ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.

449

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'669'985

IOCs in corpus

Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

ioc:ms-debug-services.com ( run)
malware:CobaltStrike ( run)
tag:TA505 ( run)
threat_type:cc_skimming ( run)
uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)	IOC	Malware	Tags	Reporter
2026-04-26 00:31	https://tsc.gessoflex.com.br/	Vidar	Vidar	crep1x
2026-04-26 00:31	tsc.gessoflex.com.br	Vidar	Vidar	crep1x
2026-04-26 00:28	c0007.bizhomepass.kr	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-26 00:19	fleuytfp.dexon-node.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-26 00:05	etaknqgp.mivonex-serv.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 23:56	enfa1p13.mivonex-serv.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 23:50	haus-mp.mivonex-serv.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 23:44	onli6sp.mivonex-serv.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 23:39	comp-os4d.mivonex-serv.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 23:38	87.106.168.15:7004	XWorm	XWorm	abuse_ch
2026-04-25 23:28	soft-berg-6p.dex1lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 23:22	rouge-9.dex1lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 23:12	petit-fire-1.dex1lavel.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 23:07	bleu-4.dex1lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 22:59	www.adrianmiller.co.za	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 22:57	dark-land-7b.dex1lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 22:53	trucklinesfm.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 22:52	haus-3.miv8soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 22:40	vert-1.miv8soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 22:29	noir-6.miv8soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 22:23	fast-star-2x.miv8soren.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 22:23	jakartaupdate.online	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 22:18	open-9.nov2liren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 22:12	zeit-berg-4n.nov2liren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 21:56	soft-land-1.nov2liren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 21:48	rouge-3.nov2liren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 21:44	https://pulsegraph.xyz/t.188cfd3975db.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-25 21:43	https://pulsegraph.xyz/ext.0ff2555835d3.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-25 21:43	https://pulsegraph.xyz/ext-b.58316c304236.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-25 21:42	https://pulsegraph.xyz/t.js	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-25 21:41	pulsegraph.xyz	Unknown malware	ClickFix EXT	HuntYethHounds
2026-04-25 21:37	haus-1.sylo3mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 21:33	https://connectweb.chat/Secure.msi	Unknown malware	ClickFix	HuntYethHounds
2026-04-25 21:33	https://connectweb.chat/verify.html	Unknown malware	ClickFix	HuntYethHounds
2026-04-25 21:32	connectweb.chat	Unknown malware	ClickFix	HuntYethHounds
2026-04-25 21:25	dark-wald-5v.sylo3mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 21:10	holz-berg-9.sylo3mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 21:08	https://quilborne.org/c	KongTuke	ClickFix Kongtuke	HuntYethHounds
2026-04-25 21:07	https://quilborne.org/g	KongTuke	ClickFix Kongtuke	HuntYethHounds
2026-04-25 21:07	https://quilborne.org/t	KongTuke	ClickFix Kongtuke	HuntYethHounds
2026-04-25 21:06	https://quilborne.org/file.js	KongTuke	ClickFix Kongtuke	HuntYethHounds
2026-04-25 21:06	quilborne.org	KongTuke	ClickFix Kongtuke	HuntYethHounds
2026-04-25 20:58	petit-star-6z.sylo3mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 20:53	open-8.rax7pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 20:47	https://ivangay.bond/log.php	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-25 20:46	https://ivangay.bond/api/index.php	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-25 20:45	https://ivangay.bond/cf.js	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-25 20:45	ivangay.bond	Unknown malware	ClickFix ErrTraffic	HuntYethHounds
2026-04-25 20:41	https://quickbase-assist.com/Windows/download.php	Unknown malware	Fake Adobe SSA	HuntYethHounds
2026-04-25 20:41	https://quickbase-assist.com/Windows/viewpdf.php	Unknown malware	Fake Adobe SSA	HuntYethHounds
2026-04-25 20:40	https://quickbase-assist.com/Windows/statement.php	Unknown malware	Fake Adobe SSA	HuntYethHounds
2026-04-25 20:39	quickbase-assist.com	Unknown malware	Fake Adobe SSA	HuntYethHounds
