| 2026-08-14 06:25 | http://vexdico.shop:8539/customers | Remus | Remus |  abuse_ch |
| 2026-08-14 06:25 | http://mrlketo.shop:8932/accounts | Remus | Remus | abuse_ch |
| 2026-08-14 06:20 | afterhours.click | Mirai | c2 Mirai |  botnetkiller |
| 2026-08-14 06:20 | imagiraffe.shop | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | 135.136.191.231:8080 | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | nightslikethis.club | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | chickenfriedwatermelonkoolaid.store | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | 135.136.191.231:23 | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | 135.136.191.231:123 | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | 135.136.191.231:80 | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | 135.136.191.231:25565 | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | 3.34.139.65:123 | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | http://144.31.57.113/ | Stealc | build1 c2 Loader Stealc stealer |  Bitsight |
| 2026-08-14 06:20 | http://91.92.241.69/ | Stealc | c2 L1 Loader Stealc stealer | Bitsight |
| 2026-08-14 06:20 | https://mathiuu.surf/api/v1/status | KongTuke | Kongtuke |  monitorsg |
| 2026-08-14 06:20 | 45.77.75.145:3000 | Unknown malware | WilsonC2 |  BlinkzSec |
| 2026-08-14 06:20 | 178.16.55.227:9000 | Unknown malware | panel PhantomStrikeC2 | BlinkzSec |
| 2026-08-14 06:20 | 79.133.42.25:8888 | Unknown malware | EvilgnixC2 Tr4nsHack | BlinkzSec |
| 2026-08-14 06:20 | siad-dakar.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 06:20 | 38.76.165.176:5000 | Unknown malware | panel ZygiskC2 | BlinkzSec |
| 2026-08-14 06:20 | saffronsynergies.in | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 06:20 | secureyourpocket.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 06:20 | http://202.63.202.222:35712/Mozi.m | Mozi | elf IoT Mozi |  HoneyLabs |
| 2026-08-14 06:20 | http://175.107.221.53:58446/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-14 06:20 | http://72.255.32.20:60289/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-14 06:20 | odd-bar-f4c1.workers.dev | php.shin_webshell | | Anonymous |
| 2026-08-14 06:20 | 160.119.71.120:8080 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-14 06:20 | authorizecvv.io | Aura Stealer | AuraStealer c2 domain | Anonymous |
| 2026-08-14 06:20 | authorizecvv.in | Aura Stealer | AuraStealer c2 domain | Anonymous |
| 2026-08-14 06:20 | authorizecvv.pro | Aura Stealer | AuraStealer c2 domain | Anonymous |
| 2026-08-14 06:20 | 107.172.249.140:443 | MoonPeak | DPRK kimsuky MoonPeak Stella |  josephgerald |
| 2026-08-14 06:20 | 217.60.36.94:80 | MoonPeak | DPRK kimsuky MoonPeak Stella | josephgerald |
| 2026-08-14 06:20 | http://217.60.36.94/test/test.bef_fri | MoonPeak | DPRK kimsuky MoonPeak Stella | josephgerald |
| 2026-08-14 06:20 | http://217.60.36.94/william/wi.txt | MoonPeak | DPRK kimsuky MoonPeak Stella | josephgerald |
| 2026-08-14 06:20 | http://217.60.36.94/test/p.txt | MoonPeak | DPRK kimsuky MoonPeak Stella | josephgerald |
| 2026-08-14 06:20 | 877fb2b2d8800e7831f1912b37550627d97cd704a1592e16260a889473e90658 | MoonPeak | DPRK kimsuky MoonPeak Stella | josephgerald |
| 2026-08-14 06:20 | 64.227.172.9:49152 | Unknown Stealer | golang zimbra zimbra-exfil ZMBX |  meff |
| 2026-08-14 06:20 | http://64.227.172.9:8033/client_linux | Unknown Stealer | golang zimbra zimbra-exfil ZMBX | meff |
| 2026-08-14 06:20 | http://64.227.172.9:8044/client_linux | Unknown Stealer | golang zimbra zimbra-exfil ZMBX | meff |
| 2026-08-14 06:20 | 39cef3a0e01334bf358bf0450209365bd5fbeff3b2ceea67684b7745e0c8f75c | Unknown Stealer | golang zimbra zimbra-exfil ZMBX | meff |
| 2026-08-14 06:20 | 45.38.249.63:1004 | Mirai | Mirai nc | botnetkiller |
| 2026-08-14 06:20 | slon12.cc | Vidar | c2 Vidar | Anonymous |
| 2026-08-14 06:20 | 172.104.49.49:3667 | Mirai | c2 Mirai | botnetkiller |
| 2026-08-14 06:20 | 176.98.182.217:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-14 06:20 | 176.98.182.177:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-14 06:20 | 176.98.182.218:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-14 06:20 | 176.98.182.216:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-14 06:20 | 557carlye.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | 655particular.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | cwuia22936.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | dehamazo.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | e6ednstx1d.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | dwahn22566.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | exquw91581.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | fy1j23u7c3.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | goldariela.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:20 | jequfu.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | hibusifa.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | jteqjafoxw.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | kdkcj10608.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | kovolovo.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | ksyuu99210.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | mijnf2c8ej.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | mldkv26213.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | nalywu.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | q2ftyf36p9.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | pf13zvg8zm.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | potohi.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | s6ruklj35j.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | tubas96664.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | vwiue35687.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | wqczklqnha.workers.dev | php.shin_webshell | Cloudflare PHP webshell WordPress workes.dev wp-admin | xscon |
| 2026-08-14 06:19 | https://gdo.sm188castle.top | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-14 06:19 | https://gdo.beri303.org | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-14 06:19 | 98.80.179.181:443 | Cobalt Strike | 14618 c2 censys Cobalt Strike |  sojubear |
| 2026-08-14 06:19 | 213.111.157.231:22222 | Cobalt Strike | c2 censys Cobalt Strike | sojubear |
| 2026-08-14 06:19 | 64.176.12.165:8811 | Remus | c2 Remus | Bitsight |
| 2026-08-14 06:19 | 91.108.249.56:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-14 06:19 | palmvalehomes.com | IClickFix | ClickFix Mac |  varysz |
| 2026-08-14 06:19 | https://gb0.beri303.org | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-14 06:19 | bg678.tamilkamaveri.pro | AsyncRAT | AsynRAT malware stealer | Anonymous |
| 2026-08-14 06:19 | https://kik.sm188cuan.top | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-14 06:19 | aprendoya.com.py | Unknown malware | ClickFix |  ClickFixer |
| 2026-08-14 06:19 | navigocanada.ca | Unknown malware | ClickFix | ClickFixer |
| 2026-08-14 06:19 | 8629amber.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:19 | a4kgz5fj4m.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:19 | g1130kgpqr.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:19 | jidufyle.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:19 | juloly.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | lixobezu.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | hodi8527yw0.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | rocahode.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | rosemaximum.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | vevyhiby.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | xpldell.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | xtjzz52890.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | zqret51773.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-14 06:18 | coquinalawgroup.com | ClearFake | ClearFake ClickFix compromised | penislandrocket |
