ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.

651

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'672'323

IOCs in corpus

Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

ioc:ms-debug-services.com ( run)
malware:CobaltStrike ( run)
tag:TA505 ( run)
threat_type:cc_skimming ( run)
uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)	IOC	Malware	Tags	Reporter
2026-04-30 16:49	hopmeshnode.dusherport2ge.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 16:35	crysta-close.herod-terminology.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 16:22	zenvaleet.herod-terminology.bet	ClearFake	ClearFake	Anonymous
2026-04-30 16:16	slxhibx.herod-terminology.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 16:15	https://powerhouselaw.com.au/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 16:15	https://powerhouselaw.sydney/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 16:00	encod-vault.herod-terminology.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:55	repa1r-track.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:49	lab1-branch.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:40	38.240.51.143:43557	Quasar RAT	quasar	abuse_ch
2026-04-30 15:36	talline8al.producer5chming.bet	ClearFake	ClearFake	Anonymous
2026-04-30 15:30	rapidassay.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:24	rur4l-signal.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:19	igqe.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:13	yagzws04.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:05	1oca1-trail.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:57	m4rk-grid.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:54	atomchec.belief-handcraft.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:54	brookneuro.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:52	67mvmowu.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:46	m01e-node.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	sales-loop.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	cliffcatalog.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	ks3fup.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	ijfitce.dis9ualescapes.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:33	clos-aut.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:28	serven8on.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:22	d90aaos.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:19	routeligh.decommiss-mint.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	moralcinema.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	5il3nt4-mesh.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	jqh9drh.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	mermesh0ar.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	tallithar9.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	labelnotifier.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	neuronmeado.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	velcore8en.decommiss-mint.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	https://ambergrid.top/private/acl-schema.js	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	ambergrid.top	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	https://ambergrid.top/private/oauth-thread.php	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	https://ambergrid.top/private/role-partial.js	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	courierree.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	gkrhs.dis9ualescapes.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	vorlith6um.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:17	meta-fr0z.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:15	api.drazyland.us	Unknown malware		abuse_ch
2026-04-30 14:15	remote.drazyland.us	Unknown malware		abuse_ch
2026-04-30 14:15	http://drazyland.us/api/clients/update-system	Unknown malware		abuse_ch
2026-04-30 14:15	https://tophealth.es/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 14:15	drazyland.us	Unknown malware		abuse_ch
2026-04-30 14:15	https://genuinelink.net/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 14:15	http://drazyland.us/api/clients/register	Unknown malware		abuse_ch
2026-04-30 14:11	176.10.125.15:8443	Unknown malware		abuse_ch
2026-04-30 14:11	centralcoretech.com	Unknown malware		abuse_ch
2026-04-30 14:11	https://tee.ambil-disini.web.id/	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:11	tee.ambil-disini.web.id	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:11	tee.plugazapp.com.br	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:11	https://tee.plugazapp.com.br/	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:02	154.218.3.146:8853	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-30 14:02	154.218.3.146:7070	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-30 14:02	yu3dc.com	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-30 13:59	ivoryencoder.decommiss-mint.bet	ClearFake	ClearFake	Anonymous
2026-04-30 13:51	fa1th3-wave.decommiss-mint.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:43	8ugxvfg.decommiss-mint.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:37	repocra.decommiss-mint.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:35	nimba.it.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-30 13:35	158.160.75.185:40675	RatonRAT	RatonRAT	abuse_ch
2026-04-30 13:30	172.67.135.218:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 13:30	104.21.26.101:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 13:26	meadopacka.convinc8mission.bet	ClearFake	ClearFake	Anonymous
