ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.

1'011

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'672'804

IOCs in corpus

Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

ioc:ms-debug-services.com ( run)
malware:CobaltStrike ( run)
tag:TA505 ( run)
threat_type:cc_skimming ( run)
uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)	IOC	Malware	Tags	Reporter
2026-05-01 04:38	beam8pathgate.mero2beam.surf	ClearFake	ClearFake	Anonymous
2026-05-01 04:21	lightmeshsite.mero2beam.surf	ClearFake	ClearFake	Anonymous
2026-05-01 04:16	ray2logicway.mero2beam.surf	ClearFake	ClearFake	Anonymous
2026-05-01 04:01	stay7pathgate.kali9drift.surf	ClearFake	ClearFake	Anonymous
2026-05-01 03:36	move9logicnet.kali9drift.surf	ClearFake	ClearFake	Anonymous
2026-05-01 03:16	ionhostunit.voda4flux.surf	ClearFake	ClearFake	Anonymous
2026-05-01 02:54	flow4logicway.voda4flux.surf	ClearFake	ClearFake	Anonymous
2026-05-01 02:43	98.97.125.70:8883	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	95.111.250.175:5435	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	98.81.111.167:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	94.198.96.164:55025	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	94.198.96.164:52452	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	94.176.3.228:48765	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	94.154.35.73:1111	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	94.154.35.160:6466	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	94.154.35.160:1234	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	93.127.134.156:80	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	91.219.238.234:2700	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	91.215.85.151:47653	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	91.202.233.153:43555	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	90.58.26.10:6060	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	89.125.50.18:30031	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	85.155.186.2:3821	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	85.121.5.202:5689	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	84.54.33.7:6745	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	84.54.33.227:7829	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	83.98.39.54:8443	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	83.98.39.53:8443	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	83.97.20.133:80	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	83.136.209.49:56003	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	83.97.20.133:443	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	83.136.209.49:56002	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	83.136.209.49:56001	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	81.229.251.143:443	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	80.96.113.212:8080	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	80.96.109.95:7443	Unknown malware	Covenant drb-ra	abuse_ch
2026-05-01 02:43	79.135.160.20:9999	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	66.163.115.78:8808	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	66.85.27.18:80	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	68.64.178.130:9900	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	72.56.246.58:443	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	72.56.246.58:8080	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	62.81.188.1:443	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	62.171.150.165:7777	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	62.164.177.229:8088	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	52.198.162.251:16000	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	66.163.115.78:6606	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	66.163.115.78:7707	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	46.243.205.154:10666	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	46.101.77.223:3333	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	45.95.232.195:54655	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	5.75.185.142:443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	5.42.221.153:443	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	5.255.111.155:32543	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	45.77.127.102:8808	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	45.81.243.52:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	45.77.127.102:7707	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	45.67.228.215:4323	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	45.56.91.55:2003	Unknown malware	Covenant drb-ra	abuse_ch
2026-05-01 02:43	45.155.69.175:42455	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	45.155.69.106:42211	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	45.154.25.64:41236	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	45.144.137.216:38271	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	45.125.67.171:8443	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	43.142.77.170:80	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	43.142.77.170:443	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	43.134.133.177:8445	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	38.76.217.23:9443	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	43.160.225.40:39001	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	38.60.134.130:62858	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	38.54.119.24:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	38.54.108.229:19433	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	38.255.44.50:57893	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	37.72.140.15:5555	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	31.57.184.48:6523	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	31.57.184.48:2583	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	31.57.184.154:8808	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	222.255.100.119:8080	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	23.227.203.6:42235	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	23.27.143.222:2850	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	3.113.66.233:80	Brute Ratel C4	BruteRatel drb-ra	abuse_ch
2026-05-01 02:43	216.107.208.250:10444	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	216.126.239.161:3333	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	217.28.130.143:443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	217.60.38.14:14421	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	219.142.15.101:4353	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	220.231.47.163:4353	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	221.130.42.19:4353	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	207.107.147.42:4438	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	208.249.244.20:443	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	209.151.145.164:8443	DeimosC2	Deimos drb-ra	abuse_ch