| 2026-08-14 06:18 | https://klk.088idr.org | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-14 06:18 | 176.98.182.217:8443 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-14 06:18 | 160.119.71.134:2 | Mirai | Mirai nc | botnetkiller |
| 2026-08-14 06:18 | http://105.184.49.165:53813/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-14 06:18 | 160.119.71.134:2049 | Mirai | Mirai nc | botnetkiller |
| 2026-08-14 06:18 | 160.119.71.134:23 | Mirai | Mirai nc | botnetkiller |
| 2026-08-14 06:18 | http://36.70.68.244:54909/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-14 06:18 | http://115.50.94.75:59466/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-14 06:10 | shinejewellers.site | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 06:05 | 119.29.122.42:5004 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 06:05 | 20.187.120.42:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 06:05 | 20.187.120.42:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 06:05 | 20.187.120.42:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 06:05 | 20.187.120.42:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 06:04 | 73103b5b1f8db1dbca392fbe84313fdbc3804d3718c1db9d67e721f761ffec50 | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-14 06:00 | sautiyajamii.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 06:00 | ramsessecurity.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 06:00 | racwel.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 05:40 | https://pez.sm188cuan.top/ | Vidar | Vidar |  crep1x |
| 2026-08-14 05:40 | pez.088idr.org | Vidar | Vidar | crep1x |
| 2026-08-14 05:40 | https://pez.088idr.org/ | Vidar | Vidar | crep1x |
| 2026-08-14 05:40 | pez.sm188cuan.top | Vidar | Vidar | crep1x |
| 2026-08-14 05:36 | i1zec9op.us-en-us-neuroxen.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-14 05:30 | badenmasters.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 05:30 | 3544.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 05:25 | https://run.sm188cuan.top/ | Vidar | d8b0m Vidar | abuse_ch |
| 2026-08-14 05:25 | run.sm188cuan.top | Vidar | d8b0m Vidar | abuse_ch |
| 2026-08-14 05:25 | https://run.088idr.org/ | Vidar | Vidar | crep1x |
| 2026-08-14 05:25 | run.088idr.org | Vidar | Vidar | crep1x |
| 2026-08-14 05:05 | 43.225.157.17:8088 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 05:05 | 43.128.21.190:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 05:05 | 43.128.21.190:8888 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 04:47 | 06e948jz.spirosnet.com | ClearFake | ClearFake mac-0xfb64 macOS | Anonymous |
| 2026-08-14 04:42 | e7w940t3.drubenginecologo.com | ClearFake | ClearFake mac-0xe447 macOS | Anonymous |
| 2026-08-14 04:20 | nextlevelpersonnel.com.au | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 04:20 | magicmelt-eu.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 04:10 | marion-lacan.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 04:10 | naplex.online | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 04:10 | mugdhperfumes.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 04:05 | 43.128.21.190:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 04:05 | 43.128.21.190:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 04:05 | 130.94.66.82:80 | VShell | Vshell | Anonymous |
| 2026-08-14 04:05 | 43.128.21.190:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-14 04:05 | 169.58.31.140:443 | Unknown malware | Mythic | Anonymous |
| 2026-08-14 04:00 | caneboniface.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 04:00 | klk.088idr.org | Vidar | Vidar | crep1x |
| 2026-08-14 03:45 | http://vexdico.shop:8539/webhooks | Remus | Remus |  Myrtus0x0 |
| 2026-08-14 03:45 | http://mrlketo.shop:8932/videos | Remus | Remus | Myrtus0x0 |
| 2026-08-14 03:45 | https://k1k.088idr.org/ | Vidar | Vidar | crep1x |
| 2026-08-14 03:45 | k1k.sm188cuan.top | Vidar | Vidar | crep1x |
| 2026-08-14 03:45 | https://k1k.sm188cuan.top/ | Vidar | Vidar | crep1x |
| 2026-08-14 03:45 | k1k.088idr.org | Vidar | Vidar | crep1x |
| 2026-08-14 03:38 | 5bjdw8rn.theultimateoutlet.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-14 03:25 | web-thyrafemme-balance.com | ClearFake | ClearFake |  threatcat_ch |
| 2026-08-14 03:22 | us-usnervearmor.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-14 03:10 | laposadadelinfante.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 03:10 | itsmoura.com.br | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 03:10 | kienthucquocphong.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 03:10 | inkwellandco.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 03:05 | 124.222.109.22:8084 | VShell | Vshell | Anonymous |
| 2026-08-14 03:05 | 169.58.31.140:7443 | Unknown malware | Mythic | Anonymous |
| 2026-08-14 03:05 | 120.26.210.31:8089 | VShell | Vshell | Anonymous |
| 2026-08-14 03:04 | us-us--nervearmor.com | ClearFake | 14August2026 ClearFake Commandline DomainShadowing Windows |  Gi7w0rm |
| 2026-08-14 03:02 | karelgondormusic.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 03:01 | konferencjapodologiczna.pl | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 03:00 | willowbrooktownhouse.com | Unknown malware | ClickFix compromised | Anonymous |
| 2026-08-14 03:00 | k-fonik.com.ua | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 02:50 | kik.sm188cuan.top | Vidar | Vidar | crep1x |
| 2026-08-14 02:45 | https://kik.088idr.org/ | Vidar | Vidar | crep1x |
| 2026-08-14 02:45 | kik.088idr.org | Vidar | Vidar | crep1x |
| 2026-08-14 02:37 | usz5k088.eng-bpzone.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-14 02:20 | https://gb0.sm188castle.top/ | Vidar | Vidar | crep1x |
| 2026-08-14 02:20 | gb0.sm188castle.top | Vidar | Vidar | crep1x |
| 2026-08-14 02:10 | gentleclub.xyz | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 02:05 | 198.44.177.253:8084 | VShell | Vshell | Anonymous |
| 2026-08-14 02:05 | 192.140.174.170:4431 | VShell | Vshell | Anonymous |
| 2026-08-14 02:05 | 154.64.254.102:8084 | VShell | Vshell | Anonymous |
| 2026-08-14 02:05 | gb0.beri303.org | Vidar | Vidar | crep1x |
| 2026-08-14 02:00 | henryfilters.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 02:00 | harajinkhamismushait.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 02:00 | benkaimkereibedarf.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 02:00 | hallmarkcleaningservicessllc.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:55 | https://gd0.beri303.org/ | Vidar | Vidar | crep1x |
| 2026-08-14 01:55 | gd0.beri303.org | Vidar | Vidar | crep1x |
| 2026-08-14 01:40 | bienenhonigschleudern.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:36 | uj36tvbs.theslimsplitsmethod.us | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-14 01:34 | toothnir23.xyz | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | borrylistu898214.icu | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | bromment41293.life | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | dolpi812.life | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | killswpi912.life | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | material813.icu | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | nachoiuiwe123.buzz | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | nickilorr421.icu | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | productpi121.icu | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | roddyki9911.icu | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:34 | rokkko89123.life | IClickFix | c2 ClickFix | varysz |