2026-04-30 13:22	darkdelivery.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:20	microsummit.sali8mor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:20	https://lucidanchor.top/private/oauth-thread.php	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	lucidanchor.top	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	https://lucidanchor.top/private/role-partial.js	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	http://172.96.137.141	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	http://104.36.229.33	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	https://getprismledger.com/pop	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	getprismledger.com	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	innerazur.sali8mor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:20	opticdrive.sali8mor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:17	ui5cn.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:15	https://thynkia.net/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 13:11	781q.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:05	kqhgw.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:00	quorcore1ix.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:00	meta-0bse.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:00	vwpsn3.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:00	st1t7-trace.convinc8mission.bet	ClearFake	ClearFake	Anonymous
2026-04-30 12:55	8.145.41.135:808	Cobalt Strike	CobaltStrike cs-watermark-391144938	abuse_ch
2026-04-30 12:55	47.82.234.15:80	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-30 12:55	101.43.29.69:80	Cobalt Strike	CobaltStrike cs-watermark-666666666	abuse_ch
2026-04-30 12:55	47.111.1.176:8888	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-30 12:54	kelvenet8.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:46	toj4.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:40	zzpy.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:33	3yd5.dark-salittle.bet	ClearFake	ClearFake	Anonymous
2026-04-30 12:31	fire7siteview.fluxunitzone.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	sdfnet.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	gate.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	cipher-meado.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	55da.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	ix9n.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	k29f.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	zenmarkos.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	lum-forgeen.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	soci-vector.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	kel-coreex.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	qba10o.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	vorcrestal9.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	foxultra.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	ultra-d1scov.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	wild-broo.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	softpayload.retellin8tolle.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	04cfyd.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	pipelinetempo.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	cz34e.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	quordraar.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	packfall.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	index-dock.coraprimat0sis.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	proto-outl3.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	hyper-ve1ve.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	cedartone.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	chan5-trail.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	notifie-plate.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	185.102.115.84:443	Unknown malware	chacha20-poly1305 kb_botnet max_panel socket.io	Lenny_3BO
2026-04-30 12:31	86420c8dfedcacad48c8b4c2cb89a1f68a3e59002d396d36b955d7531aa9b6fc	Unknown malware	chacha20-poly1305 kb_botnet socket.io x25519	Lenny_3BO
2026-04-30 12:31	site4siteview.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	step1taskhub.vectorpathsys.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	long3siteview.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	gate5logicway.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	openmeshsite.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	new7taskhub.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	hostunitgate.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	path2pathgate.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	dash9pathgate.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	abc.ilptour.com	ValleyRAT		johannes
2026-04-30 12:30	abc.petitechanson.com	ValleyRAT		johannes
2026-04-30 12:30	abc.doublemobile.com	ValleyRAT		johannes
2026-04-30 12:30	mcagov.cc	ValleyRAT		johannes
2026-04-30 12:30	roldco.com	ValleyRAT		johannes
2026-04-30 12:30	vnc.kcii2.com	ValleyRAT		johannes
2026-04-30 12:30	abc.woopami.com	ValleyRAT		johannes
2026-04-30 12:30	abc.3mkorealtd.com	ValleyRAT		johannes
2026-04-30 12:30	abc.sudsmama.com	ValleyRAT		johannes
2026-04-30 12:30	ec2-18-208-244-120.compute-1.amazonaws.com	Unknown malware		johannes
2026-04-30 12:30	abc.fetish-friends.com	ValleyRAT		johannes