2026-05-01 02:43	209.38.248.122:9443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	212.227.93.107:3333	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	212.43.144.122:9346	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	213.199.35.149:80	Brute Ratel C4	BruteRatel drb-ra	abuse_ch
2026-05-01 02:43	2.27.29.65:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	202.171.43.176:443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	202.181.24.236:8443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	202.95.17.188:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	206.189.40.107:443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	194.156.89.88:7707	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	194.156.89.88:8808	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	194.37.80.126:4430	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	198.135.54.83:1995	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	198.23.176.38:8080	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	192.109.200.183:6606	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	192.109.200.183:7707	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	192.109.200.183:8808	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	193.112.115.127:8989	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	193.112.169.214:30892	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	193.23.137.40:3334	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	194.156.89.88:6606	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	185.242.3.83:9909	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	185.247.224.40:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	188.137.176.37:7707	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	188.137.183.184:9165	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	188.137.250.221:8593	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	188.73.162.175:9443	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	192.109.200.183:4040	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	185.212.128.81:9000	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	185.212.129.23:9000	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	185.212.129.24:9000	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	185.212.129.29:9000	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	185.212.129.30:9000	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	185.213.20.250:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	185.242.245.120:42534	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	180.184.29.135:8080	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	182.255.45.114:4848	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	185.122.171.4:44355	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	185.163.204.62:963	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	185.163.204.62:972	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	185.212.128.25:9000	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	185.212.128.48:9000	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	173.249.214.203:3333	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	178.16.52.105:207	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	178.16.52.22:8396	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	178.16.53.117:35630	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	179.43.140.225:1488	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	172.94.17.208:72	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	172.94.17.208:73	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	172.94.17.208:79	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	173.211.106.231:21321	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	173.242.59.199:8888	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	162.243.100.39:3333	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	162.243.64.101:3333	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	166.88.4.28:3333	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	172.111.151.97:67	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	172.111.162.252:3030	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	172.9.165.216:8096	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	172.93.144.164:8580	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	153.75.224.159:5400	BianLian	BianLian drb-ra	abuse_ch
2026-05-01 02:43	154.219.115.123:60001	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	156.238.236.249:7930	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	158.94.209.132:99	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	158.94.209.132:999	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	161.248.179.92:1111	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	161.248.179.92:9999	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	162.14.124.25:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	149.104.110.163:59349	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	149.104.28.204:3656	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	149.104.66.230:53661	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	149.56.190.92:7777	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	150.230.160.171:443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	151.158.1.2:3333	Evilginx	drb-ra EvilGinx EvilGoPhish	abuse_ch
2026-05-01 02:43	151.236.4.135:443	DanaBot	DanBot drb-ra	abuse_ch
2026-05-01 02:43	142.93.88.220:443	Havoc	drb-ra Havoc	abuse_ch
2026-05-01 02:43	143.198.52.66:7707	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	143.198.52.66:8808	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	144.172.102.234:47653	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	144.172.65.125:4786	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	144.172.65.231:7001	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	130.94.41.162:8443	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	134.175.253.242:8989	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	137.220.137.66:6606	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	137.220.137.66:8808	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	138.124.113.131:4211	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	138.197.119.51:7443	Unknown malware	Covenant drb-ra	abuse_ch
2026-05-01 02:43	139.64.164.72:63337	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	115.42.60.122:5440	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	117.72.101.55:9520	Chaos	CHAOS drb-ra	abuse_ch
2026-05-01 02:43	119.91.247.247:8989	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	130.49.214.74:52452	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	130.49.214.74:55025	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	130.94.23.39:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	103.151.52.35:3306	AsyncRAT	asyncrat drb-ra RAT	abuse_ch
2026-05-01 02:43	103.57.250.99:41895	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	103.75.190.47:54630	DCRat	dcrat drb-ra RAT	abuse_ch