| 2026-08-14 01:31 | www.a-imagine.co.ke | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.asdugrandlyon.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.becrepress.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.cubisweert.nl | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.entrepreneurspaper.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.goodiving.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.lb-begeleiding.nl | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.securitywings.net | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | www.thephyllconnect.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | probizlist.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | pynman.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | racechip.co.za | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | realcasadelatarjeta.es | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | reckeweg.it | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | rvlconsultoria.com.br | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | sahermir.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | samconstructions-eg.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | sampladigital.com.br | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | samsatcorner.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | sanacionalmik.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | sangilpet.com.mx | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | sanjayaretailofficial.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | sdalirsyad01pwt.sch.id | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | she-explores.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | sinemergencia.com.mx | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | singersavvyacademy.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | thebloomtheory.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | thestussyjacket.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | tmgroupcre.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | tool-tectra.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | topfordsecurity.org | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | trazoseguro.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | vidiq.com.br | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | lawdhyan.sa | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | lk21movies.space | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | maqspray.cl | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | masterfibras.com.br | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | mathland.gr | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | mavibeautycenter.it | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | med-mo.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | metaconsultancy.org | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | myluxproperty.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | n00bventures.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | nateava.fr | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | nissicye.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | njutamera.se | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | nysapanipat.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | officespacetorent.uk | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | oltumuretoursandsafaris.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | ongnhom.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | patzcuaro.gob.mx | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | pebsteelalliance.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | perspectiv-interieur.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | piraguismoalgeciras.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | plantaodosvidros.com.br | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | pluzz899.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | poprockenlinea.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | positivedaynewspaper.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | famat.es | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | fbgroundworks.co.uk | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | fermacojocna.ro | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | firehosechicago.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | fotokapani.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | fusteriabonada.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | goholidays.nl | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | guntes.com.tr | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | gvparkhotel.com.br | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | harisnf.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | hbaw.com.br | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | henygee.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | hermangeys.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | homesajawat.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | htnarabic.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | idenfragancias.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | investorsvisas.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | ipccards.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | itcopper.pl | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | jecoaff.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | kenyabreakingnews.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | killylanecottage.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | kimthuylo.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | kozojedka.cz | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | kruss-studio.es | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | atreyaayurvedawellness.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | aura138.org | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | autocentarjana.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | bakermediaco.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | basakcaypinar.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | baydohardwoodfloor.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | bittchannel.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | bizzplugin.store | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | breathenewlife.org | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | briwonacademy.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | camara-hiperbarica.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | cassagrand.fr | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | contractmanufacturers.in | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | corrieredellaverita.it | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | dchme.co.uk | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | digisakshi.shop | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | ditekelektronik.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | doljanka.ba | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | duldulsports.com.pk | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | ecoprobuilders.in | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | edmillo.art | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | ellwooddaycare.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | 724.vn | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | adwm.com.pl | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | affectionaba.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | aguron.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | alarmasindustriales.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | alkaramriceeng.com.pk | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | alrushedsch.ae | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | alsaadaoffcial.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | asorewa.org | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | aster-lubaczow.pl | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:31 | astropnsingh.com | IClickFix | ClickFix Mac | varysz |
