| 2026-04-30 15:30 | rapidassay.producer5chming.bet | ClearFake | ClearFake |  threatcat_ch |
| 2026-04-30 15:24 | rur4l-signal.producer5chming.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 15:19 | igqe.belief-handcraft.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 15:13 | yagzws04.belief-handcraft.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 15:05 | 1oca1-trail.belief-handcraft.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 14:57 | m4rk-grid.belief-handcraft.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 14:54 | atomchec.belief-handcraft.bet | ClearFake | 30April2026 ClearFake Commandline Windows |  Gi7w0rm |
| 2026-04-30 14:54 | brookneuro.grov6lira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:52 | 67mvmowu.belief-handcraft.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 14:46 | m01e-node.flen3qor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:46 | sales-loop.grov6lira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:46 | cliffcatalog.grov6lira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:46 | ks3fup.grov6lira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:46 | ijfitce.dis9ualescapes.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:33 | clos-aut.dis9ualescapes.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 14:28 | serven8on.dis9ualescapes.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 14:22 | d90aaos.dis9ualescapes.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 14:19 | routeligh.decommiss-mint.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | moralcinema.verdi7rax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | 5il3nt4-mesh.verdi7rax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | jqh9drh.verdi7rax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | mermesh0ar.verdi7rax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | tallithar9.verdi7rax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | labelnotifier.flen3qor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | neuronmeado.flen3qor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | velcore8en.decommiss-mint.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | https://ambergrid.top/private/acl-schema.js | SmartApeSG | SmartApeSG |  monitorsg |
| 2026-04-30 14:19 | ambergrid.top | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 14:19 | https://ambergrid.top/private/oauth-thread.php | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 14:19 | https://ambergrid.top/private/role-partial.js | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 14:19 | courierree.flen3qor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | gkrhs.dis9ualescapes.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:19 | vorlith6um.flen3qor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 14:17 | meta-fr0z.dis9ualescapes.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 14:15 | api.drazyland.us | Unknown malware | |  abuse_ch |
| 2026-04-30 14:15 | remote.drazyland.us | Unknown malware | | abuse_ch |
| 2026-04-30 14:15 | http://drazyland.us/api/clients/update-system | Unknown malware | | abuse_ch |
| 2026-04-30 14:15 | https://tophealth.es/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-30 14:15 | drazyland.us | Unknown malware | | abuse_ch |
| 2026-04-30 14:15 | https://genuinelink.net/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-30 14:15 | http://drazyland.us/api/clients/register | Unknown malware | | abuse_ch |
| 2026-04-30 14:11 | 176.10.125.15:8443 | Unknown malware | | abuse_ch |
| 2026-04-30 14:11 | centralcoretech.com | Unknown malware | | abuse_ch |
| 2026-04-30 14:11 | https://tee.ambil-disini.web.id/ | Vidar | lv80gzr Vidar | abuse_ch |
| 2026-04-30 14:11 | tee.ambil-disini.web.id | Vidar | lv80gzr Vidar | abuse_ch |
| 2026-04-30 14:11 | tee.plugazapp.com.br | Vidar | lv80gzr Vidar | abuse_ch |
| 2026-04-30 14:11 | https://tee.plugazapp.com.br/ | Vidar | lv80gzr Vidar | abuse_ch |
| 2026-04-30 14:02 | 154.218.3.146:8853 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-04-30 14:02 | 154.218.3.146:7070 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-04-30 14:02 | yu3dc.com | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-04-30 13:59 | ivoryencoder.decommiss-mint.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 13:51 | fa1th3-wave.decommiss-mint.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 13:43 | 8ugxvfg.decommiss-mint.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 13:37 | repocra.decommiss-mint.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 13:35 | nimba.it.com | Nanocore RAT | NanoCore | abuse_ch |
| 2026-04-30 13:35 | 158.160.75.185:40675 | RatonRAT | RatonRAT | abuse_ch |
| 2026-04-30 13:30 | 172.67.135.218:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 13:30 | 104.21.26.101:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 13:26 | meadopacka.convinc8mission.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 13:22 | darkdelivery.convinc8mission.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 13:20 | microsummit.sali8mor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 13:20 | https://lucidanchor.top/private/oauth-thread.php | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 13:20 | lucidanchor.top | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 13:20 | https://lucidanchor.top/private/role-partial.js | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 13:20 | http://172.96.137.141 | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 13:20 | http://104.36.229.33 | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 13:20 | https://getprismledger.com/pop | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 13:20 | getprismledger.com | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 13:20 | innerazur.sali8mor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 13:20 | opticdrive.sali8mor.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 13:17 | ui5cn.convinc8mission.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 13:15 | https://thynkia.net/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-30 13:11 | 781q.convinc8mission.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 13:05 | kqhgw.convinc8mission.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 13:00 | quorcore1ix.thora5ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 13:00 | meta-0bse.thora5ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 13:00 | vwpsn3.thora5ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 13:00 | st1t7-trace.convinc8mission.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 12:55 | 8.145.41.135:808 | Cobalt Strike | CobaltStrike cs-watermark-391144938 | abuse_ch |
