16:55	cloud.fitcloud.ip-ddns.com	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-05-12 09:53	www.asereward.cloud	Formbook	c2 Formbook	juroots
2025-05-12 09:53	www.ameweb.cloud	Formbook	c2 Formbook	juroots
2025-05-12 09:52	http://www.asereward.cloud/kp18/	Formbook	c2 Formbook	juroots
2025-05-12 09:52	http://www.ameweb.cloud/o82h/	Formbook	c2 Formbook	juroots
2025-05-10 06:12	www.quickload.cloud	Cobalt Strike	AS132203 c2 censys	dyingbreeds_
2025-05-08 06:29	egiftshop.cloud	Lumma Stealer	LummaStealer	abuse_ch
2025-05-06 17:36	cloud-b2cx.com	Unknown malware	c2	ninjacatcher
2025-05-06 05:33	angry-bird.cloud	Unknown malware	AS14061 c2 censys DIGITALOCEAN-ASN Mythic	dyingbreeds_
2025-05-05 06:02	https://bytevista.cloud	Unknown Loader	FakeCaptcha	Gi7w0rm
2025-05-03 13:52	api-cloud-service.com	Cobalt Strike	c2 CobaltStrike	juroots
2025-05-02 03:43	kasicamondan.mentality.cloud	AsyncRAT	2May2025 iocbottest	Gi7w0rm
2025-05-01 05:58	app.bytevista.cloud	ClearFake	ClearFake	threatcat_ch
2025-05-01 05:58	app2.bytevista.cloud	ClearFake	ClearFake	threatcat_ch
2025-04-30 15:30	www.iep.cloud	Formbook	c2 Formbook	juroots
2025-04-30 15:29	http://www.iep.cloud/mk20/	Formbook	c2 Formbook	juroots
2025-04-30 08:10	jumstor.cloud	ClearFake	ClearFake	threatcat_ch
2025-04-28 06:26	http://cloud.social-neos.eu:8080/forum/viewtopic.php	Unknown malware	collection credential_access discovery RAT spyware stealer	UNP4CK
2025-04-26 11:43	https://zemiosp.com/cloud.msi	Unknown malware	CoreSecThree	monitorsg
2025-04-23 07:19	sdfikguoriqoir.cloud	ClearFake	ClearFake	threatcat_ch
2025-04-23 07:19	checkuserseverdday.cloud	ClearFake	ClearFake	threatcat_ch
2025-04-23 07:19	flexingoto.cloud	ClearFake	ClearFake	threatcat_ch
2025-04-22 14:44	integration2-hohc4oi-ql5o2tbhqesto.us-5.magentosite.cloud	FAKEUPDATES	fakeupdates SmartApeSG	pancak3lullz
2025-04-17 18:17	http://prodlisle.com:8080/cloud/fla	FAKEUPDATES	Kongtuke	monitorsg
2025-04-17 07:08	cloud.glowman554.gq	Mirai	c2 Mirai	juroots
2025-04-15 00:03	vvrn.akkba.cloud	Rhadamanthys	AS-COLOCROSSING AS36352 c2 censys Rhadamanthys stealer	DonPasci
2025-04-14 09:13	friendly-cloud-33778.pktriot.net	Quasar RAT	14April2025 iocbottest	Gi7w0rm
2025-04-14 07:09	autodiscover.srv782461.hstgr.cloud	Hook	AS-HOSTINGER AS47583 c2 censys HookBot	dyingbreeds_
2025-04-10 18:10	https://vm138073.goodtec.cloud/data/data.php	Unknown malware		abuse_ch
2025-04-10 13:24	cloud.emeraldpinesenterprises.com	FAKEUPDATES	SocGholish	monitorsg
2025-04-05 05:51	cloud.amazehome.xyz	Cobalt Strike	AS37963 c2 censys	dyingbreeds_
2025-04-02 13:22	https://system-update.cloud/Di0Her478/Login.php	Amadey	Amadey c2 URLscan	juroots
2025-04-02 10:08	http://system-update.cloud/Di0Her478/Login.php	Amadey	Amadey AS13335 Cloudflare Inc. WEBCC	antiphishorg
2025-04-02 08:36	system-update.cloud	Amadey	Amadey ViriBack	abuse_ch
2025-04-02 07:36	http://system-update.cloud/Di0Her478/index.php	Amadey	Amadey	abuse_ch
2025-03-31 14:48	ok.fish-cloud-jar.us	ClearFake	ClearFake	threatcat_ch
2025-03-29 19:31	screenconnect.cloud	Unknown RAT	ConnectWise ScreenConnect	s1dhy
2025-03-24 15:23	www.protypepuggedpumpers.cloud	Formbook	c2 Formbook	juroots
2025-03-24 15:23	www.moutonneuropenihal.cloud	Formbook	c2 Formbook	juroots
2025-03-24 15:23	www.deariededradekker.cloud	Formbook	c2 Formbook	juroots
2025-03-24 15:22	http://www.protypepuggedpumpers.cloud/bopi/	Formbook	c2 Formbook	juroots
2025-03-24 15:22	http://www.moutonneuropenihal.cloud/bopi/	Formbook	c2 Formbook	juroots
2025-03-24 15:22	http://www.deariededradekker.cloud/bopi/	Formbook	c2 Formbook	juroots
2025-03-23 09:17	p16.pknisha.cloud	SpyBanker		itsmeRiF
2025-03-21 10:54	www.spearsplatssplint.cloud	Formbook	c2 Formbook	juroots
2025-03-21 10:54	www.fluorforesetgambes.cloud	Formbook	c2 Formbook	juroots
2025-03-21 10:54	www.epeiroterbesestrepe.cloud	Formbook	c2 Formbook	juroots
2025-03-21 10:54	www.digi-well.cloud	Formbook	c2 Formbook	juroots
2025-03-21 10:53	www.avillabandlebattus.cloud	Formbook	c2 Formbook	juroots
2025-03-21 10:53	http://www.spearsplatssplint.cloud/h3wr	Formbook	c2 Formbook	juroots
2025-03-21 10:53	http://www.fluorforesetgambes.cloud/h3wr	Formbook	c2 Formbook	juroots
2025-03-21 10:53	http://www.epeiroterbesestrepe.cloud/h3wr	Formbook	c2 Formbook	juroots
2025-03-21 10:53	http://www.digi-well.cloud/h3wr	Formbook	c2 Formbook	juroots
2025-03-21 10:53	http://www.avillabandlebattus.cloud/h3wr	Formbook	c2 Formbook	juroots
2025-03-17 02:55	www.chaitin.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-03-14 06:57	www.tikahshafie.cloud	Formbook	c2 Formbook	juroots
2025-03-14 06:57	www.endon.cloud	Formbook	c2 Formbook	juroots
2025-03-14 06:57	http://www.tikahshafie.cloud/hm26/	Formbook	c2 Formbook	juroots