| 2026-08-14 01:30 | elitsnus.se | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:30 | elevage-sphynx.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:30 | franquiciasclickviaja.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:30 | wolfgangfels.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:30 | ergonomai.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:20 | ebayiptv.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 01:05 | 60.185.66.75:8084 | VShell | Vshell | Anonymous |
| 2026-08-14 01:05 | 47.250.190.129:8084 | VShell | Vshell | Anonymous |
| 2026-08-14 01:05 | 47.96.5.12:8000 | VShell | Vshell | Anonymous |
| 2026-08-14 00:36 | dpwp5ghw.moqua8k.com | ClearFake | ClearFake mac-0xfb64 macOS | Anonymous |
| 2026-08-14 00:30 | http://vexdico.shop:8539/subscriptions | Remus | Remus | abuse_ch |
| 2026-08-14 00:30 | http://shkpiva.shop:5627/messages | Remus | Remus | abuse_ch |
| 2026-08-14 00:30 | http://mrlketo.shop:8932/payments | Remus | Remus | abuse_ch |
| 2026-08-14 00:25 | gdo.beri303.org | Vidar | Vidar | crep1x |
| 2026-08-14 00:25 | gdo.sm188castle.top | Vidar | Vidar | crep1x |
| 2026-08-14 00:10 | https://65.109.20.25 | Vidar | Vidar | abuse_ch |
| 2026-08-14 00:10 | themodernwomen.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:10 | campgregoryveterans.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:10 | pcs-srl.it | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:10 | ulisadekaj.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:05 | http://mrlketo.shop:8932/profiles | Remus | Remus | abuse_ch |
| 2026-08-14 00:05 | 145.223.93.74:7748 | Remus | Remus | abuse_ch |
| 2026-08-14 00:05 | http://luwerae.click:7748/orders | Remus | Remus | abuse_ch |
| 2026-08-14 00:00 | drevenicapodsitienom.sk | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:00 | taekwondopoissyacademie.fr | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:00 | lions-sternschnuppen.de | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:00 | detmaxma.com.br | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:00 | traderomerhoca.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-14 00:00 | nelsoncortes.cl | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 23:50 | http://vexdico.shop:8539/posts | Remus | Remus | abuse_ch |
| 2026-08-13 23:50 | http://mrlketo.shop:8932/comments | Remus | Remus | abuse_ch |
| 2026-08-13 23:50 | 59e14d45e25201284f047fa430e7f84301edf3a7f1ad95ad0f8dd6f945275b19 | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-13 23:46 | 185.92.190.175:8896 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-13 23:46 | 113.52.135.27:19666 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-13 23:35 | a042exok.app8k.xyz | ClearFake | ClearFake mac-0xe447 macOS | Anonymous |
| 2026-08-13 23:34 | xdcvmzg8.theslimsplitsmethod.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 23:25 | http://vexdico.shop:8539/sessions | Remus | Remus | abuse_ch |
| 2026-08-13 23:25 | 62.171.169.111:5525 | Remus | Remus | abuse_ch |
| 2026-08-13 23:25 | http://verbida.click:5525/users | Remus | Remus | abuse_ch |
| 2026-08-13 23:25 | http://mrlketo.shop:8932/reports | Remus | Remus | abuse_ch |
| 2026-08-13 23:10 | jackbelmontbarbers.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 23:10 | mecfpune.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 23:10 | instanteeterno.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 23:10 | kesit.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 23:10 | ciudadelacafamiv.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 22:59 | exportsoftwareindia.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 22:59 | msteps.com.au | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 22:59 | lemasdescarnassoles.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:59 | asturiasferreteria.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:59 | daacadelectric.co.ke | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:59 | dorsaroofandbuild.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:59 | dvkspgroup.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:59 | bauleitung-mallorca.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:34 | y7sb1j03.theslimsplits.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 21:34 | auth.commonup.click | RevStealer | RevStealer | Myrtus0x0 |
| 2026-08-13 21:34 | vkg9h21t.eachway-multiplier.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-13 21:19 | abemedios.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:19 | diamundialdelgol.com.ar | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:19 | hafsbetongbygg.no | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:09 | canbey.shop | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:09 | end-now.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 21:07 | http://offdrer.click:8811/imports | Remus | Remus | Myrtus0x0 |
| 2026-08-13 21:05 | 47.236.130.154:2095 | VShell | Vshell | Anonymous |
| 2026-08-13 20:56 | 103.83.87.158:4040 | XWorm | XWorm | abuse_ch |
| 2026-08-13 20:49 | banpro.com.pe | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 20:28 | q383qak6.en-slimsounds.com | ClearFake | ClearFake mac-0xfb64 macOS | Anonymous |
| 2026-08-13 20:19 | edge.amberreport.one | RevStealer | RevStealer | Myrtus0x0 |
| 2026-08-13 20:05 | 82.157.13.47:8899 | VShell | Vshell | Anonymous |
| 2026-08-13 20:00 | https://sis.adkfarmerdan.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-13 19:46 | 85.208.69.45:443 | BianLian | BianLian drb-ra | abuse_ch |
| 2026-08-13 19:46 | 64.89.161.181:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:46 | 64.89.161.181:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:46 | 63.141.237.101:8808 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 19:46 | 63.141.237.101:6606 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 19:46 | 46.246.4.16:7049 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 19:46 | 45.88.91.74:7580 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 19:45 | 217.60.195.226:56003 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:45 | 217.60.241.247:6606 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 19:45 | 216.118.235.66:4321 | AdaptixC2 | AdaptixC2 drb-ra | abuse_ch |
| 2026-08-13 19:45 | 216.118.235.69:4321 | AdaptixC2 | AdaptixC2 drb-ra | abuse_ch |
| 2026-08-13 19:44 | 177.22.117.81:9001 | DanaBot | DanBot drb-ra | abuse_ch |
| 2026-08-13 19:44 | 172.86.72.75:7443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-08-13 19:43 | 147.45.61.65:56003 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:43 | 128.90.112.237:6666 | DCRat | dcrat drb-ra RAT | abuse_ch |
| 2026-08-13 19:43 | 128.90.105.154:8624 | DCRat | dcrat drb-ra RAT | abuse_ch |