2026-04-30 12:30	techhostunit.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	datameshsite.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	byte8taskhub.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	port4pathgate.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	site2siteview.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	datahostunit.matrixhostbit.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	move1logicnet.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	flowmeshnode.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	link3logicway.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	fast6taskhub.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	restmeshnode.inertianetway.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	cold2pathgate.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	dark7siteview.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	none5taskhub.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	view8siteview.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	zero9logicnet.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	nullmeshnode.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	areahostunit.tensorlogicbox.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:21	pulseroot.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:15	5ignal8-forge.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:15	https://bitbirds.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 12:08	media-scope.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:02	bdecgtb.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:56	trivaleen3.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:44	rn3asur-spool.coraprimat0sis.bet	ClearFake	ClearFake	Anonymous
2026-04-30 11:38	talforgeon.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:33	amb3-cache.retellin8tolle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:30	https://why.nossamidia.net.br/	Vidar	Vidar	crep1x
2026-04-30 11:30	https://why.yutikeyu.com/	Vidar	Vidar	crep1x
2026-04-30 11:30	why.nossamidia.net.br	Vidar	Vidar	crep1x
2026-04-30 11:30	why.yutikeyu.com	Vidar	Vidar	crep1x
2026-04-30 11:26	lummeshis1.retellin8tolle.bet	ClearFake	ClearFake	Anonymous
2026-04-30 11:21	wk4z.retellin8tolle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:07	10gic-mark.retellin8tolle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:01	sub-forrn.retellin8tolle.bet	ClearFake	ClearFake	Anonymous
2026-04-30 10:55	o8x1lij5.archive-shlyah.digital	ClearFake	ClearFake	Anonymous
2026-04-30 10:55	mb7oktk3.archive-shlyah.digital	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:35	rep4-node.furrow-praise.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:29	quor-fluxum.furrow-praise.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:11	hub.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:06	sdafdsew.novapath.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 09:50	http://cs371620.tw1.ru/L1nc0In.php	DCRat	dcrat RAT	abuse_ch
2026-04-30 09:25	hostme.it.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-30 09:20	172.67.207.71:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 09:20	104.21.45.10:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 08:41	burn5pathgate.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:35	ionhostunit.fluxunitzone.bet	ClearFake	ClearFake	Anonymous
2026-04-30 08:30	glow2taskhub.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:24	heatmeshsite.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:18	melt9logicway.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:13	node8siteview.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:07	view4pathgate.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:02	pointcanunit.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:50	linemeshnode.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:45	path7logicnet.vectorpathsys.bet	ClearFake	ClearFake	Anonymous
2026-04-30 07:44	https://analytics16.icu/ext.d7907680dd44.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:43	https://analytics16.icu/ext-b.223652707572.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:43	https://analytics16.icu/t.188cfd3975db.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:42	https://analytics16.icu/t.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:42	analytics16.icu	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:39	site9siteview.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:38	https://cybermetasynth.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:38	cybermetasynth.digital	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:37	https://abyssalflowunit.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:36	abyssalflowunit.digital	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:34	port5pathgate.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:20	scan6taskhub.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:16	158.94.211.33:7017	XWorm	XWorm	abuse_ch
2026-04-30 07:12	linkmeshsite.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:11	https://wonfo.it.com/p	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:10	https://wonfo.it.com/c	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:10	https://wonfo.it.com/geo	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:09	https://wonfo.it.com/t.js	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:09	wonfo.it.com	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:06	cell3logicway.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:59	dull7siteview.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:53	long2pathgate.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:47	masshostunit.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:41	wait9taskhub.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:39	https://web-interview.online/install-guide.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:39	https://web-interview.online/download.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:39	https://web-interview.online/microsoft-store.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:38	https://web-interview.online/invite.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:38	web-interview.online	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:36	https://meeting.joinzooms.com/ZOOM/Windows/install-guide.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:35	https://meeting.joinzooms.com/ZOOM/Windows/download.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:34	https://meeting.joinzooms.com/ZOOM/Windows/microsoft-store.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:34	https://meeting.joinzooms.com/ZOOM/Windows/invite.