2025-03-14 06:57	http://www.endon.cloud/hm26/	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.selidik.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.quantaquiteveramnes.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.oddsideodylicoopod.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.jk77juta-official.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.evosystems.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.flippinforbidsfrear.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.cuficdarbiesdarleen.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.brotulabunionsburack.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.buenosbufidinburez.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:50	www.bankersbasogabergamo.cloud	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.selidik.cloud/egs9/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.quantaquiteveramnes.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.oddsideodylicoopod.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.jk77juta-official.cloud/egs9/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.evosystems.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.flippinforbidsfrear.cloud/egs9/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.cuficdarbiesdarleen.cloud/egs9/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.brotulabunionsburack.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.buenosbufidinburez.cloud/egs9/	Formbook	c2 Formbook	juroots
2025-03-10 13:49	http://www.bankersbasogabergamo.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-03-07 06:56	www.onda1.cloud	Formbook	c2 Formbook	juroots
2025-03-07 06:56	http://www.onda1.cloud/v32e/	Formbook	c2 Formbook	juroots
2025-03-06 06:55	alchemy-api-v3.cloud	Unknown malware	OtterCookie	juroots
2025-03-05 11:04	api.videodriverzone.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.videotechdrivers.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.driversnap.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.camdriverstore.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.driverstream.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.videocarddrivers.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.drivercamhub.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.cameradriverx.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.camdrivers.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.camdriverhub.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.vcamdriverupdate.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.provideodrivers.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.vcamsupport.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.webcamfix.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-05 11:04	api.vidtechhub.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-03-03 22:47	cloud.youtubedns.com	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-03-03 18:06	www.ybio.cloud	Formbook	c2 Formbook	juroots
2025-03-03 18:06	www.riscollfamily.cloud	Formbook	c2 Formbook	juroots
2025-03-03 18:05	www.esumekit.cloud	Formbook	c2 Formbook	juroots
2025-03-03 18:05	http://www.ybio.cloud/sa38/	Formbook	c2 Formbook	juroots
2025-03-03 18:05	http://www.riscollfamily.cloud/sa38/	Formbook	c2 Formbook	juroots
2025-03-03 18:05	http://www.esumekit.cloud/sa38/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.kinneykoorhmnkranach.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.softwaresignal.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.swissdigitalhotelspass.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.disnestdustbineelboat.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.flatterfoetusfreezer.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.gassitgawkygigues.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.georgeglutosegravers.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	www.bedcapbegaudybegrim.cloud	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.swissdigitalhotelspass.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.softwaresignal.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.kinneykoorhmnkranach.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.flatterfoetusfreezer.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.gassitgawkygigues.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.georgeglutosegravers.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.disnestdustbineelboat.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 18:49	http://www.bedcapbegaudybegrim.cloud/rupi/	Formbook	c2 Formbook	juroots
2025-03-01 11:45	quiet-cloud-77052.pktriot.net	NjRAT	1March2025 iocbottest	Gi7w0rm
2025-02-27 23:40	www.en-pioneer.cloud	Formbook	c2 Formbook	juroots
2025-02-27 23:40	http://www.en-pioneer.cloud/mg63/	Formbook	c2 Formbook	juroots