| 2026-08-13 19:43 | 108.187.43.137:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:43 | 108.187.43.137:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:43 | 108.187.43.144:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:43 | 108.187.43.144:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:43 | 104.251.180.164:55006 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:43 | 104.239.66.245:56003 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 19:43 | 102.117.162.167:7443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-08-13 19:33 | hxouo2wg.snaptigen.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 19:21 | metric3.viberun.lol | RevStealer | RevStealer | Myrtus0x0 |
| 2026-08-13 19:05 | 134.122.200.208:8088 | Quasar RAT | QuasarRAT | Anonymous |
| 2026-08-13 19:05 | 183.60.226.2:33333 | Unknown malware | Supershell | Anonymous |
| 2026-08-13 19:05 | 68.64.182.169:110 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 19:05 | 68.64.182.169:465 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 18:59 | servochem.co.za | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 18:59 | gemini12.co.uk | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 18:34 | uc3lofxv.app8k.cc | ClearFake | ClearFake mac-0xe447 macOS | Anonymous |
| 2026-08-13 17:45 | http://vexdico.shop:8539/attachments | Remus | Remus | abuse_ch |
| 2026-08-13 17:45 | http://none/tasks | Remus | Remus | abuse_ch |
| 2026-08-13 17:45 | http://mrlketo.shop:8932/subscriptions | Remus | Remus | abuse_ch |
| 2026-08-13 17:35 | sniwkcay.slimsplits.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 17:12 | https://cdn.jsdelivr.net/gh/kud-981/sandy-lumping-mandarin@a1fee8e/sys | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 17:12 | 12a761e8f69b99c232ee748498d8d5da5ef4da103409695afbd973eb1ea1557a | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-13 17:05 | 101.42.255.92:8443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 17:02 | americandailynews.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 17:00 | http://mrlketo.shop:8932/sessions | Remus | Remus | abuse_ch |
| 2026-08-13 16:50 | 9a1c9e8f89df354e7704a1bdba5404b9 | Unknown malware | crpx0 Ransomware |  TheRavenFile |
| 2026-08-13 16:50 | 67b59851c48c89880b692e238e54ad8b | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | 95d91cdeaf8991fec3618ca52a5d8a7e | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | 1768e374535e5aeaec71002ab68838e7 | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | 6436a5ae81c78a3b38a2a2830bce2d36 | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | 57d0c8f4132cfe3d208f52a8fe89c16c | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | 3b5381e4e1a32953a8af4b98befc643f | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | b24f5bf5582f6f0b5bc7ed2bf8c05c66 | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | b072d316e930b12b03d3d58617ec0c14 | Unknown malware | crpx0 Ransomware | TheRavenFile |
| 2026-08-13 16:50 | 31.40.204.178:7080 | Unknown RAT | | abuse_ch |
| 2026-08-13 16:37 | web-keyslimdrops.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 16:34 | f9cl8k8o.digeststart.us | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-13 16:34 | https://ity.beri303.org | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-13 16:27 | https://cdn.jsdelivr.net/gh/zor-876/futures-import@04e2419/llm | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 16:16 | https://cdn.jsdelivr.net/gh/zor-876/futures-import@8b224a7/requests | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 16:16 | j4bfscn7.greenestreetchurch.com | ClearFake | ClearFake mac-0xfb64 macOS | Anonymous |
| 2026-08-13 16:16 | http://tokjoza.shop:5200/collections | Remus | Remus | abuse_ch |
| 2026-08-13 16:15 | http://shkpiva.shop:5627/sessions | Remus | Remus | abuse_ch |
| 2026-08-13 16:05 | 68.64.182.169:995 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 16:05 | 134.122.200.212:8088 | Quasar RAT | QuasarRAT | Anonymous |
| 2026-08-13 16:05 | 68.64.182.169:7000 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 16:05 | ity.sm188castle.top | Vidar | Vidar | crep1x |
| 2026-08-13 16:05 | https://ity.sm188castle.top/ | Vidar | Vidar | crep1x |
| 2026-08-13 16:05 | ity.beri303.org | Vidar | Vidar | crep1x |
| 2026-08-13 16:02 | ueppwtrkonujissbbl.web-ignitra.us | ClearFake | ClearFake win-0x1ca9 Windows | Anonymous |
| 2026-08-13 16:02 | web-ignitra.us | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 16:00 | 156.247.41.102:443 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-13 15:54 | jbpqui.usslimsounds.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 15:51 | 109.172.54.136:443 | AnimateClipper | AnimateClipper ClearFake ClickFix | Anonymous |
| 2026-08-13 15:40 | media.barmaidlushness.cc | AnimateClipper | AnimateClipper ClearFake ClickFix | Anonymous |
| 2026-08-13 15:40 | 45.155.68.45:443 | AnimateClipper | AnimateClipper ClearFake ClickFix | Anonymous |
| 2026-08-13 15:34 | https://mylovemarry.com | Unknown Stealer | eviltokens |  ThreatOpsX |
| 2026-08-13 15:34 | synctime.australiaeast.cloudapp.azure.com | EtherRAT | EtherRat | RacWatchin8872 |
| 2026-08-13 15:34 | 82.22.23.63:443 | Unknown malware | eviltokens | ThreatOpsX |
| 2026-08-13 15:33 | b7ttsc7s.shop-theslimsplitsmethod.us | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 15:31 | rltczk86.us-en-us-nervearmor.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 15:30 | us-en-us-nervearmor.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 15:28 | https://cdn.jsdelivr.net/gh/kud-981/9564-41286dbead85@d02d0a9/set | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 15:18 | hirjnqvagnfswonyxw.web-goldalign.com | ClearFake | ClearFake win-0x1ca9 Windows | Anonymous |
| 2026-08-13 15:18 | web-goldalign.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 15:18 | victorymarksllc20.duckdns.org | XWorm | |  proxylife |
| 2026-08-13 15:07 | yvbtdo.us-sightfresh-us.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 15:07 | us-sightfresh-us.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 15:05 | 4.232.64.244:7443 | Unknown malware | Mythic | Anonymous |
| 2026-08-13 15:00 | 94.154.34.203:1604 | Quasar RAT | QuasarRAT RAT | abuse_ch |
| 2026-08-13 14:53 | 37.27.249.30:1999 | Mirai | Mirai |  NDA0E |
| 2026-08-13 14:45 | https://62.238.97.30 | Vidar | Vidar | abuse_ch |
| 2026-08-13 14:30 | 3627f4ca552af942ed152739121766ac3fb853ad0137d7ea3f56ac2e14595471 | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-13 14:30 | https://www.thueringer-stuck.de/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-13 14:29 | beta.smartcore.click | RevStealer | RevStealer | Myrtus0x0 |
| 2026-08-13 14:25 | 45.39.33.177:80 | Unknown Stealer | behance decoy-pdf freelancer-scam LNK powershell swisstransfer XOR | Anonymous |
| 2026-08-13 14:25 | 160.119.71.120:8443 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 14:25 | http://45.39.33.177/peter.php | Unknown Stealer | behance decoy-pdf freelancer-scam LNK powershell swisstransfer XOR | Anonymous |
| 2026-08-13 14:23 | bkwmqv.us-en-us-slimsounds.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 14:22 | yrywkap.us-usa-thyrafemmebalance.us | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 14:20 | us-usa-thyrafemmebalance.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 14:13 | http://vexdico.shop:8539/permissions | Remus | Remus | Myrtus0x0 |
| 2026-08-13 14:13 | http://shkpiva.shop:5627/orders | Remus | Remus | Myrtus0x0 |
| 2026-08-13 14:13 | http://mrlketo.shop:8932/transactions | Remus | Remus | Myrtus0x0 |
| 2026-08-13 14:10 | 192.227.135.223:6040 | Remcos | RAT RemcosRAT | abuse_ch |
| 2026-08-13 14:05 | ruedesfleurs.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 14:05 | 68.64.182.169:8000 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 14:05 | 8.163.59.20:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 14:05 | 68.64.182.169:7010 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 14:05 | 159.203.165.107:8080 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-13 14:00 | winnerscorner.gleeze.com | Remcos | remcos | abuse_ch |