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:33	https://meeting.joinzooms.com/ZOOM/	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:33	meeting.joinzooms.com	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:32	https://googlemeet.courses/Windows/download.php	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-30 06:31	https://googlemeet.courses/Windows/invite.php	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-30 06:31	googlemeet.courses	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-30 06:30	slow4logicnet.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:26	31.97.61.212:8521	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:26	103.30.145.217:8768	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:25	diggero.biz	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:25	comples.biz	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:24	mark1siteview.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:23	lapdog.kindterra.cfd	ACR Stealer	ACRStealer	abuse_ch
2026-04-30 06:23	grantt.qumarox.icu	ACR Stealer	ACRStealer	abuse_ch
2026-04-30 06:22	roadflo.icu	ACR Stealer	ACRStealer	abuse_ch
2026-04-30 06:19	https://sandman.bond/log.php	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 06:19	grid6pathgate.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:17	https://sandman.bond/cf.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 06:17	sandman.bond	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 06:11	basehostunit.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:11	grid3pathgate.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:11	rule6taskhub.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:11	plotmeshsite.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:05	deep3taskhub.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:03	83.217.208.78:3011	Unknown malware		abuse_ch
2026-04-30 06:00	plotmeshsite.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 05:54	flat8logicway.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 05:50	103.211.219.238:80	Remus	Remus	orlof_v
2026-04-30 05:50	195.19.194.107:80	Remus	Remus	orlof_v
2026-04-30 05:50	62.72.32.156:80	Remus	Remus	orlof_v
2026-04-30 05:50	76.13.17.11:80	Remus	Remus	orlof_v
2026-04-30 05:50	85.31.234.218:80	Remus	Remus	orlof_v
2026-04-30 05:50	31.97.61.212:80	Remus	Remus	orlof_v
2026-04-30 05:50	72.61.25.108:80	Remus	Remus	orlof_v
2026-04-30 05:50	148.230.76.66:80	Remus	Remus	orlof_v
2026-04-30 05:50	194.164.72.136:80	Remus	Remus	orlof_v
2026-04-30 05:50	65.21.104.235:80	Remus	Remus	orlof_v
2026-04-30 05:50	168.231.114.49:80	Remus	Remus	orlof_v
2026-04-30 05:50	95.217.206.239:80	Remus	Remus	orlof_v
2026-04-30 05:50	178.104.90.74:80	Remus	Remus	orlof_v
2026-04-30 05:50	5.189.165.117:80	Remus	Remus	orlof_v
2026-04-30 05:50	37.77.150.108:80	Remus	Remus	orlof_v
2026-04-30 05:50	high9siteview.kineticgatehub.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	45.85.147.53:80	Remus	Remus	orlof_v
2026-04-30 05:49	137.184.153.47:80	Remus	Remus	orlof_v
2026-04-30 05:49	68.183.161.221:80	Remus	Remus	orlof_v
2026-04-30 05:49	67.205.186.254:80	Remus	Remus	orlof_v
2026-04-30 05:49	78.111.111.236:80	Remus	Remus	orlof_v
2026-04-30 05:49	94.231.205.229:80	Remus	Remus	orlof_v
2026-04-30 05:49	15.235.192.42:80	Remus	Remus	orlof_v
2026-04-30 05:49	147.135.84.14:80	Remus	Remus	orlof_v
2026-04-30 05:49	89.58.10.69:80	Remus	Remus	orlof_v
2026-04-30 05:49	5.231.25.31:80	Remus	Remus	orlof_v
2026-04-30 05:49	5.45.184.254:80	Remus	Remus	orlof_v
2026-04-30 05:49	185.53.179.128:80	Remus	Remus	orlof_v
2026-04-30 05:49	79.111.111.236:80	Remus	Remus	orlof_v
2026-04-30 05:49	68.183.61.221:80	Remus	Remus	orlof_v
2026-04-30 05:49	dice6logicnet.thora9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	fusetasknode.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	linkhostunit.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	side5pathgate.thora9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	zinc8siteview.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	zero4logicway.niva2ron.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	datameshsite.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	byte7taskhub.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	loadhostunit.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	nonehostunit.niva2ron.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	port3pathgate.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	flow8siteview.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	scan2logicnet.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	pingmeshnode.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	hop9taskhub.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	win9taskhub.mist5qora.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	next5pathgate.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	next2pathgate.mist5qora.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	core9logicnet.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	suit8siteview.lo4miren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	fast7siteview.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	heat8logicway.sola8ven.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	sunmeshsite.sola8ven.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	highmeshsite.so8laven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	glow3taskhub.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	king6taskhub.so8laven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	rayhostunit.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	beam5pathgate.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	dawn9siteview.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	patchmeshnode.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	run4taskhub.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	starthostunit.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	linehostunit.peta1vrix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	save2siteview.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	heat4logicway.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	grid6logicway.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	http://178.16.52.232/	Unknown malware	ClickFix	Lenny_3BO