2026-04-25 20:36	http://zoommcall.com/Windows/install-guide.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:36	http://zoommcall.com/Windows/download.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:35	http://zoommcall.com/Windows/microsoft-store.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:34	https://zoommcall.com/Windows/invite.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:34	zoommcall.com	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:32	http://pixeldrain.com/api/file/TV7mrYpe	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:31	https://zoomlive.us/Windows/ZoomWorkspace.bat	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:30	https://zoomlive.us/Windows/invite.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:30	zoomlive.us	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:27	https://meetingisliveatgooglemeett.top/Windows/microsoft-store.php	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-25 20:27	https://meetingisliveatgooglemeett.top/Windows/	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-25 20:26	meetingisliveatgooglemeett.top	Unknown malware	Fake Google Meet	HuntYethHounds
2026-04-25 20:21	https://www.docusign.my.googlejoininvite.click/download.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 20:20	blue-mond-9k.rax7pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 20:20	https://www.docusign.my.googlejoininvite.click/e-sign.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 20:20	https://www.docusign.my.googlejoininvite.click/eDocusign.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 20:19	docusign.my.googlejoininvite.click	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 20:16	https://jugbphm.click/user	Lumma Stealer	Lumma	abuse_ch
2026-04-25 20:16	https://doc.lauraice.xyz/process.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:15	https://doc.lauraice.xyz/update.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:14	haus-5.zex1liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 20:13	https://doc.lauraice.xyz/index.php/update.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:12	https://doc.lauraice.xyz/index.php	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:12	doc.lauraice.xyz	Unknown malware	Fake Zoom	HuntYethHounds
2026-04-25 20:04	kalt-7.zex1liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 19:58	soft-wald-4.zex1liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 19:52	rouge-6.zex1liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 19:49	https://usoffweb69.top/doc/download.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:48	https://usoffweb69.top/doc/e-sign.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:48	usoffweb69.top	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:47	http://www.viewsession.live/download.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:46	http://www.viewsession.live/e-sign.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:46	viewsession.live	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:42	https://doc-docsign.cyou/download.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:42	https://doc-docsign.cyou/e-sign.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:41	open-3.qiv5moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 19:41	https://doc-docsign.cyou/eDocusign.php	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:41	doc-docsign.cyou	Unknown malware	Fake DocuSign	HuntYethHounds
2026-04-25 19:35	petit-zeit-8.qiv5moren.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 19:33	http://91.199.133.178/u/setup.exe	Unknown malware	ClickFix	HuntYethHounds
2026-04-25 19:32	https://openclaws.it.com	Unknown malware	ClickFix	HuntYethHounds
2026-04-25 19:32	openclaws.it.com	Unknown malware	ClickFix	HuntYethHounds
2026-04-25 19:30	https://taranta-blow.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:29	noir-5x.qiv5moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 19:29	taranta-blow.digital	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:28	https://kakaduthr2sh.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:28	kakaduthr2sh.digital	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:27	https://dig-circling.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:27	dig-circling.digital	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:25	https://busy-sunni.digital/script.sh	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:25	busy-sunni.digital	Unknown malware	macOS	HuntYethHounds
2026-04-25 19:20	holz-berg-2.qiv5moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 19:10	vert-9.qiv5moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 19:05	gold-star-4s.qiv5moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 18:53	wald-baum-7.bexla8rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 18:48	bleu-2k.bexla8rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 18:42	zeit-land-5.bexla8rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 18:37	haus-3.bexla8rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 18:27	blue-fire-9w.bexla8rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 18:21	iron-8.dex2lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 18:15	https://legadodistillery.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 18:15	https://1homeinterior.