ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


562

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'726'689

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-08-05 02:47t36jqqkc.nesplowell.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-05 02:37lehvez.peacockhomes.net ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-05 02:26pj0410c1.hallmarkcarpets.net ClearFakeClearFake mac-0xfb64 macOS Anonymous
2026-08-05 02:202dflte3h.grannygshemporium.com ClearFakeClearFake mac-0x76c7 macOS Anonymous
2026-08-05 02:10riorego.finkfamilyautomotive.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-05 02:05210.56.48.227:8081 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 02:0538.55.145.42:22 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 02:05210.56.48.227:888 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 02:05210.56.48.227:8080 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 01:52ezezvo.peacefulacrestx.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-05 01:23xdvitbv.drubenginecologo.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-05 01:17http://hooiuse.click:4938 RemusRemus Myrtus0x0
2026-08-05 01:15https://stfrancisvilla.com/ VidarClickFix compromised etherhiding Polygon Vidar WordPress Anonymous
2026-08-05 01:05210.56.48.227:22 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 01:05210.56.48.227:443 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 01:05101.42.255.92:8555 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 01:05106.75.249.202:111 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 01:05106.75.249.202:9001 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 01:02bujtgh.patrickschrader.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-05 01:00ybxpgx.pasukan99.de.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-05 00:46q96rou1o.necedubd.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-05 00:39kjjhdkx.abcdbro.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-05 00:06zoihkb.pureglamlb.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-05 00:05106.75.249.202:22 Cobalt StrikeCobaltStrike Anonymous
2026-08-05 00:05195.177.94.210:80 AsyncRATasyncrat Anonymous
2026-08-05 00:04pureglamlb.com ClearFakeClearFake threatcat_ch
2026-08-04 23:54xxziiqx.realmanpath.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 23:51realmanpath.com ClearFakeClearFake threatcat_ch
2026-08-04 23:47210.56.48.227:80 Cobalt StrikeCobaltStrike drb-ra abuse_ch
2026-08-04 23:47222.255.215.42:30005 Cobalt StrikeCobaltStrike drb-ra abuse_ch
2026-08-04 23:19ghkkya.purefunsurfboards.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 23:18purefunsurfboards.com ClearFakeClearFake threatcat_ch
2026-08-04 23:11qiybelm.razonewane.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 23:06razonewane.com ClearFakeClearFake threatcat_ch
2026-08-04 23:05114.132.46.254:8443 Unknown malwareViper Anonymous
2026-08-04 23:05117.72.202.93:80 Unknown malwareSupershell Anonymous
2026-08-04 23:05117.72.202.93:22 Unknown malwareSupershell Anonymous
2026-08-04 22:43ju8teib5.natsumitapas.net ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 22:35ppdrqc.pshealthcare.net ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 22:33pshealthcare.net ClearFakeClearFake threatcat_ch