2026-04-30 05:48	http://91.92.240.45/	Unknown malware	AS202412 ClickFix french-brand-imp	Lenny_3BO
2026-04-30 05:48	caravan-crm-lu.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	ton-dossier-fr.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	ta-carte-a-renouvelle.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	renouvelle-ta-carte.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	franceinfo-finance.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	liberation-eco-info.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	liberation-actu-info.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	info-livraison-relay.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	distributionsuivi-colis.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	distribmondrelay.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	distributionmondrelay.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	https://sandman.bond/api/index.php?a=dl&token=d0a5e3b511c293206448ac44451b87f717fbdfa0c2f97242082bd2f29748a486&src=sanfrancescos.com&mode=cloudflare	Vidar	Vidar	whoamix302
2026-04-30 05:48	dl.nyc-blockchain.com	FAKEUPDATES	SocGholish	monitorsg
2026-04-30 05:48	89.124.79.20:9000	SectopRAT	1xxbot ArechClient SectopRAT	whoamix302
2026-04-30 05:48	149.12.67.100:139	Xtreme RAT	ExtRat Xtreme RAT	whoamix302
2026-04-30 05:48	158.101.97.20:10001	Xtreme RAT	ExtRat Xtreme RAT	whoamix302
2026-04-30 05:48	5c2cf4d36a6d942d6beb7b27b37c380e3fd688a3bb4f8616a13d20bf80c0bbea	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	vickynewsc.xyz	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	vmailnewwqmwe.vercel.app	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	https://vmailnewwqmwe.vercel.app/new.msi	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	mapmeshsite.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	coldmeshsite.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	zone3taskhub.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	areahostunit.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	hot9taskhub.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	plot5pathgate.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	burn2pathgate.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	site8siteview.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	cool3logicnet.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	air7taskhub.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	freehostunit.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	pure9siteview.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	view8siteview.flo3xaren.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	dark2logicway.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	gold9logicway.verd7loka.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	voidmeshsite.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	lasthostunit.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	zero5pathgate.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	deep7siteview.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	dark4logicnet.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	lightmeshway.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	beam9taskhub.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	corehostunit.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	fast2pathgate.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	glow7siteview.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	dust6logicway.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	leap7pathgate.quantumbitlink.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	cloudmeshsite.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	gas3taskhub.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	ionhostunit.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	faint5pathgate.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	deep8siteview.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	ray2logicnet.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	highmeshnode.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	firehostunit.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	hard4pathgate.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	gearhostunit.torquegridunit.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	pure9siteview.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	spin2pathgate.torquegridunit.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	turn5logicway.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	pathmeshsite.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	loop3taskhub.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	sidehostunit.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	axis8pathgate.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	basehostunit.staticmeshview.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	peak7logicnet.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	cold6siteview.staticmeshview.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	topmeshnode.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	move2logicnet.kineticgatehub.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	up5pathgate.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	sky9siteview.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	rush4pathgate.kineticgatehub.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	math4logicway.