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 18:15	https://joyeles.com.mx/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 18:15	https://newyork2026.northamericanskalcongress.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 18:11	petit-mond-6.dex2lavel.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 18:05	soft-4.dex2lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 17:59	kalt-berg-1m.dex2lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 17:52	rouge-7.dex2lavel.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 17:44	dark-star-2v.dex2lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 17:38	open-9.miv6soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 17:19	gold-land-8x.miv6soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 17:04	noir-1.miv6soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 16:48	kchjc5x.pav3lorex.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 16:27	wave-netw.pav3lorex.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 16:21	cp52.pav3lorex.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 16:14	bundle-sheet.nov7liren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 16:10	landing.anticalcareposeidon.it	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 16:09	rx64iv.nov7liren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 16:09	hf89cj2.nov7liren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 16:08	pl4sm-flow.nov7liren.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 16:07	sa1atik.cn	SalatStealer	SalatStealer	abuse_ch
2026-04-25 16:02	zencorear1.nov7liren.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 16:00	mpla-clo.cc	Unknown malware	ZigClipper	abuse_ch
2026-04-25 15:45	3fgrll.nov7liren.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 15:40	x1ov.to2varon.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 15:39	65.19.178.79:4782	Quasar RAT	QuasarRAT RAT	abuse_ch
2026-04-25 15:34	156.239.14.132:6667	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-25 15:34	156.239.14.132:6668	ValleyRAT	RAT ValleyRAT	abuse_ch
2026-04-25 15:32	dustfix.to2varon.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 15:25	glos-rep.to2varon.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 15:19	n0rt-crest.to2varon.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 15:12	193.161.193.99:51453	Quasar RAT	QusarRAT RAT	abuse_ch
2026-04-25 15:11	ernbe-leaf.to2varon.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 15:11	Unknown8482-51453.portmap.host	Quasar RAT	QusarRAT RAT	abuse_ch
2026-04-25 15:07	80njj90.sylo8mer.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 15:07	theorypin.sylo8mer.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 15:07	wfamakg.to2varon.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 15:05	35.184.9.17:443	MetaStealer	MetaStealer	abuse_ch
2026-04-25 15:01	https://gon.gessoflex.com.br/	Vidar	Vidar	crep1x
2026-04-25 15:01	gon.gessoflex.com.br	Vidar	Vidar	crep1x
2026-04-25 14:59	91.92.241.102:443	SectopRAT	Arechclient2 RAT SectopRAT	abuse_ch
2026-04-25 14:58	vitalpur.sylo8mer.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 14:57	163.61.183.112:9999	Quasar RAT	QusarRAT RAT	abuse_ch
2026-04-25 14:52	ba5ic0-spark.sylo8mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 14:45	absshop-ping.xyz	Unknown RAT		tanner
2026-04-25 14:45	acre-sagahill.xyz	Unknown RAT		tanner
2026-04-25 14:45	http://sonra.eutialyson.com/inst24.msi	ClearFake		tanner
2026-04-25 14:41	206.238.115.191:10086	Ghost RAT	Gh0stRAT RAT	abuse_ch
2026-04-25 14:41	talvaleet.histori-pneumonia.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:41	binaryboost.histori-pneumonia.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:41	cl.distritovagas.com	ClearFake		tanner
2026-04-25 14:41	cryst0-core.histori-pneumonia.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:41	sprdec.histori-pneumonia.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	shirela.pitifrube1la.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	zfvhht.pitifrube1la.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	tbfnru68.arapnik-nosog.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	nivo.arapnik-nosog.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	176.65.139.59:1337	Mirai	Mirai	seckle
2026-04-25 14:40	lbwtqscv.arapnik-nosog.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	nuevaprodeciencia.club	Unknown malware	agenteV2	johannes
2026-04-25 14:40	vmi3003111.contaboserver.net	Unknown malware	agenteV2	johannes
2026-04-25 14:40	https://pastebin.com/raw/0RmxqY57	Unknown malware	agenteV2	johannes
2026-04-25 14:40	https://nuevaprodeciencia.club/br77b/iayjaskyeiagds.php	Unknown malware	agenteV2	johannes
2026-04-25 14:40	dark-star-4.limbe7revolut.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	http://45.77.60.153/%2BU2QpCWLB0TeEK0Y%2BTHl1Q%3D%3D	GlassWorm	glassworm Wave3	tipo_deincognito
2026-04-25 14:40	http://217.69.8.40/63RbXCmTBoPZhfyuqUsNdA%3D%3D	GlassWorm	glassworm Wave3	tipo_deincognito
2026-04-25 14:40	http://45.77.60.153/get_arhive_npm/zi2WMapzCnO8eV9QY%2BQQXQ%3D%3D	GlassWorm	glassworm Wave3	tipo_deincognito