2026-08-04 22:23egybouu.qummy-group.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 22:20qummy-group.com ClearFakeClearFake threatcat_ch
2026-08-04 22:05117.72.202.93:8888 Unknown malwareSupershell Anonymous
2026-08-04 21:5047.86.2.244:558 ValleyRATvalleyrat_s2 abuse_ch
2026-08-04 21:48ruqlnx.primecarelearningcenter.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 21:47primecarelearningcenter.com ClearFakeClearFake threatcat_ch
2026-08-04 21:45118.107.9.185:1112 ValleyRATRAT ValleyRAT abuse_ch
2026-08-04 21:4547.86.2.244:557 ValleyRATRAT ValleyRAT abuse_ch
2026-08-04 21:45118.107.43.220:8080 ValleyRATRAT ValleyRAT abuse_ch
2026-08-04 21:45http://ck077996.tw1.ru/L1nc0In.php DCRatdcrat RAT abuse_ch
2026-08-04 21:45172.245.209.149:2414 RemcosRAT RemcosRAT abuse_ch
2026-08-04 21:45https://psk.y8slot.net/ VidarVidar crep1x
2026-08-04 21:45https://psk.sinism188.top/ VidarVidar crep1x
2026-08-04 21:45psk.y8slot.net VidarVidar crep1x
2026-08-04 21:45psk.sinism188.top VidarVidar crep1x
2026-08-04 21:45http://mainserver.com/gate.php PonyPony abuse_ch
2026-08-04 21:36ldtwsfb.quiltlegacy.net ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 21:35quiltlegacy.net ClearFakeClearFake threatcat_ch
2026-08-04 21:24c4nrz428.gregoryschreiercabinetmaker.com ClearFakeClearFake mac-0xfb64 macOS Anonymous
2026-08-04 21:22g5u8gksz.federationofpbos.org ClearFakeClearFake mac-0x76c7 macOS Anonymous
2026-08-04 21:05172.94.9.104:8080 DCRatdcrat Anonymous
2026-08-04 21:05165.154.244.107:8084 VShellVshell Anonymous
2026-08-04 21:05130.94.66.43:19999 VShellVshell Anonymous
2026-08-04 21:05103.251.113.127:8084 VShellVshell Anonymous
2026-08-04 21:03rejcck.pasukan138.de.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 20:54zwkfwqg.quarkpets.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 20:53pypi-get.com Unknown malwarenpm threatcat_ch
2026-08-04 20:53js-mirror.com Unknown malwarenpm threatcat_ch
2026-08-04 20:49quarkpets.com ClearFakeClearFake threatcat_ch
2026-08-04 20:42i3pwieem.rsfoodproducts.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 20:38npm-cache.com Unknown malwarenpm threatcat_ch
2026-08-04 20:38awqhnjewqjkl.icu Unknown malwarenpm threatcat_ch
2026-08-04 20:18nqxtbf.oopsboobs.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 20:06mwkzudz.qualitycounselingcenter.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 20:0543.138.135.175:18443 VShellVshell Anonymous
2026-08-04 20:0538.55.105.238:8084 VShellVshell Anonymous
2026-08-04 20:04qualitycounselingcenter.com ClearFakeClearFake threatcat_ch
2026-08-04 19:58borrilkapi4422.icu Unknown malwareClickFix threatcat_ch
2026-08-04 19:4693.82.26.41:8000 Eye Pyramiddrb-ra EyePyramid abuse_ch
2026-08-04 19:4680.96.109.107:443 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:4543.134.169.103:8080 Havocdrb-ra Havoc abuse_ch
2026-08-04 19:4535.202.238.13:8443 Evilginxdrb-ra EvilGinx EvilGoPhish abuse_ch
2026-08-04 19:4531.76.96.193:80 TsundereDinDoor drb-ra abuse_ch
2026-08-04 19:453.122.223.106:80 Unknown malwaredrb-ra Mythic abuse_ch