2026-05-01 02:43	104.234.174.93:57712	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	106.55.71.62:8989	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	114.132.133.191:8989	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	115.190.247.97:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:43	102.209.118.229:4321	AdaptixC2	AdaptixC2 drb-ra	abuse_ch
2026-05-01 02:07	site8siteview.colorist-resignat.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 02:05	7326.info	XWorm	XWorm	abuse_ch
2026-05-01 02:00	jump5pathgate.colorist-resignat.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 01:55	flowhostunit.colorist-resignat.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 01:38	step6logicway.colorist-resignat.bet	ClearFake	ClearFake	Anonymous
2026-05-01 01:25	melt8pathgate.chaevodh0t.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 01:19	ionhostunit.chaevodh0t.bet	ClearFake	ClearFake	Anonymous
2026-05-01 00:57	time6siteview.centenary-kurgan.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 00:49	next1pathgate.centenary-kurgan.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 00:44	datehostunit.centenary-kurgan.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 00:33	longmeshsite.centenary-kurgan.bet	ClearFake	ClearFake	threatcat_ch
2026-05-01 00:22	term4logicway.centenary-kurgan.bet	ClearFake	ClearFake	Anonymous
2026-05-01 00:09	fade2pathgate.colorfu1prep.bet	ClearFake	ClearFake	Anonymous
2026-05-01 00:01	starthostunit.colorfu1prep.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 23:32	soil9siteview.goddess-tapir.bet	ClearFake	ClearFake	Anonymous
2026-04-30 23:20	leafhostunit.goddess-tapir.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 23:15	grow6taskhub.goddess-tapir.bet	ClearFake	ClearFake	Anonymous
2026-04-30 23:09	rootmeshsite.goddess-tapir.bet	ClearFake	ClearFake	Anonymous
2026-04-30 23:04	wild3logicway.goddess-tapir.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 22:47	nonehostunit.eleuther-stupidity.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 22:41	null1taskhub.eleuther-stupidity.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 22:34	openmeshsite.eleuther-stupidity.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 22:30	https://trb.ambil-disini.web.id/	Vidar	Vidar	crep1x
2026-04-30 22:30	trb.plugazapp.com.br	Vidar	Vidar	crep1x
2026-04-30 22:30	https://trb.plugazapp.com.br/	Vidar	Vidar	crep1x
2026-04-30 22:30	trb.ambil-disini.web.id	Vidar	Vidar	crep1x
2026-04-30 22:28	free5logicway.eleuther-stupidity.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 22:11	hostunitgate.lookin8back.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 22:06	seek2taskhub.lookin8back.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 21:57	findmeshnode.lookin8back.bet	ClearFake	ClearFake	Anonymous
2026-04-30 21:29	fakehostunit.kutsy-proquac.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 21:23	mock7taskhub.kutsy-proquac.bet	ClearFake	ClearFake	Anonymous
2026-04-30 21:18	testmeshsite.kutsy-proquac.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 21:12	pure3logicway.kutsy-proquac.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 21:07	null9siteview.dismemb7harlot.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 21:01	drop5pathgate.dismemb7harlot.bet	ClearFake	ClearFake	Anonymous
2026-04-30 20:55	voidhostunit.dismemb7harlot.bet	ClearFake	ClearFake	Anonymous
2026-04-30 20:45	https://vectorgridzone.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-30 20:45	vectorgridzone.digital	Unknown malware	macOS	HuntYethHounds
2026-04-30 20:44	splitmeshnode.dismemb7harlot.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 20:35	part6logicnet.dismemb7harlot.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 20:29	term5siteview.years-quackery.bet	ClearFake	ClearFake	Anonymous
2026-04-30 20:23	next3pathgate.years-quackery.bet	ClearFake	ClearFake	Anonymous
2026-04-30 20:11	past8taskhub.years-quackery.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 20:06	https://olnsclaud.beer/api/css.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 20:06	olnsclaud.beer	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 20:03	zoofieiceroseoware.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 20:01	timemeshsite.years-quackery.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 20:00	livekeypagespace.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 20:00	https://abs.ambil-disini.web.id/	Vidar	Vidar	crep1x
2026-04-30 20:00	abs.plugazapp.com.br	Vidar	Vidar	crep1x
2026-04-30 20:00	https://abs.plugazapp.com.br/	Vidar	Vidar	crep1x
2026-04-30 20:00	abs.ambil-disini.web.id	Vidar	Vidar	crep1x
2026-04-30 19:55	exchangesys.monster	Unknown malware	ClickFix	threatcat_ch
2026-04-30 19:53	bestzonedomainzone.com	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:52	long4logicway.years-quackery.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 19:51	bestzlearnkeyzone.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:49	zoomloungepodbytefile.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:48	wayfeedfivelyticfile.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:46	softifybitmixfile.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:45	recognizecentibox.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:44	livespacezonelink.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:43	learnpageflowhub.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:42	learnnextpagecore.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:38	bestzkeyflowhub.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:36	data2pathgate.everfo7mat.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 19:33	learnzonepagehub.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:32	alldigipathplazz.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:31	livespacenextzone.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:31	agidelgembee.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:31	savehostunit.everfo7mat.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 19:31	fastlistjabberboxvinu.com	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:30	bestzrealpagehub.monster	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 19:25	wipe3taskhub.everfo7mat.bet	ClearFake	ClearFake	Anonymous
2026-04-30 19:11	form9logicnet.everfo7mat.bet	ClearFake	ClearFake	Anonymous
2026-04-30 19:00	post5pathgate.expresser-pray.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 18:54	flowhostunit.expresser-pray.bet	ClearFake	ClearFake	Anonymous
2026-04-30 18:43	82.156.219.31:8443	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-04-30 18:43	39.105.74.52:443	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-04-30 18:43	39.105.74.52:80	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-04-30 18:43	193.53.127.220:443	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-04-30 18:43	149.88.73.40:4443	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-04-30 18:43	www.microsslcheck.com	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-04-30 18:43	releases-export-finishing-phillips.trycloudflare.com	Cobalt Strike	CobaltStrike drb-ra	abuse_ch