2026-04-25 14:40	http://45.77.60.153/darwin-universal/s4%2BECczuPY7jRKr7qbsMng%3D%3D?wallet=trezor	GlassWorm	glassworm wallet-trojan Wave3	tipo_deincognito
2026-04-25 14:40	http://217.69.8.40/get_arhive_npm/jCbp9cVu%2B%2B%2FczOTwvXfJbQ%3D%3D	GlassWorm	glassworm Wave3	tipo_deincognito
2026-04-25 14:40	http://45.77.60.153/darwin-universal/s4%2BECczuPY7jRKr7qbsMng%3D%3D?wallet=ledger	GlassWorm	glassworm wallet-trojan Wave3	tipo_deincognito
2026-04-25 14:40	http://217.69.8.40/darwin-universal/WJcjmFcy4f4SxNGlL5o0cQ%3D%3D?wallet=trezor	GlassWorm	glassworm wallet-trojan Wave3	tipo_deincognito
2026-04-25 14:40	http://217.69.8.40/darwin-universal/WJcjmFcy4f4SxNGlL5o0cQ%3D%3D?wallet=ledger	GlassWorm	glassworm wallet-trojan Wave3	tipo_deincognito
2026-04-25 14:40	http://45.32.150.251/g/63RbXCmTBoPZhfyuqUsNdA%3D%3D	GlassWorm	calendar-c2 glassworm Wave3	tipo_deincognito
2026-04-25 14:40	noir-8.limbe7revolut.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	holz-berg-5.presidium-spike.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	petit-fire-6.presidium-spike.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	https://quiglgy.com/file.js	KongTuke	Kongtuke	monitorsg
2026-04-25 14:40	quiglgy.com	KongTuke	Kongtuke	monitorsg
2026-04-25 14:40	https://quiglgy.com/t	KongTuke	Kongtuke	monitorsg
2026-04-25 14:40	https://quiglgy.com/g	KongTuke	Kongtuke	monitorsg
2026-04-25 14:40	https://quiglgy.com/c	KongTuke	Kongtuke	monitorsg
2026-04-25 14:40	bleu-5.dua1ismmatron.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	rouge-4.fixt-turbine.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	dark-berg-2.fixt-turbine.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	vert-3.ales1ine.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	zenmetrics-software.com	Unknown malware	ClickFix FastAPI Python-embed RAT rmm zm_agent	Lenny_3BO
2026-04-25 14:40	198.251.88.136:443	Unknown malware	ClickFix FastAPI Python-embed RAT rmm zm_agent	Lenny_3BO
2026-04-25 14:40	144.31.215.205:443	Unknown malware	ClickFix FastAPI Python-embed RAT rmm zm_agent	Lenny_3BO
2026-04-25 14:40	https://zenmetrics-software.com/api/devices/register	Unknown malware	ClickFix FastAPI Python-embed RAT rmm zm_agent	Lenny_3BO
2026-04-25 14:40	https://zenmetrics-software.com/api/ws/monitor/	Unknown malware	ClickFix FastAPI Python-embed RAT rmm zm_agent	Lenny_3BO
2026-04-25 14:40	https://zenmetrics-software.com/api/telegram-loggers/mine	Unknown malware	ClickFix FastAPI Python-embed RAT rmm zm_agent	Lenny_3BO
2026-04-25 14:40	zenmetrics.io	Unknown malware	ClickFix FastAPI Python-embed RAT rmm zm_agent	Lenny_3BO
2026-04-25 14:40	holz-baum-8.ales1ine.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	windows-telemetry.cc	CountLoader	CountLoader	aachum
2026-04-25 14:40	https://windows-telemetry.cc/api/submit	CountLoader	CountLoader	aachum
2026-04-25 14:40	adverbrequire.com	FAKEUPDATES	SocGholish	varysz
2026-04-25 14:40	zeit-9.ales1ine.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	api.uioplerixtem.com	FAKEUPDATES	SocGholish	varysz
2026-04-25 14:40	pa-portal.benningtonspringsmhp.com	FAKEUPDATES	SocGholish	varysz
2026-04-25 14:40	fast-berg-4.archit-physiol.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	gold-5.archit-physiol.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	soft-fire-6q.archit-physiol.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	haus-2.archit-physiol.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	rouge-8.slanikt7ay.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	noir-6.slanikt7ay.in.net	ClearFake	24April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	vert-2.cicada-tkacki.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	gold-mond-9z.cicada-tkacki.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	iron-star-2n.caissonnarc0m.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	176.65.139.141:1024	Mirai	Mirai	seckle
2026-04-25 14:40	edaciousedacioussewcomfortless.com	FAKEUPDATES	SocGholish	varysz
2026-04-25 14:40	soft-land-4.caissonnarc0m.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	noir-7.caissonnarc0m.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	holz-baum-4.excavat-toponym.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	blue-fire-8x.excavat-toponym.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	https://deepnoxa.com/update.zip	Unknown malware	ClickFix drawio-sideload electron-loader	Lenny_3BO
2026-04-25 14:40	https://deepnoxa.com/q	Unknown malware	ClickFix drawio-sideload electron-loader	Lenny_3BO
2026-04-25 14:40	deepnoxa.com	Unknown malware	ClickFix drawio-sideload electron-loader	Lenny_3BO
2026-04-25 14:40	https://chimefusion.com/u/	Unknown malware	ClickFix drawio-sideload electron-loader	Lenny_3BO
2026-04-25 14:40	chimefusion.com	Unknown malware	ClickFix drawio-sideload electron-loader	Lenny_3BO
2026-04-25 14:40	0642708ec7c25dec3168f1ab275a29bfd3cf69fe3afc3d5c6eadfa6750102883	Unknown malware	ClickFix drawio-sideload electron-loader	Lenny_3BO