| 2026-04-30 12:55 | 47.82.234.15:80 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2026-04-30 12:55 | 101.43.29.69:80 | Cobalt Strike | CobaltStrike cs-watermark-666666666 | abuse_ch |
| 2026-04-30 12:55 | 47.111.1.176:8888 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2026-04-30 12:54 | kelvenet8.dark-salittle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 12:46 | toj4.dark-salittle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 12:40 | zzpy.dark-salittle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 12:33 | 3yd5.dark-salittle.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 12:31 | fire7siteview.fluxunitzone.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | sdfnet.stardrift.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | gate.novapath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | cipher-meado.vexa7lorn.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | 55da.furrow-praise.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | ix9n.vexa7lorn.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | k29f.vexa7lorn.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | zenmarkos.vexa7lorn.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | lum-forgeen.furrow-praise.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | soci-vector.vexa7lorn.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | kel-coreex.furrow-praise.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | qba10o.mira4then.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | vorcrestal9.furrow-praise.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | foxultra.mira4then.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | ultra-d1scov.mira4then.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | wild-broo.mira4then.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | softpayload.retellin8tolle.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | 04cfyd.zori9vax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | pipelinetempo.zori9vax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | cz34e.zori9vax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | quordraar.zori9vax.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | packfall.nelo2qir.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | index-dock.coraprimat0sis.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | proto-outl3.nelo2qir.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | hyper-ve1ve.nelo2qir.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | cedartone.nelo2qir.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | chan5-trail.nelo2qir.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | notifie-plate.thora5ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:31 | 185.102.115.84:443 | Unknown malware | chacha20-poly1305 kb_botnet max_panel socket.io |  Lenny_3BO |
| 2026-04-30 12:31 | 86420c8dfedcacad48c8b4c2cb89a1f68a3e59002d396d36b955d7531aa9b6fc | Unknown malware | chacha20-poly1305 kb_botnet socket.io x25519 | Lenny_3BO |
| 2026-04-30 12:31 | site4siteview.novapath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | step1taskhub.vectorpathsys.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | long3siteview.stardrift.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | gate5logicway.novapath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | openmeshsite.novapath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | new7taskhub.novapath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | hostunitgate.novapath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | path2pathgate.novapath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | dash9pathgate.stardrift.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | abc.ilptour.com | ValleyRAT | |  johannes |
| 2026-04-30 12:30 | abc.petitechanson.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | abc.doublemobile.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | mcagov.cc | ValleyRAT | | johannes |
| 2026-04-30 12:30 | roldco.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | vnc.kcii2.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | abc.woopami.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | abc.3mkorealtd.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | abc.sudsmama.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | ec2-18-208-244-120.compute-1.amazonaws.com | Unknown malware | | johannes |
| 2026-04-30 12:30 | abc.fetish-friends.com | ValleyRAT | | johannes |
| 2026-04-30 12:30 | techhostunit.astrosync.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | datameshsite.astrosync.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | byte8taskhub.astrosync.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | port4pathgate.astrosync.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | site2siteview.astrosync.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | datahostunit.matrixhostbit.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | move1logicnet.stardrift.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | flowmeshnode.stardrift.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | link3logicway.astrosync.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | fast6taskhub.stardrift.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | restmeshnode.inertianetway.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | cold2pathgate.voidsphere.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | dark7siteview.voidsphere.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | none5taskhub.voidsphere.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | view8siteview.cosmologic.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | zero9logicnet.voidsphere.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | nullmeshnode.voidsphere.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:30 | areahostunit.tensorlogicbox.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 12:21 | pulseroot.dark-salittle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 12:15 | 5ignal8-forge.dark-salittle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 12:15 | https://bitbirds.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-30 12:08 | media-scope.coraprimat0sis.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 12:02 | bdecgtb.coraprimat0sis.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 11:56 | trivaleen3.coraprimat0sis.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 11:44 | rn3asur-spool.coraprimat0sis.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 11:38 | talforgeon.coraprimat0sis.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 11:33 | amb3-cache.retellin8tolle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 11:30 | https://why.nossamidia.net.br/ | Vidar | Vidar |  crep1x |