2026-08-04 19:44207.189.25.132:443 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:44203.98.68.17:30200 AsyncRATasyncrat drb-ra RAT abuse_ch
2026-08-04 19:44195.177.94.71:56001 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:44176.97.114.8:56001 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:44176.97.114.8:56002 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:44172.182.216.158:443 Unknown malwaredrb-ra Mythic abuse_ch
2026-08-04 19:43161.97.154.193:56001 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:43161.97.154.193:56002 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:43153.75.88.67:6666 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:43105.108.17.137:443 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 19:43100.31.3.235:8082 DanaBotDanBot drb-ra abuse_ch
2026-08-04 19:33kozjbl.partyboxlovely.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 19:31partyboxlovely.com ClearFakeClearFake threatcat_ch
2026-08-04 19:24health.sigmacoast.one RevStealerRevStealer Myrtus0x0
2026-08-04 19:20keofokd.pureplatinumdancers.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 19:18pureplatinumdancers.com ClearFakeClearFake threatcat_ch
2026-08-04 19:05116.212.123.164:8080 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 19:05107.161.86.90:5985 VShellVshell Anonymous
2026-08-04 19:05116.212.123.164:80 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 19:05114.132.46.254:5173 Unknown malwareViper Anonymous
2026-08-04 19:0539.107.248.48:8083 VShellVshell Anonymous
2026-08-04 18:46cdyyhe.parma-delikatessen.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 18:45parma-delikatessen.com ClearFakeClearFake threatcat_ch
2026-08-04 18:33sqqzefc.pmco-sa.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 18:33pmco-sa.com ClearFakeClearFake threatcat_ch
2026-08-04 18:26xn6yof5y.josephmichaelnh.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 18:20bib.sinism188.top VidarVidar crep1x
2026-08-04 18:20https://bib.sinism188.top/ VidarVidar crep1x
2026-08-04 18:15https://bib.y8slot.net/ VidarVidar crep1x
2026-08-04 18:15bib.y8slot.net VidarVidar crep1x
2026-08-04 18:05116.212.123.164:443 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 18:0535.240.152.221:8080 VShellVshell Anonymous
2026-08-04 18:01nzjnxe.paquetitoexpressny.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 18:00paquetitoexpressny.com ClearFakeClearFake threatcat_ch
2026-08-04 18:0061.54.27.211:8082 VBREVSHELLViriBack Vshell abuse_ch
2026-08-04 17:49wifcimg.planksbiergarten.site ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 17:47planksbiergarten.site ClearFakeClearFake threatcat_ch
2026-08-04 17:17chzkvv.panthertowingfl.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 17:14panthertowingfl.com ClearFakeClearFake threatcat_ch
2026-08-04 17:07ceragpv.pjnphotography.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 17:0579.110.49.186:80 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 17:0579.110.49.186:8080 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 17:0579.110.49.186:3389 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 17:02pjnphotography.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 17:01petloversgallery.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 16:487900cfedd44cd639839f0c4f6d382e62fd541046 Coinminer Grim