2026-04-30 18:37	rushmeshsite.expresser-pray.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 18:31	fast7logicway.expresser-pray.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 18:25	chip9siteview.technic2lweak.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 18:19	firm4pathgate.technic2lweak.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 18:15	https://swiftwraps.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 18:15	https://masajetantricos.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 18:14	basehostunit.technic2lweak.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 18:00	hardmeshnode.technic2lweak.bet	ClearFake	ClearFake	Anonymous
2026-04-30 17:53	tech3logicnet.technic2lweak.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 17:43	moni8-wave.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	volt8logicnet.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	ampmeshnode.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	watt2taskhub.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	https://lone.design/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://ariavan.ir/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://oil24.kz/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://thewatchspa.it/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://saohaivuong.com/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://ghaith.om/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://fbdownhd.com/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://paramviracademy.com/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://lasceltamigliore.com/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	https://ugglamassage.se/xmlrpc.php	GootLoader	gootloader v3	Gi7w0rm
2026-04-30 17:43	mars8-path.pavi1xen.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	gxamkq.producer5chming.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	pfgkkq.pavi1xen.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	66.97.39.94:8080	Chaos	AS27823 CHAOS Dattatec.com	antiphishorg
2026-04-30 17:43	mu62lt.pavi1xen.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	schedule.re-canada.com	FAKEUPDATES	SocGholish	monitorsg
2026-04-30 17:43	loadhostunit.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	sailree.herod-terminology.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	fuse5pathgate.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	grid9siteview.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	vaci-cloud.b-cdn.net	Unknown malware	ClickFix fingerfix python-sideload	Lenny_3BO
2026-04-30 17:43	kenoshakickersfilms.com	Unknown malware	ClickFix fingerfix python-sideload	Lenny_3BO
2026-04-30 17:43	https://vaci-cloud.b-cdn.net/Python.zip	Unknown malware	ClickFix fingerfix python-sideload	Lenny_3BO
2026-04-30 17:43	185.216.71.59:443	Unknown malware	ClickFix fingerfix python-sideload	Lenny_3BO
2026-04-30 17:43	45.88.191.76:443	Unknown malware	ClickFix fingerfix python-sideload	Lenny_3BO
2026-04-30 17:43	7c54bcf3aea8348e8902cac80eb0df31b43a71601a62e2514087fef40a416bfd	Unknown malware	ClickFix fingerfix novii python-sideload	Lenny_3BO
2026-04-30 17:43	02b507b498e280578b56974382519a5fee608208d6ad8e724032eade83bec8d9	Unknown malware	ClickFix fingerfix novii python-sideload	Lenny_3BO
2026-04-30 17:43	novayastaruxa.com	Unknown malware	novii python-rat winhttp-websocket	Lenny_3BO
2026-04-30 17:43	echo4logicway.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	form7-beam.herod-terminology.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	gain7taskhub.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	ping4logicnet.dusherport2ge.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:43	tune3pathgate.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	vibe8siteview.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	routehostunit.dusherport2ge.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	portmeshnode.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	link8siteview.dusherport2ge.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	sync2taskhub.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	undo5logicway.undo-wingless.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	datahostunit.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	byte5pathgate.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	null9siteview.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	ptk2.xyz	Unknown RAT		Anonymous
2026-04-30 17:42	mgnext2.xyz	Unknown RAT		Anonymous
2026-04-30 17:42	mgtv3.xyz	Unknown RAT		Anonymous
2026-04-30 17:42	map4logicway.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:42	last9pathgate.undo-wingless.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 17:36	stephostunit.undo-wingless.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 17:30	redo2taskhub.undo-wingless.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 17:24	backmeshsite.undo-wingless.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 17:15	https://anfitrionastrabajo.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 17:05	port3pathgate.dusherport2ge.bet	ClearFake	ClearFake	Anonymous
2026-04-30 16:56	trace7taskhub.dusherport2ge.bet	ClearFake	ClearFake	Anonymous
2026-04-30 16:49	hopmeshnode.dusherport2ge.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 16:35	crysta-close.herod-terminology.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 16:22	zenvaleet.herod-terminology.bet	ClearFake	ClearFake	Anonymous
2026-04-30 16:16	slxhibx.herod-terminology.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 16:15	https://powerhouselaw.com.au/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 16:15	https://powerhouselaw.sydney/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 16:00	encod-vault.herod-terminology.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:55	repa1r-track.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:49	lab1-branch.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:40	38.240.51.143:43557	Quasar RAT	quasar	abuse_ch
2026-04-30 15:36	talline8al.producer5chming.bet	ClearFake	ClearFake	Anonymous