| 2026-04-30 11:30 | https://why.yutikeyu.com/ | Vidar | Vidar | crep1x |
| 2026-04-30 11:30 | why.nossamidia.net.br | Vidar | Vidar | crep1x |
| 2026-04-30 11:30 | why.yutikeyu.com | Vidar | Vidar | crep1x |
| 2026-04-30 11:26 | lummeshis1.retellin8tolle.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 11:21 | wk4z.retellin8tolle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 11:07 | 10gic-mark.retellin8tolle.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 11:01 | sub-forrn.retellin8tolle.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 10:55 | o8x1lij5.archive-shlyah.digital | ClearFake | ClearFake | Anonymous |
| 2026-04-30 10:55 | mb7oktk3.archive-shlyah.digital | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 10:35 | rep4-node.furrow-praise.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 10:29 | quor-fluxum.furrow-praise.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 10:11 | hub.vectorpathsys.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 10:06 | sdafdsew.novapath.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 09:50 | http://cs371620.tw1.ru/L1nc0In.php | DCRat | dcrat RAT | abuse_ch |
| 2026-04-30 09:25 | hostme.it.com | Nanocore RAT | NanoCore | abuse_ch |
| 2026-04-30 09:20 | 172.67.207.71:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 09:20 | 104.21.45.10:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 08:41 | burn5pathgate.fluxunitzone.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 08:35 | ionhostunit.fluxunitzone.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 08:30 | glow2taskhub.fluxunitzone.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 08:24 | heatmeshsite.fluxunitzone.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 08:18 | melt9logicway.fluxunitzone.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 08:13 | node8siteview.vectorpathsys.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 08:07 | view4pathgate.vectorpathsys.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 08:02 | pointcanunit.vectorpathsys.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 07:50 | linemeshnode.vectorpathsys.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 07:45 | path7logicnet.vectorpathsys.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 07:44 | https://analytics16.icu/ext.d7907680dd44.js | Unknown malware | ClickFix EXT | HuntYethHounds |
| 2026-04-30 07:43 | https://analytics16.icu/ext-b.223652707572.js | Unknown malware | ClickFix EXT | HuntYethHounds |
| 2026-04-30 07:43 | https://analytics16.icu/t.188cfd3975db.js | Unknown malware | ClickFix EXT | HuntYethHounds |
| 2026-04-30 07:42 | https://analytics16.icu/t.js | Unknown malware | ClickFix EXT | HuntYethHounds |
| 2026-04-30 07:42 | analytics16.icu | Unknown malware | ClickFix EXT | HuntYethHounds |
| 2026-04-30 07:39 | site9siteview.matrixhostbit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 07:38 | https://cybermetasynth.digital/script.sh | Unknown malware | macOS | HuntYethHounds |
| 2026-04-30 07:38 | cybermetasynth.digital | Unknown malware | macOS | HuntYethHounds |
| 2026-04-30 07:37 | https://abyssalflowunit.digital/script.sh | Unknown malware | macOS | HuntYethHounds |
| 2026-04-30 07:36 | abyssalflowunit.digital | Unknown malware | macOS | HuntYethHounds |
| 2026-04-30 07:34 | port5pathgate.matrixhostbit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 07:20 | scan6taskhub.matrixhostbit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 07:16 | 158.94.211.33:7017 | XWorm | XWorm | abuse_ch |
| 2026-04-30 07:12 | linkmeshsite.matrixhostbit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 07:11 | https://wonfo.it.com/p | Unknown malware | ClickFix WAO Traffic | HuntYethHounds |
| 2026-04-30 07:10 | https://wonfo.it.com/c | Unknown malware | ClickFix WAO Traffic | HuntYethHounds |
| 2026-04-30 07:10 | https://wonfo.it.com/geo | Unknown malware | ClickFix WAO Traffic | HuntYethHounds |
| 2026-04-30 07:09 | https://wonfo.it.com/t.js | Unknown malware | ClickFix WAO Traffic | HuntYethHounds |
| 2026-04-30 07:09 | wonfo.it.com | Unknown malware | ClickFix WAO Traffic | HuntYethHounds |
| 2026-04-30 07:06 | cell3logicway.matrixhostbit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:59 | dull7siteview.inertianetway.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:53 | long2pathgate.inertianetway.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:47 | masshostunit.inertianetway.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:41 | wait9taskhub.inertianetway.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:39 | https://web-interview.online/install-guide.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:39 | https://web-interview.online/download.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:39 | https://web-interview.online/microsoft-store.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:38 | https://web-interview.online/invite.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:38 | web-interview.online | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:36 | https://meeting.joinzooms.com/ZOOM/Windows/install-guide.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:35 | https://meeting.joinzooms.com/ZOOM/Windows/download.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:34 | https://meeting.joinzooms.com/ZOOM/Windows/microsoft-store.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:34 | https://meeting.joinzooms.com/ZOOM/Windows/invite.php | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:33 | https://meeting.joinzooms.com/ZOOM/ | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:33 | meeting.joinzooms.com | Unknown malware | Fake Zoom | HuntYethHounds |
| 2026-04-30 06:32 | https://googlemeet.courses/Windows/download.php | Unknown malware | Fake Google Meet | HuntYethHounds |
| 2026-04-30 06:31 | https://googlemeet.courses/Windows/invite.php | Unknown malware | Fake Google Meet | HuntYethHounds |
| 2026-04-30 06:31 | googlemeet.courses | Unknown malware | Fake Google Meet | HuntYethHounds |
| 2026-04-30 06:30 | slow4logicnet.inertianetway.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:26 | 31.97.61.212:8521 | Unknown Stealer | RemusStealer | abuse_ch |
| 2026-04-30 06:26 | 103.30.145.217:8768 | Unknown Stealer | RemusStealer | abuse_ch |
| 2026-04-30 06:25 | diggero.biz | Unknown Stealer | RemusStealer | abuse_ch |