2026-04-25 14:40	d942e9cfc0ca32a3d66ec690090ee22dca74953efed6889fb2292de36f5e39fd	Unknown malware	ClickFix drawio-sideload electron-loader	Lenny_3BO
2026-04-25 14:40	dark-6.excavat-toponym.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	gold-2.excavat-toponym.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	dsf2.excavat-toponym.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	jz8ef5.dex3lavan.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	svvift5-trace.dex3lavan.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	publish2-mount.bexla9rin.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	canopystor.bexla9rin.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	passiv-reage.qiv2moren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	cultureengine.qiv2moren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	audittiny.qiv2moren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	starwinter.rax4pavel.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	argrs.sylo6mer.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	falforma.rax4pavel.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	25eap9f.sylo6mer.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	atomicextract.to9varon.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	rntfvps.to9varon.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	ash-leaf.to9varon.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	inkraven.kymle1rax.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	tercheck.kymle1rax.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	auto-update.tx-wealth.com	FAKEUPDATES	SocGholish	monitorsg
2026-04-25 14:40	http://24.152.36.241:8080	Unknown malware	LofyStealer	johannes
2026-04-25 14:40	vor-spireos.nov3liren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	serven5um.nov3liren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	springledg.nov3liren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:40	conv3r5-glow.dex3lavan.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	mossphoto.zex8liron.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	trigg-crest.rax4pavel.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	149.12.67.231:139	Xtreme RAT	ExtRat Xtreme RAT	whoamix302
2026-04-25 14:39	119.167.191.229:10001	Xtreme RAT	ExtRat Xtreme RAT	whoamix302
2026-04-25 14:39	151.241.88.172:443	Cobalt Strike	Agentemis Beacon Cobalt Strike cobeacon	whoamix302
2026-04-25 14:39	91.92.242.228:443	Remcos		whoamix302
2026-04-25 14:39	83.142.209.58:8081	Remcos		whoamix302
2026-04-25 14:39	173.211.46.145:9000	SectopRAT	1xxbot ArechClient SectopRAT	whoamix302
2026-04-25 14:39	valehar.nov3liren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	hyper-inv0ice.miv4soren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	sknrzs3z.miv4soren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	zrkjvdly.podfdch.com	FAKEUPDATES	SocGholish	varysz
2026-04-25 14:39	sermarkos.miv4soren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	del1v-graph.dex7lavel.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	planrec.bexla2rin.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	colocip.bexla2rin.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	kelcoreos9.dex7lavel.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	3nzy-layer.qiv9moren.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	bundleform.bexla2rin.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	publishbark.zex3liron.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	velmesh7ix.zex3liron.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	https://ledger.eu.com/ledger-live-desktop.exe	Unknown malware		ninjacatcher
2026-04-25 14:39	igotnofriendsonlineorirl-imgonnakmslmao.skyhanni.cloud	Unknown malware	DoubleFantasy Gibberish LiteLLM payload teampcp telnyx	johannes
2026-04-25 14:39	pixe2-zone.zex3liron.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	f4ct0ry-mark.zex3liron.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:39	rain-line.rax5pavel.in.net	ClearFake	25April2026 ClearFake Commandline Windows	Gi7w0rm
2026-04-25 14:35	reagentcore.sylo8mer.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 14:29	dealparc.sylo8mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 14:23	l1ch-mesh.rax5pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 14:21	47.94.167.171:7777	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-25 14:21	39.97.233.222:7777	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-25 14:21	8.136.97.98:8081	Cobalt Strike	CobaltStrike cs-watermark-391144938	abuse_ch
2026-04-25 14:18	107.189.17.214:443	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-25 14:18	80.78.30.153:443	Cobalt Strike	CobaltStrike cs-watermark-987654321	abuse_ch
2026-04-25 14:17	124.222.75.188:443	Cobalt Strike	CobaltStrike cs-watermark-100000	abuse_ch