2025-02-27 12:17	https://api.drivercamhub.cloud/linux-al2i.sh	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-02-27 12:17	api.driversnap.cloud	Unknown Stealer	Lazarus	lontze7
2025-02-27 12:16	api.drivercamhub.cloud	Unknown Stealer	ContagiousInterview Lazarus	lontze7
2025-02-27 12:16	api.videodriverzone.cloud	Unknown Stealer	Lazarus	lontze7
2025-02-27 12:16	api.videocarddrivers.cloud	Unknown Stealer	Lazarus	lontze7
2025-02-27 12:16	api.driverstream.cloud	Unknown Stealer	Lazarus	lontze7
2025-02-26 15:25	graphick.cloud	Lumma Stealer	c2 Lumma	Anonymous
2025-02-26 12:22	www.amanbet.cloud	Formbook	c2 Formbook	juroots
2025-02-26 12:21	http://www.amanbet.cloud/sy30/	Formbook	c2 Formbook	juroots
2025-02-25 14:38	www.mnet.cloud	Formbook	c2 Formbook	juroots
2025-02-25 14:38	http://www.mnet.cloud/se01/	Formbook	c2 Formbook	juroots
2025-02-23 04:01	blackbirdessential.cloud	Remcos	AS30860 c2 censys RAT remcos YURTEH-AS	DonPasci
2025-02-18 18:47	dns.windowsupdate.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-02-16 09:14	dreamerfruits.cloud	Lumma Stealer	c2 Lumma	d1v35h
2025-02-14 18:37	https://dreamerfruits.cloud/api	Lumma Stealer	LummaStealer	abuse_ch
2025-02-14 12:43	view.smartapply.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	get.smartapply.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	check.smartapply.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	cvjet.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	caps.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	seek.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	cv.smartapply.indeed.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	cvsend.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	send.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	get.indeed.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 12:43	tmp01.resumeexpert.cloud	RedCurl		lontze7
2025-02-14 05:35	questeformeaning.cloud	Lumma Stealer	domain Lumma LummaStealer stealer	DaveLikesMalwre
2025-02-13 15:41	https://alwaysvahead.cloud/api	Lumma Stealer	LummaStealer	abuse_ch
2025-02-13 09:07	alwaysvahead.cloud	Lumma Stealer	Lumma stealer	g0njxa
2025-02-13 07:31	https://questeformeaning.cloud/api	Lumma Stealer	LummaStealer	abuse_ch
2025-02-11 20:58	www.reezermanager.cloud	Formbook	c2 Formbook	juroots
2025-02-11 20:58	www.etchip.cloud	Formbook	c2 Formbook	juroots
2025-02-11 20:58	http://www.reezermanager.cloud/i62s/	Formbook	c2 Formbook	juroots
2025-02-11 20:58	http://www.etchip.cloud/ty25/	Formbook	c2 Formbook	juroots
2025-02-10 11:31	www.otiacoco.cloud	Formbook	c2 Formbook	juroots
2025-02-10 11:31	www.live.cloud	Formbook	c2 Formbook	juroots
2025-02-10 11:31	http://www.otiacoco.cloud/da16/	Formbook	c2 Formbook	juroots
2025-02-10 11:31	http://www.live.cloud/da16/	Formbook	c2 Formbook	juroots
2025-02-08 06:39	warmwhearts.cloud	Lumma Stealer	c2 Lumma	juroots
2025-02-07 17:15	www.ages-community-pravites.cloud	Formbook	c2 Formbook	juroots
2025-02-07 17:15	http://www.ages-community-pravites.cloud/c07e/	Formbook	c2 Formbook	juroots
2025-02-07 06:56	soulvlight.cloud	Lumma Stealer	c2 Lumma	juroots
2025-02-06 15:55	https://warmwhearts.cloud/api	Lumma Stealer	LummaStealer	abuse_ch
2025-02-06 00:01	accounts3.app-cloud.link	Havoc	AS51765 c2 censys CREANOVA-AS Havoc	DonPasci
2025-02-05 18:51	www.pgflow.cloud	Formbook	c2 Formbook	juroots
2025-02-05 18:51	www.rumseysabinsargos.cloud	Formbook	c2 Formbook	juroots
2025-02-05 18:51	www.swirlstakedtawkee.cloud	Formbook	c2 Formbook	juroots
2025-02-05 18:51	www.whisps.cloud	Formbook	c2 Formbook	juroots
2025-02-05 18:51	http://www.rumseysabinsargos.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-02-05 18:51	http://www.swirlstakedtawkee.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-02-05 18:51	http://www.whisps.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-02-05 18:51	http://www.pgflow.cloud/g43m/	Formbook	c2 Formbook	juroots
2025-02-01 16:08	forever.bumiipaneldigital.cloud	Mirai	censys HailBot Mirai	NDA0E
2025-02-01 16:08	node.forever.bumiipaneldigital.cloud	Mirai	censys HailBot Mirai	NDA0E
2025-01-31 21:05	cloud-mail.ink	Unknown malware	c2 maldoc	juroots
2025-01-31 12:48	www.gzxingyu.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-01-31 00:01	accounts2.app-cloud.link	Havoc	AS51765 c2 censys CREANOVA-AS Havoc	DonPasci
2025-01-30 20:00	gray-horse-56758.zap.cloud	Remcos	AS30823 AUROLOGIC c2 censys RAT remcos	DonPasci
2025-01-30 14:06	gracious-cloud-72803.pktriot.net	SpyNote	30January2025 iocbottest	Gi7w0rm
2025-01-30 14:03	bots.richstressop.cloud	Mirai	30January2025 iocbottest	Gi7w0rm
2025-01-28 00:04	952cd7f5-55c2-472f-bc9d-08487ef75661.random.avina.cloud	Havoc	AMAZON-02 AS16509 c2 censys Havoc	DonPasci
2025-01-25 17:18	space.richstressop.cloud	MooBot	censys fbi.gov Mirai moobot	NDA0E