2026-04-30 15:30	rapidassay.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:24	rur4l-signal.producer5chming.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:19	igqe.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:13	yagzws04.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 15:05	1oca1-trail.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:57	m4rk-grid.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:54	atomchec.belief-handcraft.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:54	brookneuro.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:52	67mvmowu.belief-handcraft.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:46	m01e-node.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	sales-loop.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	cliffcatalog.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	ks3fup.grov6lira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:46	ijfitce.dis9ualescapes.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:33	clos-aut.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:28	serven8on.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:22	d90aaos.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:19	routeligh.decommiss-mint.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	moralcinema.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	5il3nt4-mesh.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	jqh9drh.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	mermesh0ar.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	tallithar9.verdi7rax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	labelnotifier.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	neuronmeado.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	velcore8en.decommiss-mint.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	https://ambergrid.top/private/acl-schema.js	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	ambergrid.top	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	https://ambergrid.top/private/oauth-thread.php	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	https://ambergrid.top/private/role-partial.js	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 14:19	courierree.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	gkrhs.dis9ualescapes.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:19	vorlith6um.flen3qor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 14:17	meta-fr0z.dis9ualescapes.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 14:15	api.drazyland.us	Unknown malware		abuse_ch
2026-04-30 14:15	remote.drazyland.us	Unknown malware		abuse_ch
2026-04-30 14:15	http://drazyland.us/api/clients/update-system	Unknown malware		abuse_ch
2026-04-30 14:15	https://tophealth.es/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 14:15	drazyland.us	Unknown malware		abuse_ch
2026-04-30 14:15	https://genuinelink.net/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 14:15	http://drazyland.us/api/clients/register	Unknown malware		abuse_ch
2026-04-30 14:11	176.10.125.15:8443	Unknown malware		abuse_ch
2026-04-30 14:11	centralcoretech.com	Unknown malware		abuse_ch
2026-04-30 14:11	https://tee.ambil-disini.web.id/	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:11	tee.ambil-disini.web.id	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:11	tee.plugazapp.com.br	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:11	https://tee.plugazapp.com.br/	Vidar	lv80gzr Vidar	abuse_ch
2026-04-30 14:02	154.218.3.146:8853	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-30 14:02	154.218.3.146:7070	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-30 14:02	yu3dc.com	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-30 13:59	ivoryencoder.decommiss-mint.bet	ClearFake	ClearFake	Anonymous
2026-04-30 13:51	fa1th3-wave.decommiss-mint.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:43	8ugxvfg.decommiss-mint.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:37	repocra.decommiss-mint.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:35	158.160.75.185:40675	RatonRAT	RatonRAT	abuse_ch
2026-04-30 13:30	172.67.135.218:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 13:30	104.21.26.101:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 13:26	meadopacka.convinc8mission.bet	ClearFake	ClearFake	Anonymous
2026-04-30 13:22	darkdelivery.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:20	microsummit.sali8mor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:20	https://lucidanchor.top/private/oauth-thread.php	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	lucidanchor.top	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	https://lucidanchor.top/private/role-partial.js	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	http://172.96.137.141	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	http://104.36.229.33	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	https://getprismledger.com/pop	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	getprismledger.com	SmartApeSG	SmartApeSG	monitorsg
2026-04-30 13:20	innerazur.sali8mor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:20	opticdrive.sali8mor.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:17	ui5cn.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:15	https://thynkia.net/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 13:11	781q.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:05	kqhgw.convinc8mission.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 13:00	quorcore1ix.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:00	meta-0bse.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:00	vwpsn3.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 13:00	st1t7-trace.convinc8mission.bet	ClearFake	ClearFake	Anonymous
2026-04-30 12:55	8.145.41.135:808	Cobalt Strike	CobaltStrike cs-watermark-391144938	abuse_ch
2026-04-30 12:55	47.82.234.15:80	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-30 12:55	101.43.29.69:80	Cobalt Strike	CobaltStrike cs-watermark-666666666	abuse_ch
2026-04-30 12:55	47.111.1.176:8888	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-30 12:54	kelvenet8.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:46	toj4.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:40	zzpy.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:33	3yd5.dark-salittle.bet	ClearFake	ClearFake	Anonymous
2026-04-30 12:31	fire7siteview.fluxunitzone.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	sdfnet.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	gate.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	cipher-meado.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	55da.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	ix9n.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	k29f.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	zenmarkos.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	lum-forgeen.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	soci-vector.vexa7lorn.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	kel-coreex.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	qba10o.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	vorcrestal9.furrow-praise.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	foxultra.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	ultra-d1scov.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	wild-broo.mira4then.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	softpayload.retellin8tolle.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	04cfyd.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	pipelinetempo.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	cz34e.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	quordraar.zori9vax.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	packfall.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	index-dock.coraprimat0sis.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	proto-outl3.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	hyper-ve1ve.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	cedartone.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	chan5-trail.nelo2qir.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	notifie-plate.thora5ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:31	185.102.115.84:443	Unknown malware	chacha20-poly1305 kb_botnet max_panel socket.io	Lenny_3BO