2026-04-25 14:10	campa-fla.rax5pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 13:59	formtrai.rax5pavel.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 13:56	suapagina1.com.br	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 13:53	m17e.rax5pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 13:48	quorlineex.rax5pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 13:30	bradley.cyber-demo-client-website1.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 13:24	tr4ck7-plate.zex3liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 13:17	quorforgeet6.zex3liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 13:13	zeermoda.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 13:05	zakateksmaku.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 13:00	4wjh4hoo.qiv9moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 12:54	quormesh1os.qiv9moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 12:48	sng2kb.qiv9moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 12:41	www.tabaccheriadavino.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 12:37	6z3dyra.qiv9moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 12:31	https://wgw.gessoflex.com.br/	Vidar	Vidar	crep1x
2026-04-25 12:31	wgw.gessoflex.com.br	Vidar	Vidar	crep1x
2026-04-25 12:27	boostmanifest.qiv9moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 12:21	eamo.bexla2rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 12:11	fl4rn2-phase.bexla2rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 12:06	bundleform.bexla2rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 11:53	f0cu-grid.bexla2rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 11:39	workersolar.dex7lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 11:33	kel-marken.dex7lavel.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 11:20	mer-meshis.dex7lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 11:05	summiceda.dex7lavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 10:59	validatorgri.miv4soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 10:48	gpfour4.miv4soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 10:29	fjtx.miv4soren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 10:16	rockconvoy.kymle1rax.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 10:10	firmwa7-point.to9varon.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 10:05	bytehard.sylo6mer.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 09:46	dpcr.qiv2moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 09:40	focusflame.bexla9rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 09:25	syashop.uk.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-25 09:25	bbc.in.net	Nanocore RAT	NanoCore	abuse_ch
2026-04-25 09:23	84gxvrtf.miv7sorel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 09:17	systelaun.nov3liren.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 09:15	172.67.178.110:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-25 09:15	104.21.71.182:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-25 09:10	clust1-dock.nov3liren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 08:56	techel.co.ke	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 08:55	airtellwireless.it.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-25 08:51	tasheelbd.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 08:50	104.21.9.66:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-25 08:50	172.67.159.51:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-25 08:36	atom1-span.nov3liren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 08:31	https://psy.gessoflex.com.br/	Vidar	Vidar	crep1x
2026-04-25 08:31	psy.gessoflex.com.br	Vidar	Vidar	crep1x
2026-04-25 08:29	emidb.kymle1rax.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 08:23	geo-1c3.kymle1rax.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 08:18	veltide4a.kymle1rax.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 08:10	thick8-signal.kymle1rax.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 07:48	neo-cornput.to9varon.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 07:42	bytefore.to9varon.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 07:41	somandodestinos.com.br	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 07:36	smarketing.pe	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 07:25	server-scar.to9varon.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 07:24	sklep.wisen.pl	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 07:20	small-devices.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 07:20	hdf358xa.sylo6mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 07:18	signnscanpdf.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 07:11	amber-mon.sylo6mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 07:10	shaurarodgers.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 07:06	gentl-snow.sylo6mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 07:05	servidomestico.es	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:58	screenox.in	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:51	satavina.vn	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:49	vorlithen4.sylo6mer.