| 2026-04-30 06:25 | comples.biz | Unknown Stealer | RemusStealer | abuse_ch |
| 2026-04-30 06:24 | mark1siteview.tensorlogicbox.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:23 | lapdog.kindterra.cfd | ACR Stealer | ACRStealer | abuse_ch |
| 2026-04-30 06:23 | grantt.qumarox.icu | ACR Stealer | ACRStealer | abuse_ch |
| 2026-04-30 06:22 | roadflo.icu | ACR Stealer | ACRStealer | abuse_ch |
| 2026-04-30 06:19 | https://sandman.bond/log.php | Unknown malware | ClickFix ErrTraffic | HuntYethHounds |
| 2026-04-30 06:19 | grid6pathgate.tensorlogicbox.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:17 | https://sandman.bond/cf.js | Unknown malware | ClickFix ErrTraffic | HuntYethHounds |
| 2026-04-30 06:17 | sandman.bond | Unknown malware | ClickFix ErrTraffic | HuntYethHounds |
| 2026-04-30 06:11 | basehostunit.cosmologic.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 06:11 | grid3pathgate.cosmologic.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 06:11 | rule6taskhub.cosmologic.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 06:11 | plotmeshsite.cosmologic.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 06:05 | deep3taskhub.tensorlogicbox.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 06:03 | 83.217.208.78:3011 | Unknown malware | | abuse_ch |
| 2026-04-30 06:00 | plotmeshsite.tensorlogicbox.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 05:54 | flat8logicway.tensorlogicbox.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 05:50 | 103.211.219.238:80 | Remus | Remus |  orlof_v |
| 2026-04-30 05:50 | 195.19.194.107:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 62.72.32.156:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 76.13.17.11:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 85.31.234.218:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 31.97.61.212:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 72.61.25.108:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 148.230.76.66:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 194.164.72.136:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 65.21.104.235:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 168.231.114.49:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 95.217.206.239:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 178.104.90.74:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 5.189.165.117:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | 37.77.150.108:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:50 | high9siteview.kineticgatehub.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | 45.85.147.53:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 137.184.153.47:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 68.183.161.221:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 67.205.186.254:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 78.111.111.236:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 94.231.205.229:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 15.235.192.42:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 147.135.84.14:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 89.58.10.69:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 5.231.25.31:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 5.45.184.254:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 185.53.179.128:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 79.111.111.236:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | 68.183.61.221:80 | Remus | Remus | orlof_v |
| 2026-04-30 05:49 | dice6logicnet.thora9xel.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | fusetasknode.thari9xel.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | linkhostunit.thari9xel.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | side5pathgate.thora9xel.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | zinc8siteview.thari9xel.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | zero4logicway.niva2ron.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | datameshsite.nexo2ran.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | byte7taskhub.nexo2ran.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | loadhostunit.nexo2ran.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | nonehostunit.niva2ron.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | port3pathgate.nexo2ran.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | flow8siteview.nexo2ran.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | scan2logicnet.mira5qor.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | pingmeshnode.mira5qor.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | hop9taskhub.mira5qor.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | win9taskhub.mist5qora.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | next5pathgate.mira5qor.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | next2pathgate.mist5qora.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | core9logicnet.thari9xel.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | suit8siteview.lo4miren.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | fast7siteview.mira5qor.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | heat8logicway.sola8ven.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | sunmeshsite.sola8ven.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | highmeshsite.so8laven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | glow3taskhub.sola8ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | king6taskhub.so8laven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | rayhostunit.sola8ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | beam5pathgate.sola8ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:49 | dawn9siteview.sola8ven.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | patchmeshnode.pavi1rix.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | run4taskhub.pavi1rix.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | starthostunit.pavi1rix.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | linehostunit.peta1vrix.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | save2siteview.pavi1rix.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | heat4logicway.grov6mira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | grid6logicway.grov6tela.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | http://178.16.52.232/ | Unknown malware | ClickFix | Lenny_3BO |
| 2026-04-30 05:48 | http://91.92.240.45/ | Unknown malware | AS202412 ClickFix french-brand-imp | Lenny_3BO |