2026-08-04 16:48ba1a663e230ce317ae337b5d83046ee7 Coinminer Grim
2026-08-04 16:48f5701fb674b20fdc997b7eba242ace9f8a314807 ValleyRAT Grim
2026-08-04 16:48ebbdc2815774b02394c688f9415325bb ValleyRAT Grim
2026-08-04 16:48b7b1cf77eccf7fab42d83f57facdb1105d51050295a044ecdf75cc8280679788 Coinminer Grim
2026-08-04 16:48323574f16b63ebd05f097a572e8cf6e56efaa910 ValleyRAT Grim
2026-08-04 16:488f4d337438eaf684b61e294ea52588f1 ValleyRAT Grim
2026-08-04 16:48875630fd7cae532e3700bec48bdd1c51ba7f133a595d4a62b94733f54073c62e ValleyRAT Grim
2026-08-04 16:48cb245fa68d9f08372281be72241876a0 WannaCryptor Grim
2026-08-04 16:481ab82089b52096ef768066cc619f1774801834221e22480411afa09e253461b4 ValleyRAT Grim
2026-08-04 16:48da6a114917bdb41286172fcaec6a05a3 ValleyRAT Grim
2026-08-04 16:48675cf32ce5553a1f2a9fa1b65014abc30df6a93f6ace616878dc534fc238c77a WannaCryptor Grim
2026-08-04 16:48ec0fba7419fe129f91fed01cae2d24fd3cbd480f WannaCryptor Grim
2026-08-04 16:480d891499b453fec47129011c7160128223bbfabd ValleyRAT Grim
2026-08-04 16:480df2f895abbbea29565fc048931a0169 Tofsee Grim
2026-08-04 16:487b1da0a6dc4eb9fc73d0e810677c2740cad5a1320fc5c9af00babf553ca2cebc ValleyRAT Grim
2026-08-04 16:4888e1e1c77f64a17500d8569ee43b7a28 PSLogger Grim
2026-08-04 16:4826ee4c6ab5c6e6950273cbfc795b207c156ef4ce07acc3f364f9b98364588082 Tofsee Grim
2026-08-04 16:48f73641739706cd6507c28c8cede95210dcb9ee6d Tofsee Grim
2026-08-04 16:47a7397cad1aabe9ce156087682cb67e79b49441fe PSLogger Grim
2026-08-04 16:47e202edf94b706e5596283aa3456760de6bcbcd54 TerraStealer Grim
2026-08-04 16:476435611106d0d7b3301229b9021a9908 TerraStealer Grim
2026-08-04 16:47fdd20fd8b01a168bc84fca30eb3c29176a770f173318368abd6ca09d37901480 PSLogger Grim
2026-08-04 16:4771147bd6657f1dc2837aaa54d2b4567ebb81ef31 TerraStealer Grim
2026-08-04 16:4783928513bb5518e71704d089dedfe44d TerraStealer Grim
2026-08-04 16:470d29741bb7161b12319909ecbbfb6029b08fe80c98fc8a93658ea14fededdfd9 TerraStealer Grim
2026-08-04 16:473de90646a26faadc719b3795c42bd9576e316212 BluStealer Grim
2026-08-04 16:4797b43a41d7f2b2cdfb960693da5e97f5 BluStealer Grim
2026-08-04 16:47bc7d5b9ae130f1b9c5a41517d56d9213950ef7f9b1ed78d9f33a4b2797d009e1 TerraStealer Grim
2026-08-04 16:4712767208e2775d74cec36dfe0a6dadf4 Kuiper Grim
2026-08-04 16:47694483cdead4d874dd33b0a7c11d6c5cbdd1989352c3f7376a71855ad0147dee BluStealer Grim
2026-08-04 16:47f1f304a6be3928d7c8ee7e65e23b4306da4d83c5ff0bb3791ef44afe2506e2f2 Kuiper Grim
2026-08-04 16:479ce079710d5d0e0d8778b6fd5eaae8267bb9dc04 Kuiper Grim
2026-08-04 16:473593882c47f2a944bfe51f03215c8bb3ff6b3fa8 XWorm Grim
2026-08-04 16:47002f8166ec9f671ba830b7cd2263b5e1 XWorm Grim
2026-08-04 16:4790734748b072f42f9f89ba03057a6f9ab4bed72f Kuiper Grim
2026-08-04 16:47f0d2934199c9f86d25014d628cd7385a Kuiper Grim
2026-08-04 16:47ea86029605e9288a9320c3ca83f30e1e63d06936939a3039880f45770ea83831 XWorm Grim
2026-08-04 16:4796a2407bfed101aaaf727a67481d0179297f6822 Venus Stealer Grim
2026-08-04 16:47a58f1ebc2fd3a5787708e3da7eba5058 Venus Stealer Grim
2026-08-04 16:47b2b6c906f355c11945f84134f27559acce2247ae2214d544734bddf97e9ee22c Kuiper Grim
2026-08-04 16:47b8afef7e77d61a2abf0b80915cc0769f2c0531ae Kuiper Grim