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	sleeve-stadium-pubs-javascript.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	peace-ray-unnecessary-dave.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	wet-envelope-beam-laser.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	katrina-teenage-documentation-auction.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	cst-lap-racing-authentic.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	cams-sphere-airline-drums.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	proceedings-essay-pricing-includes.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	96e157a49e9b3667d9c0838743a5cff48803e7062357853d2cd3f430c05c181c	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	230b693565c103966ab2e05691554765a434628d672b37d757ea130eff2c8e21	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	a24730b62777b46bf22b83c08d470b9a85e22dccebf23635de2ca8cb72267325	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	207d964e8254633cff1059ed62c2cc9fe67cedd83094bb2b61b9a430f924749b	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	5478d1fe4f979f6a9a456d50dd84d18b04294701c9128eabcef412f6779a39b4	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	8e248505b6cd87d2e27ed40541c2b2933113380da27bc75458d62d419e732f8d	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	1382fbfcc7691d404b2202838270efd4137d4a4964047b94f2ed1dfabb407741	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	c85d73b0dbe1a5ff6a25e8980b0639d7309d9a97d2f5d799fb337bb36f217744	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	b538e0e8a2add9ee49386771563804ec64f71cb592196c9cd415f535799db13d	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	832326f3a377973a35cb465bd3510f5f6199c7454a0e0557e4f95b85313a76a5	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	6056329246bf6ef61ff8eae8bf7697ea59bfc3413cd7c9ce338e51e302264f46	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	39c3267609ba685febfd9e385dd17d2fec28a79c3fc9b9d787aa411e4e2bd87f	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	26b35f04cd53782196ef2f56f1f0b37866f0b685c7e2e4c8b84495e01c91917f	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	06c9d67ad7d9d11e12b2f167cc22e1ea538df4b28f85fc6e00c36e9bcdaec043	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	c978e8310f179fc5a3a3275a81d57ed8e95705f00b24d205dff705502e942f41	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	218628edc95f7c425fad294048adca65e235ae3024f084c9afaf483f66f71b6c	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	14526f645590fc1e29557efb1e177b641c8caca50fb6246611940d329edf9eac	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	aaf15e8f685f8801ea6a605150b3739797ba8a2bfee6838d045368adfe3d62e1	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	13a6420822dab0d4ca6c1b422c66e5dd3a59637588279097efe47f7e553eb849	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	6b45e1a38609b9b7f2f2508b0b38f700a75ee1ea9b6c548d1a086bd91863efc3	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	bd3a7e2805d2f6f371366d6847998843b98298a748c45dd3ef6014b85697c4ae	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	f38cd6aa26981ba1eea4fb0ec8f9db212e518f65f28556e108ef74d92e4809b6	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	f2caaf774ab4ac5e7b5d9299117eb1bad22e025a2e530ffc29496456760390b6	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	d191615b7c6db1ce70af1a6f4849f3e1933e4609c58d84273c643ff1c20f5ded	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	71fc6f86d7ab21afe5ef5954e8a17443f2a1999a4c30ed837da9baaecff71da8	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	c0d5366786aae498e155b1321e70793cec440563891757a5f5f7a374984d2b10	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:46	tourimex.com	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-04-30 05:46	edwinmsarmiento.com	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-04-30 05:46	aeronbranding.com	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-04-30 05:46	precosdemotos.com.br	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-04-30 05:46	dokunmatikekrandegisimi.com	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-04-30 05:46	sanfrancescos.com	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-04-30 05:46	match3taskhub.zora7vex.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	skillhostunit.zora7vex.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	win2siteview.zora7vex.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	key8taskhub.lumi4ren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	5.252.177.183:443	Unknown malware	ClickFix iex MIVOCLOUD powershell	Lenny_3BO
2026-04-30 05:46	lockhostunit.lumi4ren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	safe4pathgate.lumi4ren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	cryptmeshsite.lumi4ren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	vault5logicway.lumi4ren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	chip2logicway.lo4miren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	verifi-cation.com	Remus	Remus	orlof_v
2026-04-30 05:46	clou-dprotect.co	Remus	Remus	orlof_v
2026-04-30 05:46	pro9pathgate.zora7vex.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	https://satserfield.com/file.js	KongTuke	Kongtuke	monitorsg
2026-04-30 05:46	satserfield.com	KongTuke	Kongtuke	monitorsg
2026-04-30 05:46	https://satserfield.com/t	KongTuke	Kongtuke	monitorsg
2026-04-30 05:46	https://satserfield.com/g	KongTuke	Kongtuke	monitorsg
2026-04-30 05:46	https://satserfield.com/c	KongTuke	Kongtuke	monitorsg