| 2026-04-30 05:48 | caravan-crm-lu.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | ton-dossier-fr.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | ta-carte-a-renouvelle.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | renouvelle-ta-carte.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | franceinfo-finance.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | liberation-eco-info.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | liberation-actu-info.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | info-livraison-relay.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | distributionsuivi-colis.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | distribmondrelay.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | distributionmondrelay.com | Unknown malware | AS202412 ClickFix french-brand-imp phishing | Lenny_3BO |
| 2026-04-30 05:48 | https://sandman.bond/api/index.php?a=dl&token=d0a5e3b511c293206448ac44451b87f717fbdfa0c2f97242082bd2f29748a486&src=sanfrancescos.com&mode=cloudflare | Vidar | Vidar |  whoamix302 |
| 2026-04-30 05:48 | dl.nyc-blockchain.com | FAKEUPDATES | SocGholish | monitorsg |
| 2026-04-30 05:48 | 89.124.79.20:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-04-30 05:48 | 149.12.67.100:139 | Xtreme RAT | ExtRat Xtreme RAT | whoamix302 |
| 2026-04-30 05:48 | 158.101.97.20:10001 | Xtreme RAT | ExtRat Xtreme RAT | whoamix302 |
| 2026-04-30 05:48 | 5c2cf4d36a6d942d6beb7b27b37c380e3fd688a3bb4f8616a13d20bf80c0bbea | XWorm | ClickFix RMM-abuse ScreenConnect vercel | Lenny_3BO |
| 2026-04-30 05:48 | vickynewsc.xyz | XWorm | ClickFix RMM-abuse ScreenConnect vercel | Lenny_3BO |
| 2026-04-30 05:48 | vmailnewwqmwe.vercel.app | XWorm | ClickFix RMM-abuse ScreenConnect vercel | Lenny_3BO |
| 2026-04-30 05:48 | https://vmailnewwqmwe.vercel.app/new.msi | XWorm | ClickFix RMM-abuse ScreenConnect vercel | Lenny_3BO |
| 2026-04-30 05:48 | mapmeshsite.grov6tela.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | coldmeshsite.grov6mira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | zone3taskhub.grov6tela.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | areahostunit.grov6tela.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | hot9taskhub.grov6mira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | plot5pathgate.grov6tela.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | burn2pathgate.grov6mira.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | site8siteview.grov6tela.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | cool3logicnet.flor3xan.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | air7taskhub.flor3xan.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | freehostunit.flor3xan.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | pure9siteview.flor3xan.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | view8siteview.flo3xaren.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | dark2logicway.mi2rath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | gold9logicway.verd7loka.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | voidmeshsite.mi2rath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | lasthostunit.mi2rath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:48 | zero5pathgate.mi2rath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | deep7siteview.mi2rath.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | dark4logicnet.pulsarspin.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | lightmeshway.pulsarspin.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | beam9taskhub.pulsarspin.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | corehostunit.pulsarspin.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | fast2pathgate.pulsarspin.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | glow7siteview.pulsarspin.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | dust6logicway.nebulaflux.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | leap7pathgate.quantumbitlink.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | cloudmeshsite.nebulaflux.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | gas3taskhub.nebulaflux.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | ionhostunit.nebulaflux.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | faint5pathgate.nebulaflux.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | deep8siteview.nebulaflux.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | ray2logicnet.quasargrid.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | highmeshnode.quasargrid.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | firehostunit.quasargrid.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | hard4pathgate.quasargrid.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | gearhostunit.torquegridunit.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | pure9siteview.quasargrid.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | spin2pathgate.torquegridunit.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | turn5logicway.orbitmesh.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | pathmeshsite.orbitmesh.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | loop3taskhub.orbitmesh.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | sidehostunit.orbitmesh.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | axis8pathgate.orbitmesh.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | basehostunit.staticmeshview.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | peak7logicnet.zenithnode.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | cold6siteview.staticmeshview.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | topmeshnode.zenithnode.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | move2logicnet.kineticgatehub.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | up5pathgate.zenithnode.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | sky9siteview.zenithnode.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | rush4pathgate.kineticgatehub.