2026-08-04 16:47df84f03c4fa8d429a13e4ce8b010a66a Kuiper Grim
2026-08-04 16:4710b6a8f017ecb14dfde4e8738415ce5feb3e617715f345c30549cf4f4c3d3fa1 Venus Stealer Grim
2026-08-04 16:47873421118a0984c7f3a8cccac26f3bd010e70f2f Vidar Grim
2026-08-04 16:4765290a0084c07a7c3916db8bc86a16ac Vidar Grim
2026-08-04 16:4798c3283cac92544cf7d2237d4a457181ae5a2e3983bb17728df8b81d067c8e4a Kuiper Grim
2026-08-04 16:479f28937b9f7e0ea73557bb2354702862b03308ac Coinminer Grim
2026-08-04 16:4794498bcc84599ebe710f3efd951845da Coinminer Grim
2026-08-04 16:47b7fd8d6dddf0e4321dd5303ecd50d4a9d833ab4a80e0a01face12116363a8103 Vidar Grim
2026-08-04 16:4713260e2e1ec04400403f6dfd4cb93994 CrossRAT Grim
2026-08-04 16:474b3d9ff0f3eef2684879bea47fb066a259bb2cc18bb0ab0c2f0c069e732dd5e1 Coinminer Grim
2026-08-04 16:4767e230755c1cf7cfc8d92a98c4caac13 CrossRAT Grim
2026-08-04 16:4753356890a6e72a151d869823f410ecf681731868d241c07ff02d51d6436c3dfd CrossRAT Grim
2026-08-04 16:47f54e0ed941e989cfe030e0a7682d669b85612ab5 CrossRAT Grim
2026-08-04 16:47c67f0473eae2e790676584b108e7ed73 Phantom Stealer Grim
2026-08-04 16:47033eb7a351b65d9aa4e6a19a0be58ea87f579671fe54c3725129589f834c2d06 CrossRAT Grim
2026-08-04 16:4757f60f9ca384d9b29794de5446c8fe6fe4e214c2 CrossRAT Grim
2026-08-04 16:47e0bf699a9016ef9a7740953c6ec4feb0 Formbook Grim
2026-08-04 16:47c0654ca707fd45d9563f46dbd51fc03b75f5a05ec0ffc26816bcedcd13520b31 Phantom Stealer Grim
2026-08-04 16:47b14b5b72fb8314c14c5fa5e9046802b4202f3175 Phantom Stealer Grim
2026-08-04 16:471cebb153fcb26dcd06614a95276b22a3 NetWire RC Grim
2026-08-04 16:47438a199c60026b897fdda4da23d69e103cad34864a070d1b7659cf462628505f Formbook Grim
2026-08-04 16:47bf119129aa816d95af82b5ed9194aaba52b0d90f Formbook Grim
2026-08-04 16:476292b4f53c529bdafbb1476e7de48e73 NetWire RC Grim
2026-08-04 16:4757e5da8f7c404c1754a866c1f8d51e31f9f21525c17e586ef48eb2a62fa4ef20 NetWire RC Grim
2026-08-04 16:472d7b8391c51937f7c11430a91013a115c315f92f NetWire RC Grim
2026-08-04 16:47a5508bc966bb8d4e0a4275dd96347d84ceecbdb1679fb27ddb4f568fb083faa2 NetWire RC Grim
2026-08-04 16:475a2317b228f48fa8f93665dc6a74fc38888b839a NetWire RC Grim
2026-08-04 16:47de34950c485f3fdaa49687cdd4c71cf6c906774d NetWire RC Grim
2026-08-04 16:4778ea9434eb06f6069346be4dc920e706 NetWire RC Grim
2026-08-04 16:4796a837eee8332c0d27efcad1537000001e5aa86d XWorm Grim
2026-08-04 16:472bb1b024135ef7b0af3141d389530d82 XWorm Grim
2026-08-04 16:470b74552f66e1fb88f401e0c27c9dd224219bc3698a556b8827c392cce5a1bbd3 NetWire RC Grim
2026-08-04 16:47833b709b93b80919dc06d8b0619de8919df283060dd9fdb9da6bd4d9b778ca7a XWorm Grim
2026-08-04 16:30vkjzbd.painting-ct.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 16:28painting-ct.com ClearFakeClearFake threatcat_ch
2026-08-04 16:28https://ferncurrent14.com/curl/a7ec41c89a3dc6bf3de47264b4a3013134c7273dd1aa379859c2149b7517f0b2 Unknown malwareClickFix Cloudflare FakeCaptcha macOS novumanalytica
2026-08-04 16:28137.184.70.190:8080 AisuruAISURU c2 Bitsight
2026-08-04 16:28ferncurrent14.com Unknown malwareClickFix Cloudflare FakeCaptcha macOS novumanalytica
2026-08-04 16:28acocdn.com jSpy Avanesyan23
2026-08-04 16:28asecdns.com jSpy Avanesyan23