2026-04-30 05:46	teampurenode.zora7vex.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	spin3taskhub.dra7vexa.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	relay-craft.grov9essa.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	xvwwhz.flo7ravia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	ser-meshal.flo5renth.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	re1ay8-zone.verd2onis.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:46	ywqcdgz.flo7ravia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	freightflow.verd2onis.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	socialformat.verd2onis.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	arknex1ix.flo5renth.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	gpfaz8x.verd2onis.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	fabriclattic.verd2onis.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	przvbelk.verda7lya.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	znsb.verda7lya.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	daralteb.net	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	varysz
2026-04-30 05:45	frag7logicnet.zora7vex.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	illumemedia.peta8mora.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	rucbhks.grov3elia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	sol-crestor.grov3elia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	https://safecore.top/trace/principal-core.php	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 05:45	safecore.top	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 05:45	https://safecore.top/trace/rate-core.js	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 05:45	kevh.grov3elia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	c4rrie3-node.grov3elia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	kqwgc4.grov3elia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	imea.flo7ravia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	6352.grov9essa.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:45	solvenon4.flo7ravia.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:35	starthostunit.kineticgatehub.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 05:30	dash7taskhub.kineticgatehub.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 05:24	flowmeshnode.kineticgatehub.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 05:07	hold8pathgate.staticmeshview.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:56	firm3taskhub.staticmeshview.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:50	staymeshsite.staticmeshview.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:45	stop5logicway.staticmeshview.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:39	fast7siteview.torquegridunit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:22	bolt9taskhub.torquegridunit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:16	turnmeshnode.torquegridunit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:11	axis4logicnet.torquegridunit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:05	hide8siteview.cryptosyncflow.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 04:00	lock5pathgate.cryptosyncflow.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:54	signhostunit.cryptosyncflow.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:50	117.50.71.2:9999	ValleyRAT	valleyrat_s2	abuse_ch
2026-04-30 03:48	key6taskhub.cryptosyncflow.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:45	94.156.250.190:7781	RatonRAT	RatonRAT	abuse_ch
2026-04-30 03:45	http://94.250.250.235/generatormobile/supportmobile/phpframe/php/localServerdataMath/antiprodhtoppool/ruleServerWar/prod/phpcutrule/record/WarpluginCam/plugincore/limit/videoLinesecurebigloadsql.php	DCRat	dcrat RAT	abuse_ch
2026-04-30 03:45	129.151.142.36:3229	NjRAT	njrat	abuse_ch
2026-04-30 03:45	129.151.142.36:2232	NjRAT	njrat	abuse_ch
2026-04-30 03:42	codemeshsite.cryptosyncflow.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:40	xzx.uk.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-30 03:40	aanthuys.nl	Nanocore RAT	NanoCore	abuse_ch
2026-04-30 03:40	asm.it.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-30 03:35	172.67.164.185:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:35	104.21.50.178:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:35	104.21.27.243:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:35	172.67.169.216:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:35	172.67.213.117:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:35	104.21.37.211:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:35	104.21.30.121:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:35	hash3logicway.cryptosyncflow.bet	ClearFake	ClearFake	Anonymous
2026-04-30 03:35	172.67.172.230:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 03:29	jump2siteview.quantumbitlink.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:17	corehostunit.quantumbitlink.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:12	wave4taskhub.quantumbitlink.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:06	spinmeshnode.quantumbitlink.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 03:01	atom9logicnet.quantumbitlink.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 02:55	safe7siteview.verd7loka.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 02:50	mint2pathgate.verd7loka.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 02:44	bankhostunit.verd7loka.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 02:38	coin4taskhub.verd7loka.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 02:32	richmeshsite.verd7loka.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 02:12	rate5pathgate.flo3xaren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 02:02	parihostunit.flo3xaren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 01:57	prob6taskhub.flo3xaren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 01:51	statmeshnode.flo3xaren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 01:46	math3logicnet.flo3xaren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 01:38	glow7siteview.grov6mira.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 01:25	firehostunit.grov6mira.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 01:03	cash8siteview.peta1vrix.bet	ClearFake	ClearFake	Anonymous