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 06:44	saraj.ba	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:43	sernexor8.rax4pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 06:37	sales.wilderness-explorers.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:33	salamancacooperativa.es	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:28	rvbconsult.com.br	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:23	forrn7-panel.rax4pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 06:23	ru.bergstreisser.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:18	rosemarie.zerosoft.in	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 06:18	jkdraj.rax4pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 06:10	vellithal3.rax4pavel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 06:02	rightbrainiacs.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 05:58	reklamniplochytabor.cz	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 05:57	dyn-tideis.zex8liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 05:51	reforcelog.com.br	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 05:51	ultra-f1rmvva.zex8liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 05:41	sub-n3uron.zex8liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 05:39	raica.ind.br	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 05:35	kkdho.zex8liron.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 05:32	radiationoncologycare.com	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 05:29	vorcrestix.zex8liron.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 05:21	72z5.zex8liron.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 05:15	https://loja.lauricoco.com.br/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 05:15	https://sergemoulypeintre.fr/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 05:15	https://asoandes.org/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 05:15	https://leslieporterfield.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 05:15	https://lauricoco.com.br/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 05:15	https://praiahall.com.br/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 05:02	ollowgl.qiv2moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 04:56	motif4-vector.qiv2moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 04:45	gf2rfd.qiv2moren.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 04:30	7fsk.bexla9rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 04:25	theponzu.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-25 04:25	sc88884.com	Nanocore RAT	NanoCore	abuse_ch
2026-04-25 04:20	172.67.208.215:443	Nanocore RAT	NanoCore RAT	abuse_ch
2026-04-25 04:15	https://cleanpoweraustralia.com.au/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 04:15	https://congresswcc.com/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 04:15	https://coca.com.sg/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 04:15	https://nutrionline.club/	Vidar	ClickFix compromised etherhiding Polygon Vidar WordPress	Anonymous
2026-04-25 04:14	echoloa.bexla9rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 04:09	theormot.bexla9rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 04:03	vorforge7al.bexla9rin.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 03:52	proto-str34m.dex3lavan.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 03:33	norspireos3.dex3lavan.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 03:25	tracesound.dex3lavan.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 03:20	segmentash.dex3lavan.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 03:12	growthcircui.miv7sorel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 03:06	surv3y7-plate.miv7sorel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 02:57	bark-line.miv7sorel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 02:51	basicret.miv7sorel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 02:46	tri-fluxa.miv7sorel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 02:39	solafirmw.miv7sorel.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 02:31	dffer.excavat-toponym.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 02:04	fast-land-9c.excavat-toponym.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 01:45	zeit-1.excavat-toponym.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 01:34	open-3.caissonnarc0m.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 01:26	https://peafamqe.cyou	Lumma Stealer	Lumma	abuse_ch
2026-04-25 01:26	petit-berg-5p.caissonnarc0m.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 01:05	rouge-6.caissonnarc0m.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 01:04	marketingcomdende.com.br	StrelaStealer	StrelaStealer	threatcat_ch
2026-04-25 00:51	haus-1.cicada-tkacki.in.net	ClearFake	ClearFake	threatcat_ch
2026-04-25 00:38	bleu-4.cicada-tkacki.in.net	ClearFake	ClearFake	Anonymous
2026-04-25 00:32	kalt-wald-8.cicada-tkacki.in.net	ClearFake	ClearFake	threatcat_ch