2026-04-30 12:31	86420c8dfedcacad48c8b4c2cb89a1f68a3e59002d396d36b955d7531aa9b6fc	Unknown malware	chacha20-poly1305 kb_botnet socket.io x25519	Lenny_3BO
2026-04-30 12:31	site4siteview.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	step1taskhub.vectorpathsys.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	long3siteview.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	gate5logicway.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	openmeshsite.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	new7taskhub.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	hostunitgate.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	path2pathgate.novapath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	dash9pathgate.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	abc.ilptour.com	ValleyRAT		johannes
2026-04-30 12:30	abc.petitechanson.com	ValleyRAT		johannes
2026-04-30 12:30	abc.doublemobile.com	ValleyRAT		johannes
2026-04-30 12:30	mcagov.cc	ValleyRAT		johannes
2026-04-30 12:30	roldco.com	ValleyRAT		johannes
2026-04-30 12:30	vnc.kcii2.com	ValleyRAT		johannes
2026-04-30 12:30	abc.woopami.com	ValleyRAT		johannes
2026-04-30 12:30	abc.3mkorealtd.com	ValleyRAT		johannes
2026-04-30 12:30	abc.sudsmama.com	ValleyRAT		johannes
2026-04-30 12:30	ec2-18-208-244-120.compute-1.amazonaws.com	Unknown malware		johannes
2026-04-30 12:30	abc.fetish-friends.com	ValleyRAT		johannes
2026-04-30 12:30	techhostunit.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	datameshsite.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	byte8taskhub.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	port4pathgate.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	site2siteview.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	datahostunit.matrixhostbit.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	move1logicnet.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	flowmeshnode.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	link3logicway.astrosync.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	fast6taskhub.stardrift.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	restmeshnode.inertianetway.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	cold2pathgate.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	dark7siteview.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	none5taskhub.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	view8siteview.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	zero9logicnet.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	nullmeshnode.voidsphere.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:30	areahostunit.tensorlogicbox.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 12:21	pulseroot.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:15	5ignal8-forge.dark-salittle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:15	https://bitbirds.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-30 12:08	media-scope.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 12:02	bdecgtb.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:56	trivaleen3.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:44	rn3asur-spool.coraprimat0sis.bet	ClearFake	ClearFake	Anonymous
2026-04-30 11:38	talforgeon.coraprimat0sis.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:33	amb3-cache.retellin8tolle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:30	https://why.nossamidia.net.br/	Vidar	Vidar	crep1x
2026-04-30 11:30	https://why.yutikeyu.com/	Vidar	Vidar	crep1x
2026-04-30 11:30	why.nossamidia.net.br	Vidar	Vidar	crep1x
2026-04-30 11:30	why.yutikeyu.com	Vidar	Vidar	crep1x
2026-04-30 11:26	lummeshis1.retellin8tolle.bet	ClearFake	ClearFake	Anonymous
2026-04-30 11:21	wk4z.retellin8tolle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:07	10gic-mark.retellin8tolle.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 11:01	sub-forrn.retellin8tolle.bet	ClearFake	ClearFake	Anonymous
2026-04-30 10:55	o8x1lij5.archive-shlyah.digital	ClearFake	ClearFake	Anonymous
2026-04-30 10:55	mb7oktk3.archive-shlyah.digital	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:35	rep4-node.furrow-praise.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:29	quor-fluxum.furrow-praise.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:11	hub.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 10:06	sdafdsew.novapath.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 09:50	http://cs371620.tw1.ru/L1nc0In.php	DCRat	dcrat RAT	abuse_ch
2026-04-30 09:25	hostme.it.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-30 09:20	172.67.207.71:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 09:20	104.21.45.10:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-30 08:41	burn5pathgate.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:35	ionhostunit.fluxunitzone.bet	ClearFake	ClearFake	Anonymous
2026-04-30 08:30	glow2taskhub.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:24	heatmeshsite.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:18	melt9logicway.fluxunitzone.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:13	node8siteview.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:07	view4pathgate.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 08:02	pointcanunit.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:50	linemeshnode.vectorpathsys.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:45	path7logicnet.vectorpathsys.bet	ClearFake	ClearFake	Anonymous
2026-04-30 07:44	https://analytics16.icu/ext.d7907680dd44.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:43	https://analytics16.icu/ext-b.223652707572.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:43	https://analytics16.icu/t.188cfd3975db.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:42	https://analytics16.icu/t.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:42	analytics16.icu	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-30 07:39	site9siteview.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:38	https://cybermetasynth.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:38	cybermetasynth.digital	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:37	https://abyssalflowunit.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:36	abyssalflowunit.digital	Unknown malware	macOS	HuntYethHounds
2026-04-30 07:34	port5pathgate.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:20	scan6taskhub.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:16	158.94.211.33:7017	XWorm	XWorm	abuse_ch
2026-04-30 07:12	linkmeshsite.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 07:11	https://wonfo.it.com/p	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:10	https://wonfo.it.com/c	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:10	https://wonfo.it.com/geo	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:09	https://wonfo.it.com/t.js	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:09	wonfo.it.com	Unknown malware	ClickFix WAO Traffic	HuntYethHounds