2026-04-30 01:00	https://bbi.nossamidia.net.br/	Vidar	Vidar	crep1x
2026-04-30 01:00	https://bbi.yutikeyu.com/	Vidar	Vidar	crep1x
2026-04-30 01:00	bbi.nossamidia.net.br	Vidar	Vidar	crep1x
2026-04-30 01:00	bbi.yutikeyu.com	Vidar	Vidar	crep1x
2026-04-30 00:57	pay5pathgate.peta1vrix.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 00:43	pull2taskhub.peta1vrix.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 00:38	reelmeshnode.peta1vrix.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 00:30	slot7logicnet.peta1vrix.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 00:24	wild9siteview.so8laven.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 00:18	jack4pathgate.so8laven.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 00:12	acehostunit.so8laven.bet	ClearFake	ClearFake	Anonymous
2026-04-29 23:54	rank3logicway.so8laven.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 23:48	fast7siteview.mist5qora.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 23:37	lasthostunit.mist5qora.bet	ClearFake	ClearFake	Anonymous
2026-04-29 23:25	playmeshnode.mist5qora.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 23:20	game5logicnet.mist5qora.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 23:15	open8siteview.niva2ron.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 23:15	https://financialexpress.com.au/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-29 23:09	free3pathgate.niva2ron.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 22:57	null7taskhub.niva2ron.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 22:52	voidmeshsite.niva2ron.bet	ClearFake	ClearFake	Anonymous
2026-04-29 22:40	drop9siteview.thora9xel.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 22:29	edgehostunit.thora9xel.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 22:23	face2taskhub.thora9xel.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 22:18	rollmeshnode.thora9xel.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 21:59	ante4pathgate.lo4miren.bet	ClearFake	ClearFake	Anonymous
2026-04-29 21:53	bankhostunit.lo4miren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 21:47	fold7taskhub.lo4miren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 21:42	dealmeshsite.lo4miren.bet	ClearFake	ClearFake	Anonymous
2026-04-29 21:36	ogicway.lo4miren.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 21:30	https://yutikeyu.com/	Vidar	Vidar	crep1x
2026-04-29 21:26	luck9siteview.dra7vexa.bet	ClearFake	ClearFake	Anonymous
2026-04-29 21:20	deck5pathgate.dra7vexa.bet	ClearFake	ClearFake	Anonymous
2026-04-29 21:14	cardhostunit.dra7vexa.bet	ClearFake	ClearFake	Anonymous
2026-04-29 21:11	https://nig.nossamidia.net.br/	Vidar	lv80gzr Vidar	abuse_ch
2026-04-29 21:11	nig.nossamidia.net.br	Vidar	lv80gzr Vidar	abuse_ch
2026-04-29 21:04	riskmeshnode.dra7vexa.bet	ClearFake	ClearFake	Anonymous
2026-04-29 20:59	odds8logicnet.dra7vexa.bet	ClearFake	ClearFake	threatcat_ch
2026-04-29 20:35	104.168.70.158:2404	Remcos	remcos	abuse_ch
2026-04-29 20:35	104.168.70.158:5000	Remcos	remcos	abuse_ch
2026-04-29 19:44	vtc3eae.verda7lya.garden	ClearFake	ClearFake	Anonymous
2026-04-29 19:32	hyper-fund.verda7lya.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 19:21	cliff2-vault.verda7lya.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 19:14	frameworkjsbns.beer	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-29 19:09	image-hold.flo5renth.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 18:59	l6ms.flo5renth.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 18:53	vine-lab.flo5renth.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 18:29	9takl.grov9essa.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 18:23	vupvuar8.grov9essa.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 18:18	out13-stream.grov9essa.garden	ClearFake	ClearFake	Anonymous
2026-04-29 18:12	microbeforest.petalu1ne.garden	ClearFake	ClearFake	Anonymous
2026-04-29 18:07	zen-coreet.petalu1ne.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 18:01	ultra-rnetr1.petalu1ne.garden	ClearFake	ClearFake	Anonymous
2026-04-29 18:00	mnt.nossamidia.net.br	Vidar	Vidar	crep1x
2026-04-29 18:00	https://mnt.nossamidia.net.br/	Vidar	Vidar	crep1x
2026-04-29 18:00	mnt.yutikeyu.com	Vidar	Vidar	crep1x
2026-04-29 18:00	https://mnt.yutikeyu.com/	Vidar	Vidar	crep1x
2026-04-29 17:56	hqyqbe.petalu1ne.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 17:47	meta-rnass1v.petalu1ne.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 17:35	fj0r8-chain.so6lavern.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 17:29	dyncorear.so6lavern.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 17:22	urbandeep.so6lavern.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 17:20	https://springvc.cyou	Lumma Stealer	Lumma	abuse_ch
2026-04-29 17:16	bundlfilter.so6lavern.garden	ClearFake	ClearFake	threatcat_ch
2026-04-29 17:14	seering5outh.digital	ClearFake	29April2026 ClearFake Commandline macOS	Gi7w0rm
2026-04-29 17:14	arkmarkar2.lunav8era.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-29 17:14	neo-tr3nd.lunav8era.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-29 17:14	serlithos.mist3briar.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-29 17:14	vel-valeis.mist3briar.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-29 17:14	banner-stack.so6lavern.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-29 17:14	nor-tideum.ve7loria.garden	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-29 17:14	glowmedaesthetics.com	Unknown Stealer	MacSync	tanner
2026-04-29 17:02	0njmhe52.mist3briar.garden	ClearFake	ClearFake	Anonymous
2026-04-29 16:57	lwmbun.mist3briar.garden	ClearFake	ClearFake	threatcat_ch