2025-01-23 04:04	cloud.services.market-streams.com	Havoc	AS14061 c2 censys DIGITALOCEAN-ASN Havoc	DonPasci
2025-01-22 17:50	ensentoto.cloud	Formbook	c2 Formbook	juroots
2025-01-22 17:50	http://www.ensentoto.cloud/g10k/	Formbook	c2 Formbook	juroots
2025-01-21 15:51	ezstudio.cloud	Joker	Joker	abuse_ch
2025-01-21 15:51	fastbrain.cloud	Joker	Joker	abuse_ch
2025-01-14 10:23	mykinsta-cloud.com	FAKEUPDATES	SocGholish	skocherhan
2025-01-13 16:03	accounts4.app-cloud.link	Havoc	AS51765 c2 censys CREANOVA-AS Havoc	DonPasci
2025-01-12 10:58	http://www.ujas.cloud/pp11/	Formbook	c2 Formbook	juroots
2025-01-12 10:58	http://www.tartupapps.cloud/pp11/	Formbook	c2 Formbook	juroots
2025-01-12 10:56	tartupapps.cloud	Formbook	c2 Formbook	juroots
2025-01-12 10:56	ujas.cloud	Formbook	c2 Formbook	juroots
2025-01-10 09:14	ns2.c6bank.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-01-10 09:14	ns1.c6bank.cloud	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-01-10 09:14	cloud-sync-bcjxmnarpb.cn-shanghai.fcapp.run	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2025-01-10 07:13	http://www.ensentoto.cloud/a03d/	Formbook	c2 Formbook	juroots
2025-01-09 00:03	myaccount.app-cloud.link	Havoc	AS51765 c2 censys CREANOVA-AS Havoc	DonPasci
2025-01-08 04:03	accounts.app-cloud.link	Havoc	AS51765 c2 censys CREANOVA-AS Havoc	DonPasci
2025-01-04 20:03	pixelize.cloud	Hook	AS215240 c2 censys HookBot NETRESEARCH	DonPasci
2025-01-01 04:03	avina.cloud	Havoc	AMAZON-02 AS16509 c2 censys Havoc	DonPasci
2024-12-24 04:02	web.app-cloud.link	Havoc	AS51765 c2 censys CREANOVA-AS Havoc	DonPasci
2024-12-16 07:37	portal.avina.cloud	Havoc	AMAZON-02 AS16509 c2 censys	dyingbreeds_
2024-12-15 08:01	login.avina.cloud	Havoc	AMAZON-02 AS16509 c2 censys	dyingbreeds_
2024-12-02 21:18	account.avina.cloud	Havoc	AMAZON-02 AS16509 c2 censys	dyingbreeds_
2024-12-02 21:18	aadcdn.avina.cloud	Havoc	AMAZON-02 AS16509 c2 censys	dyingbreeds_
2024-12-02 21:18	www.avina.cloud	Havoc	AMAZON-02 AS16509 c2 censys	dyingbreeds_
2024-12-02 21:13	uninstallerplg.cloud	Hook	AS401115 c2 censys EKABI HookBot	dyingbreeds_
2024-12-02 21:13	103-195-4-94.cloud-xip.com	Hook	AS64022 c2 censys HookBot	dyingbreeds_
2024-12-02 21:13	c2-91-184-232-123.elastic.k2.cloud	Unknown malware	AS51219 c2 censys K2_INT Mythic	dyingbreeds_
2024-12-02 20:57	mail.gds-services.cloud	Cobalt Strike	AS4847 c2 censys	dyingbreeds_
2024-12-02 06:12	cloud.sentinelonebit.com	Cobalt Strike		s1dhy
2024-11-28 16:13	4i9o.l.time4vps.cloud	Unknown malware	BbyStealer	Anonymous
2024-11-09 07:47	my-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:47	mzd-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:47	mze-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mv-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mzp-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mzv-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	nakit-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	nbu-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	nukib-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	policie-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-atlassian.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-aws.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-acronis.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-bah.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-army.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-be.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-blackberry.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-de.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-dk.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-dgap.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-dnc.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-csis.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-esa.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-fbi.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-hudson.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-ida.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-iri.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-knowbe4.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-marcus.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	s3-monitoring.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	msmt-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mod-gov-il.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mpsv-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mpo-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mo-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mil-pt.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mmr-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mil-pl.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mf-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mfa-gov-il.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mfa-gov-tr.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mfa-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mil-be.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	mil-ee.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	gov-ua.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	govua.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	md-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	govps.cloud	Unknown malware	apt29	juroots