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | math4logicway.cosmologic.bet | ClearFake | 30April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:47 | sleeve-stadium-pubs-javascript.trycloudflare.com | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | peace-ray-unnecessary-dave.trycloudflare.com | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | wet-envelope-beam-laser.trycloudflare.com | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | katrina-teenage-documentation-auction.trycloudflare.com | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | cst-lap-racing-authentic.trycloudflare.com | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | cams-sphere-airline-drums.trycloudflare.com | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | proceedings-essay-pricing-includes.trycloudflare.com | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | 96e157a49e9b3667d9c0838743a5cff48803e7062357853d2cd3f430c05c181c | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | 230b693565c103966ab2e05691554765a434628d672b37d757ea130eff2c8e21 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | a24730b62777b46bf22b83c08d470b9a85e22dccebf23635de2ca8cb72267325 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | 207d964e8254633cff1059ed62c2cc9fe67cedd83094bb2b61b9a430f924749b | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | 5478d1fe4f979f6a9a456d50dd84d18b04294701c9128eabcef412f6779a39b4 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | 8e248505b6cd87d2e27ed40541c2b2933113380da27bc75458d62d419e732f8d | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | 1382fbfcc7691d404b2202838270efd4137d4a4964047b94f2ed1dfabb407741 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | c85d73b0dbe1a5ff6a25e8980b0639d7309d9a97d2f5d799fb337bb36f217744 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:47 | b538e0e8a2add9ee49386771563804ec64f71cb592196c9cd415f535799db13d | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 832326f3a377973a35cb465bd3510f5f6199c7454a0e0557e4f95b85313a76a5 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 6056329246bf6ef61ff8eae8bf7697ea59bfc3413cd7c9ce338e51e302264f46 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 39c3267609ba685febfd9e385dd17d2fec28a79c3fc9b9d787aa411e4e2bd87f | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 26b35f04cd53782196ef2f56f1f0b37866f0b685c7e2e4c8b84495e01c91917f | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 06c9d67ad7d9d11e12b2f167cc22e1ea538df4b28f85fc6e00c36e9bcdaec043 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | c978e8310f179fc5a3a3275a81d57ed8e95705f00b24d205dff705502e942f41 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 218628edc95f7c425fad294048adca65e235ae3024f084c9afaf483f66f71b6c | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 14526f645590fc1e29557efb1e177b641c8caca50fb6246611940d329edf9eac | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | aaf15e8f685f8801ea6a605150b3739797ba8a2bfee6838d045368adfe3d62e1 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 13a6420822dab0d4ca6c1b422c66e5dd3a59637588279097efe47f7e553eb849 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 6b45e1a38609b9b7f2f2508b0b38f700a75ee1ea9b6c548d1a086bd91863efc3 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | bd3a7e2805d2f6f371366d6847998843b98298a748c45dd3ef6014b85697c4ae | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | f38cd6aa26981ba1eea4fb0ec8f9db212e518f65f28556e108ef74d92e4809b6 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | f2caaf774ab4ac5e7b5d9299117eb1bad22e025a2e530ffc29496456760390b6 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | d191615b7c6db1ce70af1a6f4849f3e1933e4609c58d84273c643ff1c20f5ded | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | 71fc6f86d7ab21afe5ef5954e8a17443f2a1999a4c30ed837da9baaecff71da8 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | c0d5366786aae498e155b1321e70793cec440563891757a5f5f7a374984d2b10 | Unknown malware | ClickFix fingerfix-cluster multi-rat-deliver trycloudflare UK WebDav | Lenny_3BO |
| 2026-04-30 05:46 | tourimex.com | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress |  varysz |
| 2026-04-30 05:46 | edwinmsarmiento.com | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | varysz |
| 2026-04-30 05:46 | aeronbranding.com | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | varysz |
| 2026-04-30 05:46 | precosdemotos.com.br | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | varysz |
| 2026-04-30 05:46 | dokunmatikekrandegisimi.com | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | varysz |
| 2026-04-30 05:46 | sanfrancescos.com | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | varysz |
| 2026-04-30 05:46 | match3taskhub.zora7vex.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | skillhostunit.zora7vex.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | win2siteview.zora7vex.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | key8taskhub.lumi4ren.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | 5.252.177.183:443 | Unknown malware | ClickFix iex MIVOCLOUD powershell | Lenny_3BO |
| 2026-04-30 05:46 | lockhostunit.lumi4ren.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | safe4pathgate.lumi4ren.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | cryptmeshsite.lumi4ren.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | vault5logicway.lumi4ren.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | chip2logicway.lo4miren.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | verifi-cation.com | Remus | Remus | orlof_v |
| 2026-04-30 05:46 | clou-dprotect.co | Remus | Remus | orlof_v |
| 2026-04-30 05:46 | pro9pathgate.zora7vex.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | https://satserfield.com/file.js | KongTuke | Kongtuke | monitorsg |
| 2026-04-30 05:46 | satserfield.com | KongTuke | Kongtuke | monitorsg |
| 2026-04-30 05:46 | https://satserfield.com/t | KongTuke | Kongtuke | monitorsg |
| 2026-04-30 05:46 | https://satserfield.com/g | KongTuke | Kongtuke | monitorsg |
| 2026-04-30 05:46 | https://satserfield.com/c | KongTuke | Kongtuke | monitorsg |
| 2026-04-30 05:46 | teampurenode.zora7vex.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | spin3taskhub.dra7vexa.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | relay-craft.grov9essa.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | xvwwhz.flo7ravia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | ser-meshal.flo5renth.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | re1ay8-zone.verd2onis.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:46 | ywqcdgz.flo7ravia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | freightflow.verd2onis.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | socialformat.verd2onis.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | arknex1ix.flo5renth.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | gpfaz8x.verd2onis.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | fabriclattic.verd2onis.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | przvbelk.verda7lya.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | znsb.verda7lya.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | daralteb.net | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | varysz |