| 2026-08-13 14:00 | mainhold.duckdns.org | Remcos | remcos | abuse_ch |
| 2026-08-13 13:58 | trace.eastbox.lol | RevStealer | RevStealer | Myrtus0x0 |
| 2026-08-13 13:55 | saltmeatscheese.com.au | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 13:55 | meinwassertest.info | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 13:55 | drrashmishah.in | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 13:55 | servicedapartments.ae | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 13:55 | iawfoundation.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 13:55 | https://microandsofty.com/serv.php | Unknown malware | | abuse_ch |
| 2026-08-13 13:45 | biralabwa.org.sa | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 13:45 | cm-vernou.fr | ClearFake | compromised etherhide | Anonymous |
| 2026-08-13 13:45 | http://vexdico.shop:8539/folders | Remus | Remus | abuse_ch |
| 2026-08-13 13:45 | http://mrlketo.shop:8932/teams | Remus | Remus | abuse_ch |
| 2026-08-13 13:40 | 9933d85274f9d34a652f1995a0ea80797087e2a563b87e196852d0d89c1d7f46 | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-13 13:40 | 194.12.15.34:8011 | RedLine Stealer | RedLineStealer | abuse_ch |
| 2026-08-13 13:37 | dtmpzv.us-en-us-sightfresh.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 13:36 | yyvqsuw.us-tinni-trol.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 13:35 | toothnir23.xyz | Unknown malware | ClickFix WordPress | Anonymous |
| 2026-08-13 13:35 | http://144.48.132.96:53462/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-13 13:35 | http://103.244.172.178:45019/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-13 13:35 | http://223.123.43.198:54438/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-13 13:35 | https://herndndes.beer/api/v1/status | KongTuke | Kongtuke | monitorsg |
| 2026-08-13 13:34 | us-tinni-trol.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 13:34 | dc16h0z3.energyrevolutionsystem.org | ClearFake | ClearFake mac-0xe447 macOS | Anonymous |
| 2026-08-13 13:31 | imkc64pm.us-en-us-keyslimdrops.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 13:30 | us-en-us-keyslimdrops.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 13:27 | http://shkpiva.shop:5627/collections | Remus | Remus | Myrtus0x0 |
| 2026-08-13 13:27 | http://beljaro.shop:2536/tokens | Remus | Remus | Myrtus0x0 |
| 2026-08-13 13:18 | mekzlixxdvhnahxfae.web-cognisurge.com | ClearFake | ClearFake win-0x1ca9 Windows | Anonymous |
| 2026-08-13 13:17 | web-cognisurge.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 13:09 | 91763fd9896d4e7c17058d566e903a94ab801127 | ValleyRAT | |  Grim |
| 2026-08-13 13:09 | 7a0f3eebfb821131f22ff6ec2645b4fc | ValleyRAT | | Grim |
| 2026-08-13 13:09 | c3a0be16abf09c569acd2d61ebff4972549854d2 | Kuiper | | Grim |
| 2026-08-13 13:09 | a56d67f5e2f1b15b2c3864ff9501d7cc | Kuiper | | Grim |
| 2026-08-13 13:09 | b9f992a46caa3b898a960ceb13b8be215054e74d80b288de82b662c028faecb6 | ValleyRAT | | Grim |
| 2026-08-13 13:09 | 2794280875a99f47ddcf347f3eaa5f57ecc30058 | stealler | | Grim |
| 2026-08-13 13:09 | 757b7e2991187e4644f8092801547730 | stealler | | Grim |
| 2026-08-13 13:09 | e2bebe7d6fcc4e9ce414fa6f2fb357a1ec517712e2d1597e25752b3616e2d650 | Kuiper | | Grim |
| 2026-08-13 13:09 | 3966dfc023858b3f3bd6aca6562964838aaa2e31 | Nanocore RAT | | Grim |
| 2026-08-13 13:09 | 7d4dcace32850c5e3e9d5dff5a6ef08d | Nanocore RAT | | Grim |
| 2026-08-13 13:09 | 664f8e49f45b3fda22f2deb4a164e9dd0737cd8ec65aef928526b86424bb3726 | stealler | | Grim |
| 2026-08-13 13:09 | 2571413368bb32f0b8eb3637b317a734978cf42b | Kuiper | | Grim |
| 2026-08-13 13:09 | 725368095f3e67cf813c8c442652ca97 | Kuiper | | Grim |
| 2026-08-13 13:09 | 4208d5e8fe67a312095ee467a08bd0d6ec6007f10922d03383e760b40e0e1dc9 | Nanocore RAT | | Grim |
| 2026-08-13 13:09 | 3bb888cb49563f907b4b1305cd3c6a1eff227a5a | KrakenKeylogger | | Grim |
| 2026-08-13 13:09 | f0227e480e845b98b91e385b898e9b47 | KrakenKeylogger | | Grim |
| 2026-08-13 13:09 | bbbdcc7dc8d6ef0cdb2c72ddb0ed3858343db8705dfbd9b904a509342d6f4c12 | Kuiper | | Grim |
| 2026-08-13 13:09 | 8ad256c5b786abb5f1552d906df3482a | Quasar RAT | | Grim |
| 2026-08-13 13:09 | c9548996fd7c80f449b61ab4706dce3d35307aa7215c8ff82788a513d6789e2d | KrakenKeylogger | | Grim |
| 2026-08-13 13:09 | b3c2f9ac068664bb861d7f8a59db533810032bc26d75fad48dbd0e2ba26413b2 | Quasar RAT | | Grim |
| 2026-08-13 13:09 | c321593cb3d8e279dfbdcf6d8bb94fac93cdc405 | Quasar RAT | | Grim |
| 2026-08-13 13:09 | 0578ccbe64ee7f6c1f90cf656095dad7059b1587 | NetWire RC | | Grim |
| 2026-08-13 13:09 | 6ff68578110de0105fc3a1a1ab635dd3 | NetWire RC | | Grim |
| 2026-08-13 13:09 | 46da9bf913828dfdc3cbfc435e414285ba5cb715 | NetWire RC | | Grim |
| 2026-08-13 13:09 | ef5b6211a47d0bec3ddb8d77b9c9586a | NetWire RC | | Grim |
| 2026-08-13 13:09 | c1770108b0d0e6dde3fd5d588a85af3409ad41581784b1734a3eec637fddb15d | NetWire RC | | Grim |
| 2026-08-13 13:09 | 687e3c588e1d0482e8aae96a9ee780fe534dde01 | Void | | Grim |
| 2026-08-13 13:09 | 36612c13573375fb4c796f3569eb50c0 | Void | | Grim |
| 2026-08-13 13:09 | d1ccedd9d262377aa1e28d0ba13b49cbd6511ccaa5e95db0e506064b2861f6f7 | NetWire RC | | Grim |
| 2026-08-13 13:09 | 1ab183b92f988063206d8f415f1e6439 | Vidar | | Grim |
| 2026-08-13 13:09 | d0319eb0aad677d46a509fdcdf2c03e7c92cee9794cee70a79d3e84c564708c0 | Void | | Grim |
| 2026-08-13 13:09 | 695fe5d40398a4f75c5125cffeb5bb1ab2117040 | AsyncRAT | | Grim |
| 2026-08-13 13:09 | 1bb0a4abcc83dd82f0c7da52ce5d9e8a | AsyncRAT | | Grim |
| 2026-08-13 13:09 | 9985a958af279455f1ccaf2c35ea527d08ca0c3289f88c084c3a2bd6260b3d03 | Vidar | | Grim |
| 2026-08-13 13:09 | aef7e86df2479892739c5d13fb389b474489e846 | Vidar | | Grim |
| 2026-08-13 13:09 | e87d14fd46969a5a2341482f1e1082f00a84520b9d6fe7138807584c83a25269 | AsyncRAT | | Grim |
| 2026-08-13 13:05 | 159.203.165.107:443 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-13 13:05 | 159.203.165.107:80 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-13 13:05 | 178.128.80.204:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 13:00 | https://soupart.ch/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-13 12:51 | huqnry.us-en-us-nitrilean.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 12:51 | us-en-us-nitrilean.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 12:50 | udsakhk.us-tinitrol.us | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 12:49 | us-tinitrol.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 12:45 | 31.77.138.55:56545 | Unknown RAT | RAT | abuse_ch |
| 2026-08-13 12:24 | 153.52.162.73:8080 | Quasar RAT | QuasarRAT RAT | abuse_ch |
| 2026-08-13 12:23 | 45.148.18.38:58798 | Remcos | RAT RemcosRAT | abuse_ch |
| 2026-08-13 12:19 | 204.10.160.200:3608 | STRRAT | RAT STRRAT | abuse_ch |
| 2026-08-13 12:11 | 89.106.83.225:8443 | PureLogs Stealer | PureLogsStealer | abuse_ch |
| 2026-08-13 12:10 | 91.92.47.238:7878 | Unknown RAT | LxBaseRAT RAT | abuse_ch |
| 2026-08-13 12:10 | 91.92.47.238:7979 | Unknown RAT | LxBaseRAT RAT | abuse_ch |
| 2026-08-13 12:10 | 91.92.47.238:7777 | Unknown RAT | LxBaseRAT RAT | abuse_ch |
| 2026-08-13 12:09 | prakashjadhav74.duckdns.org | Unknown RAT | LxBaseRAT RAT | abuse_ch |
| 2026-08-13 12:09 | pradeepprabhu705.noip.at | Unknown RAT | LxBaseRAT RAT | abuse_ch |
| 2026-08-13 12:07 | coerwt.us-energyrevolution.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 12:05 | akoreoe.us-superbrain.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 12:05 | toseuhlxdkhpqachkr.phim18k.de | ClearFake | ClearFake win-0xa770 Windows | Anonymous |