2026-08-04 16:28wijnbarvicini.nl Unknown malwareClickFix ClickFixer
2026-08-04 16:27jqali1r8.jimmieleeautosales.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 16:25ubvqus4r.foodpapajobs.com ClearFakeClearFake mac-0xfb64 macOS Anonymous
2026-08-04 16:22b7uoqibt.eachway-multiplier.com ClearFakeClearFake mac-0x76c7 macOS Anonymous
2026-08-04 16:20https://sot.tbo88men.top VidarVidar abuse_ch
2026-08-04 16:18absolutecollisionla.com ClearFake4August2026 ClearFake Commandline macOS Gi7w0rm
2026-08-04 16:17yljorhr.pepperstrail.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 16:15pepperstrail.com ClearFakeClearFake threatcat_ch
2026-08-04 16:12finterd.xyz Unknown malware abuse_ch
2026-08-04 16:12217.60.195.118:7000 Unknown malware abuse_ch
2026-08-04 16:05195.177.94.210:8080 AsyncRATasyncrat Anonymous
2026-08-04 16:0549.234.12.182:1564 VShellVshell Anonymous
2026-08-04 16:0538.76.194.219:8088 VShellVshell Anonymous
2026-08-04 16:0547.83.217.23:10000 VShellVshell Anonymous
2026-08-04 15:43rlnmfj.paginaespumaflex.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 15:43paginaespumaflex.com ClearFakeClearFake threatcat_ch
2026-08-04 15:31wdagbwd.peacockhomes.net ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 15:29peacockhomes.net ClearFakeClearFake threatcat_ch
2026-08-04 15:05114.132.46.254:8888 Unknown malwareViper Anonymous
2026-08-04 15:05114.132.46.254:22 Unknown malwareViper Anonymous
2026-08-04 15:0545.61.176.146:22 HavocHavoc Anonymous
2026-08-04 14:58osnmbk.overtheitgirl.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 14:47snrmizb.peacefulacrestx.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 14:44peacefulacrestx.com ClearFakeClearFake threatcat_ch
2026-08-04 14:40https://com.y8slot.net/ VidarVidar crep1x
2026-08-04 14:40https://com.sinism188.top/ VidarVidar crep1x
2026-08-04 14:25bt6b37z4.leesvillelakerealtor.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 14:15https://indusrocktool.co.in/ VidarClickFix compromised etherhiding Polygon Vidar WordPress Anonymous
2026-08-04 14:14dmmcvi.ospreyyfx.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 14:12ospreyyfx.com ClearFakeClearFake threatcat_ch
2026-08-04 14:05130.12.182.39:7001 AsyncRATasyncrat Anonymous
2026-08-04 14:05130.12.182.39:7707 AsyncRATasyncrat Anonymous
2026-08-04 14:0549.7.54.246:8080 VShellVshell Anonymous
2026-08-04 14:05130.12.182.39:6606 AsyncRATasyncrat Anonymous
2026-08-04 13:59zhrmhqs.patrickschrader.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 13:58patrickschrader.com ClearFakeClearFake threatcat_ch
2026-08-04 13:27vtxywg.osbratstvojedinstvo.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 13:15rnhwlgl.pasukan99.de.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 13:13pasukan99.de.com ClearFakeClearFake threatcat_ch
2026-08-04 13:05130.12.182.39:8808 AsyncRATasyncrat Anonymous
2026-08-04 13:0543.136.99.254:22 Unknown malwareViper Anonymous
2026-08-04 13:0345.148.18.38:58268 RemcosRAT RemcosRAT abuse_ch
2026-08-04 13:01103.67.163.114:4688 RemcosRAT RemcosRAT abuse_ch
2026-08-04 12:58borrovnou4421.icu Unknown malwareClickFix etherhiding injected-loader TDS Anonymous
2026-08-04 12:55217.60.195.193:443 XWormXWorm abuse_ch