2024-11-09 07:46	govtr.cloud	Unknown malware	apt29	juroots
2024-11-09 07:41	gov-fi.cloud	Unknown malware	apt29	juroots
2024-11-09 07:41	gov-gr.cloud	Unknown malware	apt29	juroots
2024-11-09 07:41	gov-lt.cloud	Unknown malware	apt29	juroots
2024-11-09 07:41	gov-lv.cloud	Unknown malware	apt29	juroots
2024-11-09 07:41	gov-pl.cloud	Unknown malware	apt29	juroots
2024-11-09 07:41	gov-sk.cloud	Unknown malware	apt29	juroots
2024-11-09 07:41	gov-trust.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	gov-aws.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	gov-au.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	feedzai-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	aws-ukraine.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	eru-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	aws-s3.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	aws-online.cloud	Unknown malware	apt29	juroots
2024-11-09 07:40	aws-secure.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	aws-meetings.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	aws-meet.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	aws-il.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	aws-data.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	aws-join.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-stig.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-nato.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-ned.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-nsa.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-proofpoint.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-pt.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-rackspace.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-rand.cloud	Unknown malware	apt29	juroots
2024-11-09 07:39	s3-state.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	s3-spacex.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	s3-ua.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	s3-ucia.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	s3-zoho.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	ua-energy.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	ua-mil.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	uohs-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	ua-se.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	ua-sec.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	ua-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	ua-sn.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	ukrtelecom.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	uoou-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	vlada-gov.cloud	Unknown malware	apt29	juroots
2024-11-09 07:38	voa-gov.cloud	Unknown malware	apt29	juroots
2024-11-08 12:46	azure-dbupdate.cloud	Matanbuchus		johannes
2024-11-06 20:01	mdm.adunas.cloud	Unknown malware	AS15943 censys CHAOS panel WTNET-AS	DonPasci
2024-11-04 19:19	webapiintegration.cloud	FAKEUPDATES	KeitaroTDS SocGholish	rmceoin
2024-10-31 00:05	utku.vps.webdock.cloud	Hook	AS44803 c2 censys HookBot WEBDOCK-AS	DonPasci
2024-10-23 09:13	eu-central-1-aws.mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-central-1.mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-central-1.ukrtelecom.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-north-1-aws.ua-energy.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-north-1-aws.ua-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-south-1-aws.mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-south-2-aws.mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-southeast-1-aws.govtr.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	eu-southeast-1-aws.gov-ua.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	us-east-1-aws.mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	us-east-2-aws.ua-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	us-west-1-amazon.ua-energy.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	us-west-1.aws-ukraine.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	us-west-1.ukrtelecom.