2026-04-30 07:06	cell3logicway.matrixhostbit.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:59	dull7siteview.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:53	long2pathgate.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:47	masshostunit.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:41	wait9taskhub.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:39	https://web-interview.online/install-guide.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:39	https://web-interview.online/download.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:39	https://web-interview.online/microsoft-store.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:38	https://web-interview.online/invite.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:38	web-interview.online	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:36	https://meeting.joinzooms.com/ZOOM/Windows/install-guide.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:35	https://meeting.joinzooms.com/ZOOM/Windows/download.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:34	https://meeting.joinzooms.com/ZOOM/Windows/microsoft-store.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:34	https://meeting.joinzooms.com/ZOOM/Windows/invite.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:33	https://meeting.joinzooms.com/ZOOM/	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:33	meeting.joinzooms.com	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-30 06:32	https://googlemeet.courses/Windows/download.php	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-30 06:31	https://googlemeet.courses/Windows/invite.php	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-30 06:31	googlemeet.courses	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-30 06:30	slow4logicnet.inertianetway.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:26	31.97.61.212:8521	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:26	103.30.145.217:8768	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:25	diggero.biz	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:25	comples.biz	Unknown Stealer	RemusStealer	abuse_ch
2026-04-30 06:24	mark1siteview.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:23	lapdog.kindterra.cfd	ACR Stealer	ACRStealer	abuse_ch
2026-04-30 06:23	grantt.qumarox.icu	ACR Stealer	ACRStealer	abuse_ch
2026-04-30 06:22	roadflo.icu	ACR Stealer	ACRStealer	abuse_ch
2026-04-30 06:19	https://sandman.bond/log.php	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 06:19	grid6pathgate.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:17	https://sandman.bond/cf.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 06:17	sandman.bond	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-30 06:11	basehostunit.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:11	grid3pathgate.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:11	rule6taskhub.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:11	plotmeshsite.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 06:05	deep3taskhub.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 06:03	83.217.208.78:3011	Unknown malware		abuse_ch
2026-04-30 06:00	plotmeshsite.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 05:54	flat8logicway.tensorlogicbox.bet	ClearFake	ClearFake	threatcat_ch
2026-04-30 05:50	103.211.219.238:80	Remus	Remus	orlof_v
2026-04-30 05:50	195.19.194.107:80	Remus	Remus	orlof_v
2026-04-30 05:50	62.72.32.156:80	Remus	Remus	orlof_v
2026-04-30 05:50	76.13.17.11:80	Remus	Remus	orlof_v
2026-04-30 05:50	85.31.234.218:80	Remus	Remus	orlof_v
2026-04-30 05:50	31.97.61.212:80	Remus	Remus	orlof_v
2026-04-30 05:50	72.61.25.108:80	Remus	Remus	orlof_v
2026-04-30 05:50	148.230.76.66:80	Remus	Remus	orlof_v
2026-04-30 05:50	194.164.72.136:80	Remus	Remus	orlof_v
2026-04-30 05:50	65.21.104.235:80	Remus	Remus	orlof_v
2026-04-30 05:50	168.231.114.49:80	Remus	Remus	orlof_v
2026-04-30 05:50	95.217.206.239:80	Remus	Remus	orlof_v
2026-04-30 05:50	178.104.90.74:80	Remus	Remus	orlof_v
2026-04-30 05:50	5.189.165.117:80	Remus	Remus	orlof_v
2026-04-30 05:50	37.77.150.108:80	Remus	Remus	orlof_v
2026-04-30 05:50	high9siteview.kineticgatehub.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	45.85.147.53:80	Remus	Remus	orlof_v
2026-04-30 05:49	137.184.153.47:80	Remus	Remus	orlof_v
2026-04-30 05:49	68.183.161.221:80	Remus	Remus	orlof_v
2026-04-30 05:49	67.205.186.254:80	Remus	Remus	orlof_v
2026-04-30 05:49	78.111.111.236:80	Remus	Remus	orlof_v
2026-04-30 05:49	94.231.205.229:80	Remus	Remus	orlof_v
2026-04-30 05:49	15.235.192.42:80	Remus	Remus	orlof_v
2026-04-30 05:49	147.135.84.14:80	Remus	Remus	orlof_v
2026-04-30 05:49	89.58.10.69:80	Remus	Remus	orlof_v
2026-04-30 05:49	5.231.25.31:80	Remus	Remus	orlof_v
2026-04-30 05:49	5.45.184.254:80	Remus	Remus	orlof_v
2026-04-30 05:49	185.53.179.128:80	Remus	Remus	orlof_v
2026-04-30 05:49	79.111.111.236:80	Remus	Remus	orlof_v
2026-04-30 05:49	68.183.61.221:80	Remus	Remus	orlof_v
2026-04-30 05:49	dice6logicnet.thora9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	fusetasknode.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	linkhostunit.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	side5pathgate.thora9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	zinc8siteview.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	zero4logicway.niva2ron.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	datameshsite.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	byte7taskhub.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	loadhostunit.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	nonehostunit.niva2ron.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	port3pathgate.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	flow8siteview.nexo2ran.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	scan2logicnet.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	pingmeshnode.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	hop9taskhub.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	win9taskhub.mist5qora.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	next5pathgate.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	next2pathgate.mist5qora.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	core9logicnet.thari9xel.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	suit8siteview.lo4miren.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	fast7siteview.mira5qor.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	heat8logicway.sola8ven.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	sunmeshsite.sola8ven.bet	ClearFake	29April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	highmeshsite.so8laven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	glow3taskhub.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	king6taskhub.so8laven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	rayhostunit.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	beam5pathgate.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:49	dawn9siteview.sola8ven.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	patchmeshnode.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	run4taskhub.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	starthostunit.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	linehostunit.peta1vrix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	save2siteview.pavi1rix.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	heat4logicway.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	grid6logicway.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	http://178.16.52.232/	Unknown malware	ClickFix	Lenny_3BO