2026-08-04 12:55officefagbo.duckdns.org Remcosremcos abuse_ch
2026-08-04 12:55icingwater.duckdns.org Remcosremcos abuse_ch
2026-08-04 12:53ftp.gebzekamlok.com Agent TeslaAgentTesla abuse_ch
2026-08-04 12:43nyvftv.orderlacocinamexicanfood.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 12:43hhczvrj.pasukan4d.de.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 12:42146.103.112.159:443 Overlord RATOverlordRAT RAT abuse_ch
2026-08-04 12:41pasukan4d.de.com ClearFakeClearFake threatcat_ch
2026-08-04 12:41orderlacocinamexicanfood.com ClearFakeClearFake threatcat_ch
2026-08-04 12:33142.250.141.188:5228 Unknown RATLxBaseRAT RAT abuse_ch
2026-08-04 12:28mail.spacaex.com MASS Loggermasslogger abuse_ch
2026-08-04 12:26jbdkw2wh.ledridingco.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 12:23217.64.151.119:4521 Unknown RATLxBaseRAT RAT abuse_ch
2026-08-04 12:19http://119.157.76.43:44379/Mozi.a Mozielf IoT Mozi HoneyLabs
2026-08-04 12:18ma-pdffiller.lat Unknown malware abuse_ch
2026-08-04 12:18https://ma-pdffiller.lat/h/estagio1.php Unknown malware abuse_ch
2026-08-04 12:05114.132.46.254:8082 Unknown malwareViper Anonymous
2026-08-04 12:05114.132.46.254:8089 Unknown malwareViper Anonymous
2026-08-04 12:05114.132.46.254:8080 Unknown malwareViper Anonymous
2026-08-04 12:05114.132.46.254:80 Unknown malwareViper Anonymous
2026-08-04 12:05114.132.46.254:443 Unknown malwareViper Anonymous
2026-08-04 12:02193-233-82-248.sslip.io ClearFakeClearFake threatcat_ch
2026-08-04 11:59evsdbwa.pasukan138.de.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 11:5745.135.194.70:80 Miraidocker-api honeypot nullblue67
2026-08-04 11:56icbavm.oopsboobs.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 11:55pasukan138.de.com ClearFakeClearFake threatcat_ch
2026-08-04 11:55oopsboobs.com ClearFakeClearFake threatcat_ch
2026-08-04 11:55hlijri.onesourceautollc.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 11:4779.110.49.186:443 Cobalt StrikeCobaltStrike drb-ra abuse_ch
2026-08-04 11:47169.58.82.229:443 Cobalt StrikeCobaltStrike drb-ra abuse_ch
2026-08-04 11:46102.204.223.230:5554 Cobalt StrikeCobaltStrike drb-ra abuse_ch
2026-08-04 11:30https://fot.y8slot.net/ VidarVidar crep1x
2026-08-04 11:30fot.y8slot.net VidarVidar crep1x
2026-08-04 11:24ptk1gnms.finkfamilyautomotive.com ClearFakeClearFake mac-0xfb64 macOS Anonymous
2026-08-04 11:21imwgptl.nygyrowillmar.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 11:20dkdszy.onesourceautollc.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 11:19zuhg5fig.drubenginecologo.com ClearFakeClearFake mac-0x76c7 macOS Anonymous
2026-08-04 11:16nygyrowillmar.com ClearFakeClearFake threatcat_ch
2026-08-04 11:15onesourceautollc.com ClearFakeClearFake threatcat_ch
2026-08-04 11:10fot.xlslot.org VidarVidar crep1x
2026-08-04 11:10https://fot.xlslot.org/ VidarVidar crep1x
2026-08-04 11:05114.132.46.254:7890 Unknown malwareViper Anonymous
2026-08-04 11:05https://fot.cau777.org/ VidarVidar crep1x
2026-08-04 11:05114.132.46.254:9090 Unknown malwareViper Anonymous
2026-08-04 11:05114.132.46.254:12345 Unknown malwareViper Anonymous
2026-08-04 11:05https://fot.sinism188.top/ VidarVidar crep1x
2026-08-04 11:05fot.cau777.org VidarVidar crep1x