| 2026-08-13 12:05 | 68.64.182.169:993 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 12:05 | 68.64.182.169:4190 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 12:05 | 169.58.23.30:22 | Quasar RAT | QuasarRAT | Anonymous |
| 2026-08-13 12:04 | ngdt6tui.rsfoodproducts.com | ClearFake | ClearFake mac-0xfb64 macOS | Anonymous |
| 2026-08-13 11:51 | 192.53.121.159:9035 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | 172.234.103.104:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | www.thueringer-stuck.de | Lumma Stealer | ClickFix ErrTraffic etherhiding |  Sir_XX |
| 2026-08-13 11:51 | 6270f38bdf27aebb108331a484220a8bc0b9a1e6a2c4bba6dad89a2f3665bca5 | Lumma Stealer | ClickFix ErrTraffic etherhiding LummaC2 | Sir_XX |
| 2026-08-13 11:51 | 649c6c95558f8ece4f927a68e3eed6fccf2118d45a371d5416e6bd19d66d9efd | Lumma Stealer | ClickFix ErrTraffic etherhiding LummaC2 | Sir_XX |
| 2026-08-13 11:51 | lzcoyg.usa-usa-synaptigen.com | ClearFake | ClearFake ClickFix dll-sideload WebDav | Sir_XX |
| 2026-08-13 11:51 | 103.3.61.234:8443 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | 172.233.163.205:37215 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | 192.53.121.159:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | 104.105.140.237:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | https://xor.beri303.org | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-13 11:51 | 103.3.61.234:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | https://xor.sm188castle.top | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-13 11:51 | 172.233.163.205:8001 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-13 11:51 | clodflare.info | Unknown malware | ClickFix ErrTraffic HijackLoader | Anonymous |
| 2026-08-13 11:51 | pub-bb063fce842e49b7b855db509f5542a5.r2.dev | Unknown malware | ClickFix ErrTraffic HijackLoader | Anonymous |
| 2026-08-13 11:51 | https://clodflare.info/embed/580d7c9ae71ca504 | Unknown malware | ClickFix ErrTraffic HijackLoader | Anonymous |
| 2026-08-13 11:51 | https://pub-bb063fce842e49b7b855db509f5542a5.r2.dev/DJCISODJ.msi | Unknown malware | ClickFix ErrTraffic HijackLoader | Anonymous |
| 2026-08-13 11:51 | ab49a2874151de565447e16c4e4b7c5f666fb74e7d54fe6e5ef94683b79bd208 | Unknown malware | ClickFix ErrTraffic HijackLoader | Anonymous |
| 2026-08-13 11:51 | https://morganmariedancer.com/rPBAN626w8J75gFWpw | Unknown malware | ClickFix ErrTraffic HijackLoader | Anonymous |
| 2026-08-13 11:51 | https://morganmariedancer.com/g4c2wxvb-rhty7vn4-mc58pnhc-sjyaynxz/DJCISODJ.msi | Unknown malware | ClickFix ErrTraffic HijackLoader | Anonymous |
| 2026-08-13 11:48 | mail.nemail.co | VIP Keylogger | VIPKeylogger | abuse_ch |
| 2026-08-13 11:47 | 91.92.42.118:13019 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-13 11:46 | 118.31.18.77:2301 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-13 11:46 | recaptcha-check.com | IClickFix | ClickFix | threatcat_ch |
| 2026-08-13 11:46 | cloudflare-check.net | IClickFix | ClickFix | threatcat_ch |
| 2026-08-13 11:46 | 94.26.90.126:80 | IClickFix | ClickFix | threatcat_ch |
| 2026-08-13 11:41 | 194.116.236.54:2467 | XWorm | XWorm | abuse_ch |
| 2026-08-13 11:36 | 31.40.204.178:2404 | Remcos | remcos | abuse_ch |
| 2026-08-13 11:35 | 107.175.101.136:8823 | XWorm | XWorm | abuse_ch |
| 2026-08-13 11:35 | 45.152.183.18:8707 | AsyncRAT | asyncrat RAT | abuse_ch |
| 2026-08-13 11:33 | extranet-helpdesk26.com | TonRAT | | Anonymous |
| 2026-08-13 11:31 | szb4ajn8.abcdbro.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 11:25 | chewira.com | Unknown RAT | ConnectWise rmm ScreenConnect | abuse_ch |
| 2026-08-13 11:22 | bkrsqb.usen-echoxen.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 11:22 | wvsvkdju.eng-usa-goldalign.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-13 11:21 | yyllojs.us-slimsplitsmethod.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 11:19 | usen-echoxen.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 11:17 | vlgwuglmapxtjsabtd.web-bpzone.com | ClearFake | ClearFake win-0x1ca9 Windows | Anonymous |
| 2026-08-13 11:13 | xqudjilf.en-en-usa-sightfresh.com | ClearFake | ClearFake mac-0xe447 macOS | Anonymous |
| 2026-08-13 11:12 | gyoacuqjcvauminwrg.us-us-us-sightfresh.com | ClearFake | ClearFake win-0x1ca9 Windows | Anonymous |
| 2026-08-13 11:10 | vk10.waizerfly.com | Quasar RAT | quasar | abuse_ch |
| 2026-08-13 11:05 | 119.29.122.42:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 11:05 | 68.64.182.169:587 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 11:05 | 119.29.122.42:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 11:05 | 119.29.122.42:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 11:05 | 68.64.182.169:3306 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 11:03 | shkcinnc.beer | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-13 11:00 | https://awtar.co.il/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-13 11:00 | 202.181.188.64:1488 | Quasar RAT | QuasarRAT RAT | abuse_ch |
| 2026-08-13 10:53 | http://tokjoza.shop:5200/events | Remus | Remus | Myrtus0x0 |
| 2026-08-13 10:53 | http://shkpiva.shop:5627/posts | Remus | Remus | Myrtus0x0 |
| 2026-08-13 10:40 | xor.sm188castle.top | Vidar | Vidar | crep1x |
| 2026-08-13 10:40 | xor.beri303.org | Vidar | Vidar | crep1x |
| 2026-08-13 10:39 | otmkyq.usen-bpzone.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 10:34 | zdklknv.us-en-us-cognisurge.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 10:34 | usen-bpzone.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 10:33 | us-en-us-cognisurge.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 10:06 | us-us-us-goldalign.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 10:05 | 68.64.182.169:8010 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 10:05 | 68.64.182.169:5727 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 10:05 | 68.64.182.169:111 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 10:05 | 68.64.182.169:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 10:00 | 38.240.32.5:54984 | Nanocore RAT | NanoCore RAT | abuse_ch |
| 2026-08-13 09:50 | hatmnfx.usen-tinnitrol.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 09:49 | fprzbb.usechoxen.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 09:48 | usa-sugermute.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 09:48 | usen-tinnitrol.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 09:47 | 91.242.163.227:5174 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:47 | 86.124.168.48:443 | FAKEUPDATES | drb-ra SocGholish | abuse_ch |
| 2026-08-13 09:46 | 54.54.27.128:443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-08-13 09:46 | usa-sugarmute-us.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 09:46 | 38.240.57.198:443 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 09:46 | 217.60.241.247:7722 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:45 | 8.210.155.34:6868 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-13 09:45 | 203.161.55.41:7691 | AdaptixC2 | AdaptixC2 drb-ra | abuse_ch |
| 2026-08-13 09:45 | 202.73.4.82:44321 | AdaptixC2 | AdaptixC2 drb-ra | abuse_ch |
| 2026-08-13 09:44 | 194.76.226.90:4321 | AdaptixC2 | AdaptixC2 drb-ra | abuse_ch |
| 2026-08-13 09:44 | 193.138.195.29:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 09:44 | 193.138.195.29:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 09:44 | 193.138.195.29:56003 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 09:44 | 185.34.147.34:8080 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:44 | 185.34.147.35:8080 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:44 | 185.34.147.31:8080 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:44 | 185.34.147.32:8080 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:44 | 185.199.197.93:7443 | Unknown malware | Covenant drb-ra | abuse_ch |