2026-04-30 05:48	http://91.92.240.45/	Unknown malware	AS202412 ClickFix french-brand-imp	Lenny_3BO
2026-04-30 05:48	caravan-crm-lu.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	ton-dossier-fr.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	ta-carte-a-renouvelle.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	renouvelle-ta-carte.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	franceinfo-finance.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	liberation-eco-info.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	liberation-actu-info.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	info-livraison-relay.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	distributionsuivi-colis.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	distribmondrelay.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	distributionmondrelay.com	Unknown malware	AS202412 ClickFix french-brand-imp phishing	Lenny_3BO
2026-04-30 05:48	https://sandman.bond/api/index.php?a=dl&token=d0a5e3b511c293206448ac44451b87f717fbdfa0c2f97242082bd2f29748a486&src=sanfrancescos.com&mode=cloudflare	Vidar	Vidar	whoamix302
2026-04-30 05:48	dl.nyc-blockchain.com	FAKEUPDATES	SocGholish	monitorsg
2026-04-30 05:48	89.124.79.20:9000	SectopRAT	1xxbot ArechClient SectopRAT	whoamix302
2026-04-30 05:48	149.12.67.100:139	Xtreme RAT	ExtRat Xtreme RAT	whoamix302
2026-04-30 05:48	158.101.97.20:10001	Xtreme RAT	ExtRat Xtreme RAT	whoamix302
2026-04-30 05:48	5c2cf4d36a6d942d6beb7b27b37c380e3fd688a3bb4f8616a13d20bf80c0bbea	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	vickynewsc.xyz	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	vmailnewwqmwe.vercel.app	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	https://vmailnewwqmwe.vercel.app/new.msi	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	mapmeshsite.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	coldmeshsite.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	zone3taskhub.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	areahostunit.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	hot9taskhub.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	plot5pathgate.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	burn2pathgate.grov6mira.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	site8siteview.grov6tela.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	cool3logicnet.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	air7taskhub.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	freehostunit.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	pure9siteview.flor3xan.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	view8siteview.flo3xaren.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	dark2logicway.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	gold9logicway.verd7loka.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	voidmeshsite.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	lasthostunit.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:48	zero5pathgate.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	deep7siteview.mi2rath.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	dark4logicnet.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	lightmeshway.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	beam9taskhub.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	corehostunit.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	fast2pathgate.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	glow7siteview.pulsarspin.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	dust6logicway.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	leap7pathgate.quantumbitlink.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	cloudmeshsite.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	gas3taskhub.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	ionhostunit.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	faint5pathgate.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	deep8siteview.nebulaflux.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	ray2logicnet.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	highmeshnode.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	firehostunit.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	hard4pathgate.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	gearhostunit.torquegridunit.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	pure9siteview.quasargrid.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	spin2pathgate.torquegridunit.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	turn5logicway.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	pathmeshsite.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	loop3taskhub.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	sidehostunit.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	axis8pathgate.orbitmesh.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	basehostunit.staticmeshview.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	peak7logicnet.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	cold6siteview.staticmeshview.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	topmeshnode.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	move2logicnet.kineticgatehub.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	up5pathgate.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	sky9siteview.zenithnode.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	rush4pathgate.kineticgatehub.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	math4logicway.cosmologic.bet	ClearFake	30April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-30 05:47	sleeve-stadium-pubs-javascript.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	peace-ray-unnecessary-dave.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	wet-envelope-beam-laser.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	katrina-teenage-documentation-auction.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	cst-lap-racing-authentic.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	cams-sphere-airline-drums.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO
2026-04-30 05:47	proceedings-essay-pricing-includes.trycloudflare.com	Unknown malware	ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav	Lenny_3BO