| 2026-04-30 05:45 | frag7logicnet.zora7vex.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | illumemedia.peta8mora.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | rucbhks.grov3elia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | sol-crestor.grov3elia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | https://safecore.top/trace/principal-core.php | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 05:45 | safecore.top | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 05:45 | https://safecore.top/trace/rate-core.js | SmartApeSG | SmartApeSG | monitorsg |
| 2026-04-30 05:45 | kevh.grov3elia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | c4rrie3-node.grov3elia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | kqwgc4.grov3elia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | imea.flo7ravia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | 6352.grov9essa.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:45 | solvenon4.flo7ravia.bet | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-30 05:35 | starthostunit.kineticgatehub.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 05:30 | dash7taskhub.kineticgatehub.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 05:24 | flowmeshnode.kineticgatehub.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 05:07 | hold8pathgate.staticmeshview.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:56 | firm3taskhub.staticmeshview.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:50 | staymeshsite.staticmeshview.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:45 | stop5logicway.staticmeshview.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:39 | fast7siteview.torquegridunit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:22 | bolt9taskhub.torquegridunit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:16 | turnmeshnode.torquegridunit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:11 | axis4logicnet.torquegridunit.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:05 | hide8siteview.cryptosyncflow.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 04:00 | lock5pathgate.cryptosyncflow.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:54 | signhostunit.cryptosyncflow.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:50 | 117.50.71.2:9999 | ValleyRAT | valleyrat_s2 | abuse_ch |
| 2026-04-30 03:48 | key6taskhub.cryptosyncflow.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:45 | 94.156.250.190:7781 | RatonRAT | RatonRAT | abuse_ch |
| 2026-04-30 03:45 | http://94.250.250.235/generatormobile/supportmobile/phpframe/php/localServerdataMath/antiprodhtoppool/ruleServerWar/prod/phpcutrule/record/WarpluginCam/plugincore/limit/videoLinesecurebigloadsql.php | DCRat | dcrat RAT | abuse_ch |
| 2026-04-30 03:45 | 129.151.142.36:3229 | NjRAT | njrat | abuse_ch |
| 2026-04-30 03:45 | 129.151.142.36:2232 | NjRAT | njrat | abuse_ch |
| 2026-04-30 03:42 | codemeshsite.cryptosyncflow.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:40 | xzx.uk.com | Nanocore RAT | NanoCore | abuse_ch |
| 2026-04-30 03:40 | aanthuys.nl | Nanocore RAT | NanoCore | abuse_ch |
| 2026-04-30 03:40 | asm.it.com | Nanocore RAT | NanoCore | abuse_ch |
| 2026-04-30 03:35 | 172.67.164.185:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:35 | 104.21.50.178:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:35 | 104.21.27.243:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:35 | 172.67.169.216:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:35 | 172.67.213.117:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:35 | 104.21.37.211:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:35 | 104.21.30.121:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:35 | hash3logicway.cryptosyncflow.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 03:35 | 172.67.172.230:443 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-04-30 03:29 | jump2siteview.quantumbitlink.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:17 | corehostunit.quantumbitlink.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:12 | wave4taskhub.quantumbitlink.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:06 | spinmeshnode.quantumbitlink.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 03:01 | atom9logicnet.quantumbitlink.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 02:55 | safe7siteview.verd7loka.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 02:50 | mint2pathgate.verd7loka.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 02:44 | bankhostunit.verd7loka.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 02:38 | coin4taskhub.verd7loka.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 02:32 | richmeshsite.verd7loka.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 02:12 | rate5pathgate.flo3xaren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 02:02 | parihostunit.flo3xaren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 01:57 | prob6taskhub.flo3xaren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 01:51 | statmeshnode.flo3xaren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 01:46 | math3logicnet.flo3xaren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 01:38 | glow7siteview.grov6mira.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 01:25 | firehostunit.grov6mira.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 01:03 | cash8siteview.peta1vrix.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-30 01:00 | https://bbi.nossamidia.net.br/ | Vidar | Vidar | crep1x |
| 2026-04-30 01:00 | https://bbi.yutikeyu.com/ | Vidar | Vidar | crep1x |
| 2026-04-30 01:00 | bbi.nossamidia.net.br | Vidar | Vidar | crep1x |
| 2026-04-30 01:00 | bbi.yutikeyu.com | Vidar | Vidar | crep1x |
| 2026-04-30 00:57 | pay5pathgate.peta1vrix.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 00:43 | pull2taskhub.peta1vrix.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 00:38 | reelmeshnode.peta1vrix.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 00:30 | slot7logicnet.peta1vrix.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 00:24 | wild9siteview.so8laven.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 00:18 | jack4pathgate.so8laven.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-30 00:12 | acehostunit.so8laven.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 23:54 | rank3logicway.so8laven.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 23:48 | fast7siteview.mist5qora.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 23:37 | lasthostunit.mist5qora.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 23:25 | playmeshnode.mist5qora.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 23:20 | game5logicnet.mist5qora.