| 2026-08-13 09:44 | 172.111.134.94:56013 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 09:43 | 154.36.188.233:8080 | Havoc | drb-ra Havoc | abuse_ch |
| 2026-08-13 09:43 | 139.180.136.200:7443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-08-13 09:43 | 130.12.182.39:2500 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:43 | 103.54.153.49:443 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-13 09:43 | 103.182.16.169:443 | DCRat | dcrat drb-ra RAT | abuse_ch |
| 2026-08-13 09:36 | llobae.usa-us-sugarmute.us | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 09:32 | fqtdjda.usen-thyrafemmebalance.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 09:32 | 5iywfu2r.vongquay8k.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 09:31 | usa-sightfresh.us | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 09:31 | usa-us-sugarmute.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 09:29 | usen-thyrafemmebalance.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 09:22 | opwvak.usa-us-sugarmute.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 09:22 | usa-keyslimdrops.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 09:18 | tqgyfdh.us-en--nervearmor.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 09:16 | us-en--nervearmor.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 09:16 | us-ennervearmor.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 09:09 | istounscnnd.beer | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-13 09:09 | mstclaudens.beer | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-13 09:06 | 118.107.9.161:1112 | ValleyRAT | valleyrat_s2 | abuse_ch |
| 2026-08-13 09:05 | 68.64.182.169:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 09:05 | 159.75.123.199:21 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 09:05 | 192.25.102.246:8088 | VShell | Vshell | Anonymous |
| 2026-08-13 09:01 | njnaqa.usa-usa-synaptigen.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 09:00 | usa-goldalign.us | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 09:00 | 118.107.9.161:1113 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-13 08:59 | usa-usa-synaptigen.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 08:56 | phgxuul.us-en--keyslimdrops.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 08:56 | us-enkeyslimdrops.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 08:50 | ongxxt.us-audizenn.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 08:48 | hhywcqm.us-eng-us-gutdrops.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 08:48 | us-audizenn.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 08:47 | 216.250.249.188:62520 | PureLogs Stealer | PureLogsStealer | abuse_ch |
| 2026-08-13 08:47 | usa-gold-align.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 08:45 | us-eng-us-gutdrops.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 08:32 | smurab.usa-tinnitrol.us | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 08:30 | http://190.196.253.117:11933/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-13 08:30 | 35bf80f0af528d458d53a7f7179e0ae284d6fb2be613bab904b8fe115e730b0d | Mirai | elf IoT | HoneyLabs |
| 2026-08-13 08:30 | http://154.90.70.23/x86 | Mirai | elf IoT | HoneyLabs |
| 2026-08-13 08:30 | https://validationreq.top/i-MXpmecIOMmvf/ | Unknown malware | phishing tg.pe |  tgpe |
| 2026-08-13 08:30 | 27.124.38.42:8383 | Unidentified VBS 001 | c2 fake-bank-statement ManageEngine RMM-abuse UEMS vbs | Jeffx109 |
| 2026-08-13 08:30 | 134.122.136.2:8383 | Unidentified VBS 001 | c2 fake-bank-statement ManageEngine RMM-abuse UEMS vbs | Jeffx109 |
| 2026-08-13 08:30 | bbs.baoxissde.one | Unidentified VBS 001 | fake-bank-statement phishing RMM-abuse vbs | Jeffx109 |
| 2026-08-13 08:30 | bbs.laokwmsde.art | Unidentified VBS 001 | fake-bank-statement phishing RMM-abuse vbs | Jeffx109 |
| 2026-08-13 08:30 | rukeyou.com | Unidentified VBS 001 | fake-bank-statement phishing RMM-abuse vbs | Jeffx109 |
| 2026-08-13 08:30 | varzcommunity.abrdns.com | Unidentified VBS 001 | fake-bank-statement phishing RMM-abuse vbs | Jeffx109 |
| 2026-08-13 08:30 | mbcasesores.com | Remcos | remcos |  Hellstorm |
| 2026-08-13 08:30 | https://mbcasesores.com/tap/BBVA_pdf.zip | Remcos | remcos | Hellstorm |
| 2026-08-13 08:30 | http://91.92.34.11/ | Stealc | c2 flka Loader Stealc stealer | Bitsight |
| 2026-08-13 08:30 | trainingforwarriors.com | Unknown malware | ClickFix | ClickFixer |
| 2026-08-13 08:29 | 68.64.183.127:8090 | Cobalt Strike | CobaltStrike cs-watermark-666666666 | abuse_ch |
| 2026-08-13 08:29 | 68.64.183.127:5555 | Cobalt Strike | CobaltStrike cs-watermark-666666666 | abuse_ch |
| 2026-08-13 08:29 | 139.196.217.227:80 | Cobalt Strike | CobaltStrike cs-watermark-666666666 | abuse_ch |
| 2026-08-13 08:28 | xmpxsvb.usa-us-goldalign.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 08:27 | usa-tinnitrol.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 08:27 | usa-eng-synaptigen.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 08:13 | http://mrlketo.shop:8932/categories | Remus | Remus | Myrtus0x0 |
| 2026-08-13 08:13 | http://vexdico.shop:8539/notifications | Remus | Remus | Myrtus0x0 |
| 2026-08-13 08:13 | http://shkpiva.shop:5627/teams | Remus | Remus | Myrtus0x0 |
| 2026-08-13 08:05 | 159.75.123.199:5003 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 08:05 | 40.160.232.46:4429 | DCRat | dcrat | Anonymous |
| 2026-08-13 08:05 | 45.130.147.57:8085 | VShell | Vshell | Anonymous |
| 2026-08-13 08:05 | 139.196.231.194:80 | Unknown malware | Viper | Anonymous |
| 2026-08-13 08:00 | https://bc1collection.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-13 07:59 | kappadocia.net | Mirai | Mirai | NDA0E |
| 2026-08-13 07:58 | y2hs3ri6.josephmichaelnh.com | ClearFake | ClearFake mac-0xfb64 macOS | Anonymous |
| 2026-08-13 07:56 | mgogel.synptigen.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 07:52 | yreztzh.usa-us--goldalign.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 07:51 | usa-usgoldalign.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 07:50 | elwbwcn.usa-us-bpzone.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 07:50 | usa-us-bpzone.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-13 07:46 | usa-eng-gutdrops.com | ClearFake | 13August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-13 07:31 | f7z38ywt.tiroalpaloes.co | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-13 07:25 | 103.30.7.55:8477 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-13 07:11 | whmakm.synaptigen-usa.com | ClearFake | ClearFake win-0x0cd5 Windows | Anonymous |
| 2026-08-13 07:05 | vthaoip.get-sightfresh.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-08-13 07:05 | 156.239.47.245:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 07:05 | 156.239.47.245:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-13 07:05 | 139.196.231.194:8080 | Unknown malware | Viper | Anonymous |
| 2026-08-13 07:05 | 139.196.231.194:60000 | Unknown malware | Viper | Anonymous |
| 2026-08-13 07:04 | 192.30.241.253:8041 | Unknown RAT | ConnectWise rmm ScreenConnect | abuse_ch |
| 2026-08-13 07:04 | maguire.top | Unknown RAT | ConnectWise rmm ScreenConnect | abuse_ch |
| 2026-08-13 07:01 | 161.248.14.213:443 | ValleyRAT | valleyrat_s2 | abuse_ch |
| 2026-08-13 06:55 | http://vexdico.shop:8539/reports | Remus | Remus | abuse_ch |
| 2026-08-13 06:55 | http://shkpiva.shop:5627/images | Remus | Remus | abuse_ch |
| 2026-08-13 06:55 | 72.62.195.74:8932 | Remus | Remus | abuse_ch |
| 2026-08-13 06:55 | http://mrlketo.shop:8932/workspaces | Remus | Remus | abuse_ch |