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	us-west-2-aws.mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:13	ca-west-1.mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-rand.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-spacex.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-state.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-stig.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-ua.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-ucia.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-zoho.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	ua-energy.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	ua-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	ua-mil.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	ua-sec.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	ua-se.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	ua-sn.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	ukrtelecom.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	uohs-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	uoou-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	vlada-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	voa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	nbu-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	nukib-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	policie-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-acronis.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-army.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-atlassian.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-aws.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-bah.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-be.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-blackberry.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-csis.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-de.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-dgap.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-dk.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-dnc.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-esa.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-fbi.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-hudson.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-ida.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-iri.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-knowbe4.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-marcus.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-monitoring.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-nato.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-ned.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-nsa.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-proofpoint.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-pt.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	s3-rackspace.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-sk.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	govtr.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-trust.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-ua.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	govua.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	md-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mfa-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mfa-gov-il.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mfa-gov-tr.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mf-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mil-be.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mil-ee.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mil-pl.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mil-pt.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mmr-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mod-gov-il.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mo-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mpo-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mpsv-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	msmt-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mv-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	my-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mzd-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mze-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mzp-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	mzv-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	nakit-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-data.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-il.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-join.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-meet.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-meetings.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-online.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-s3.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-secure.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	aws-ukraine.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	eru-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	feedzai-gov.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-au.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-aws.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-fi.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-gr.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-lt.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-lv.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	gov-pl.cloud	Unknown malware	APT	abuse_ch
2024-10-23 09:12	govps.cloud	Unknown malware	APT	abuse_ch
2024-10-05 00:02	imap.surfmail.cloud	Meduza Stealer	AEZA-AS AS210644 c2 censys Meduza stealer	DonPasci
2024-09-24 16:02	thvip-bm.tokenv1.cloud	Bashlite	AS58955 BANGMODENTERPRISE-TH c2 censys Gafgyt open-dir	DonPasci
2024-09-23 20:01	cloud.pythr.net	Hook	AS57724 c2 censys DDOS-GUARD HookBot	DonPasci
2024-09-22 12:01	toxicipstresser.cloud	Unknown malware	api botnet SSH-C2	NDA0E
2024-09-18 20:01	gryhazardowe.cloud	Hook	AS57724 c2 censys DDOS-GUARD HookBot	DonPasci
2024-09-15 00:01	185-47-174-89.cloud-xip.com	Quasar RAT	AS204548 c2 censys CLOUDWEBMANAGE-IL-FR RAT	DonPasci
2024-09-13 00:00	www.gryhazardowe.cloud	Hook	AS57724 c2 censys DDOS-GUARD HookBot	DonPasci
2024-09-12 08:00	www.cloud.pythr.net	Hook	AS57724 c2 censys DDOS-GUARD HookBot	DonPasci
2024-09-02 16:17	nova-stealer.cloud	Nova Stealer	Hawkish Malicord NovaSentinel NovaStealer ScreenWebview Sordeal	NDA0E
2024-08-22 16:16	gray-mouse-10079.zap.cloud	Remcos	AS30823 c2 censys RAT remcos	thehappydinoa
2024-08-14 01:23	login.tenable.cloud	Cobalt Strike	AS8075 c2 censys MICROSOFT-CORP-MSN-AS-BLOCK	thehappydinoa
2024-08-14 01:20	portal.cloud-onedrive.net	Cobalt Strike	AS8075 c2 censys MICROSOFT-CORP-MSN-AS-BLOCK	thehappydinoa
2024-08-14 01:20	tenable.cloud	Cobalt Strike	AS8075 c2 censys MICROSOFT-CORP-MSN-AS-BLOCK	thehappydinoa
2024-08-13 11:44	cloud.google-inc.ltd	PlugX	APT PlugX	abuse_ch
2024-08-10 10:05	clp.creativenotes.cloud	Amadey	Amadey spreaders	abus3reports
2024-08-10 10:05	ama.creativenotes.cloud	Amadey	Amadey spreaders	abus3reports
2024-08-04 12:30	cloud.tnewstraffic.com	Unknown malware	balada wordpress inject	500mk500
2024-07-14 12:14	cloud.microsoftsservice.com	ShadowPad	shadowpad	myceliumbroker
2024-07-14 12:14	cloud.kaspersky-scan.com	ShadowPad	shadowpad	myceliumbroker
2024-07-09 14:02	https://fortunate-homonym-gw.aws-euc1.cloud-ara.tyk.io/api/v2/login	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-07-09 14:02	fortunate-homonym-gw.aws-euc1.cloud-ara.tyk.io	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-07-09 08:48	cloud.edgerapidcdn.com	Unknown malware	balada wordpress inject	500mk500
2024-06-26 08:54	amateur-locket-gw.aws-use1.cloud-ara.tyk.io	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra
2024-06-26 08:54	https://amateur-locket-gw.aws-use1.cloud-ara.tyk.io/api/v2/login	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra
2024-06-21 08:35	past-dryer-gw.aws-apse2.cloud-ara.tyk.io	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra
2024-06-21 08:35	https://past-dryer-gw.aws-apse2.cloud-ara.tyk.io/api/v2/login	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra
2024-06-20 13:29	distinctive-highlight-gw.aws-euw2.cloud-ara.tyk.io	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-06-20 13:29	https://distinctive-highlight-gw.aws-euw2.cloud-ara.tyk.io/api/v2/login	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-06-15 08:39	https://whole-girl-gw.aws-usw2.cloud-ara.tyk.io/api/v2/login	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-06-15 08:39	whole-girl-gw.aws-usw2.cloud-ara.tyk.io	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-06-11 08:57	https://organic-satire-gw.aws-euc1.cloud-ara.tyk.io/api/v2/login	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra
2024-06-11 08:57	organic-satire-gw.aws-euc1.cloud-ara.tyk.io	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra
2024-06-09 10:38	blacktds.cloud	Unknown malware		Syndikalist
2024-06-08 18:47	bad-week-gw.aws-usw2.cloud-ara.tyk.io	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-06-08 18:47	https://bad-week-gw.aws-usw2.cloud-ara.tyk.io/api/v2/login	Cobalt Strike	CobaltStrike cs-watermark-987654321 GLOBAL INTERNET SOLUTIONS LLC	drb_ra
2024-05-21 16:21	cloud.palloaltonetworks.com	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra
2024-05-21 16:21	https://cloud.palloaltonetworks.com:8443/anticipate/v10.75/U4FWFQ0EJ9C	Cobalt Strike	CobaltStrike cs-watermark-987654321	drb_ra