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 23:15 | open8siteview.niva2ron.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 23:15 | https://financialexpress.com.au/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-29 23:09 | free3pathgate.niva2ron.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 22:57 | null7taskhub.niva2ron.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 22:52 | voidmeshsite.niva2ron.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 22:40 | drop9siteview.thora9xel.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 22:29 | edgehostunit.thora9xel.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 22:23 | face2taskhub.thora9xel.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 22:18 | rollmeshnode.thora9xel.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 21:59 | ante4pathgate.lo4miren.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 21:53 | bankhostunit.lo4miren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 21:47 | fold7taskhub.lo4miren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 21:42 | dealmeshsite.lo4miren.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 21:36 | ogicway.lo4miren.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 21:30 | https://yutikeyu.com/ | Vidar | Vidar | crep1x |
| 2026-04-29 21:26 | luck9siteview.dra7vexa.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 21:20 | deck5pathgate.dra7vexa.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 21:14 | cardhostunit.dra7vexa.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 21:11 | https://nig.nossamidia.net.br/ | Vidar | lv80gzr Vidar | abuse_ch |
| 2026-04-29 21:11 | nig.nossamidia.net.br | Vidar | lv80gzr Vidar | abuse_ch |
| 2026-04-29 21:04 | riskmeshnode.dra7vexa.bet | ClearFake | ClearFake | Anonymous |
| 2026-04-29 20:59 | odds8logicnet.dra7vexa.bet | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 20:35 | 104.168.70.158:2404 | Remcos | remcos | abuse_ch |
| 2026-04-29 20:35 | 104.168.70.158:5000 | Remcos | remcos | abuse_ch |
| 2026-04-29 19:44 | vtc3eae.verda7lya.garden | ClearFake | ClearFake | Anonymous |
| 2026-04-29 19:32 | hyper-fund.verda7lya.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 19:21 | cliff2-vault.verda7lya.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 19:14 | frameworkjsbns.beer | Unknown malware | ClickFix ErrTraffic | HuntYethHounds |
| 2026-04-29 19:09 | image-hold.flo5renth.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 18:59 | l6ms.flo5renth.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 18:53 | vine-lab.flo5renth.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 18:29 | 9takl.grov9essa.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 18:23 | vupvuar8.grov9essa.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 18:18 | out13-stream.grov9essa.garden | ClearFake | ClearFake | Anonymous |
| 2026-04-29 18:12 | microbeforest.petalu1ne.garden | ClearFake | ClearFake | Anonymous |
| 2026-04-29 18:07 | zen-coreet.petalu1ne.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 18:01 | ultra-rnetr1.petalu1ne.garden | ClearFake | ClearFake | Anonymous |
| 2026-04-29 18:00 | mnt.nossamidia.net.br | Vidar | Vidar | crep1x |
| 2026-04-29 18:00 | https://mnt.nossamidia.net.br/ | Vidar | Vidar | crep1x |
| 2026-04-29 18:00 | mnt.yutikeyu.com | Vidar | Vidar | crep1x |
| 2026-04-29 18:00 | https://mnt.yutikeyu.com/ | Vidar | Vidar | crep1x |
| 2026-04-29 17:56 | hqyqbe.petalu1ne.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 17:47 | meta-rnass1v.petalu1ne.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 17:35 | fj0r8-chain.so6lavern.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 17:29 | dyncorear.so6lavern.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 17:22 | urbandeep.so6lavern.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 17:20 | https://springvc.cyou | Lumma Stealer | Lumma | abuse_ch |
| 2026-04-29 17:16 | bundlfilter.so6lavern.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 17:14 | seering5outh.digital | ClearFake | 29April2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-04-29 17:14 | arkmarkar2.lunav8era.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-29 17:14 | neo-tr3nd.lunav8era.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-29 17:14 | serlithos.mist3briar.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-29 17:14 | vel-valeis.mist3briar.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-29 17:14 | banner-stack.so6lavern.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-29 17:14 | nor-tideum.ve7loria.garden | ClearFake | 29April2026 ClearFake Commandline Windows | Gi7w0rm |
| 2026-04-29 17:14 | glowmedaesthetics.com | Unknown Stealer | MacSync |  tanner |
| 2026-04-29 17:02 | 0njmhe52.mist3briar.garden | ClearFake | ClearFake | Anonymous |
| 2026-04-29 16:57 | lwmbun.mist3briar.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:40 | velcrest2en.mist3briar.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:34 | lxkedtm4.lunav8era.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:32 | h6gmmo5g.seering5outh.digital | ClearFake | ClearFake | Anonymous |
| 2026-04-29 16:32 | 16z4okne.seering5outh.digital | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:28 | sub-l1ght.lunav8era.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:15 | https://seabelleyachtservices.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-29 16:15 | https://green-buildingsrl.it/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-29 16:14 | w674qftb.seering5outh.digital | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:14 | z3ebwqw0.seering5outh.digital | ClearFake | ClearFake | Anonymous |
| 2026-04-29 16:11 | nggau.lunav8era.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:06 | zcvxwp.thorni2va.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 16:00 | dynmesh5or.thorni2va.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 15:58 | jh27i1hs.seering5outh.digital | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 15:55 | o3fs4mi0.little-spoken.digital | ClearFake | ClearFake | Anonymous |
| 2026-04-29 15:54 | insigh-pro.thorni2va.garden | ClearFake | ClearFake | Anonymous |
| 2026-04-29 15:54 | xh2vawpt.little-spoken.digital | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 15:53 | fuq05rzs.little-spoken.digital | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 15:49 | glac-vector.thorni2va.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 15:43 | xqjrhdwm.thorni2va.garden | ClearFake | ClearFake | threatcat_ch |
| 2026-04-29 15:38 | sharpnoti.ve7loria.garden | ClearFake | ClearFake | threatcat_ch |