2026-08-04 11:05114.132.46.254:60000 Unknown malwareViper Anonymous
2026-08-04 11:05fot.sinism188.top VidarVidar crep1x
2026-08-04 10:37general-sample.space Unknown malwareClickFix threatcat_ch
2026-08-04 10:30nxvuavg.now-we-wait.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 10:30gzdlal.naldoricketts.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 10:29now-we-wait.com ClearFakeClearFake threatcat_ch
2026-08-04 10:28naldoricketts.com ClearFakeClearFake threatcat_ch
2026-08-04 10:24khtlqekj.lamournails.net ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 10:05154.12.94.16:22 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 10:0589.116.220.116:8443 Unknown malwareViper Anonymous
2026-08-04 10:0589.116.220.116:3478 Unknown malwareViper Anonymous
2026-08-04 10:0589.116.220.116:8888 Unknown malwareViper Anonymous
2026-08-04 09:4691.92.42.152:8080 AsyncRATasyncrat drb-ra RAT abuse_ch
2026-08-04 09:4689.36.231.206:65432 AdaptixC2AdaptixC2 drb-ra abuse_ch
2026-08-04 09:4681.177.222.11:443 Unknown malwaredrb-ra Mythic abuse_ch
2026-08-04 09:4645.61.176.146:8443 Havocdrb-ra Havoc abuse_ch
2026-08-04 09:4545.139.226.224:4321 AdaptixC2AdaptixC2 drb-ra abuse_ch
2026-08-04 09:4527.124.36.136:56001 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 09:44iewtfyd.novemberstar.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 09:44178.16.53.68:443 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 09:44178.16.53.68:7707 AsyncRATasyncrat drb-ra RAT abuse_ch
2026-08-04 09:44172.111.232.133:7775 DCRatdcrat drb-ra RAT abuse_ch
2026-08-04 09:43172.111.134.94:56011 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 09:43172.111.134.94:56012 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 09:43novemberstar.com ClearFakeClearFake threatcat_ch
2026-08-04 09:43belzvc.nakliyemistanbul.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 09:43140.228.29.61:55555 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 09:43138.124.62.3:4321 AdaptixC2AdaptixC2 drb-ra abuse_ch
2026-08-04 09:43130.12.182.39:5333 AsyncRATasyncrat drb-ra RAT abuse_ch
2026-08-04 09:43122.51.212.92:39905 BianLianBianLian drb-ra abuse_ch
2026-08-04 09:43104.251.181.111:443 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 09:43104.239.66.36:443 PureRATdrb-ra PureHVNC PureRAT RAT abuse_ch
2026-08-04 09:43104.223.98.68:2028 DCRatdcrat drb-ra RAT abuse_ch
2026-08-04 09:42nakliyemistanbul.com ClearFakeClearFake threatcat_ch
2026-08-04 09:41catground1957.casacam.net RemcosRAT RemcosRAT abuse_ch
2026-08-04 09:41209.54.103.181:7788 RemcosRAT RemcosRAT abuse_ch
2026-08-04 09:37https://netframework.top/ Unknown malware abuse_ch
2026-08-04 09:37https://netframework.top/api/config/client Unknown malware abuse_ch
2026-08-04 09:37https://netframework.top/api/remote/beacon Unknown malware abuse_ch
2026-08-04 09:36netframework.top Unknown malware abuse_ch
2026-08-04 09:2846.8.226.163:8080 MiraiMirai seckle
2026-08-04 09:2846.8.226.122:8080 MiraiMirai seckle
2026-08-04 09:2846.8.226.21:8080 MiraiMirai seckle
2026-08-04 09:2846.8.226.50:8080 MiraiMirai seckle
2026-08-04 09:2846.8.226.61:8080 MiraiMirai seckle
2026-08-04 09:2846.8.226.88:8080 MiraiMirai seckle
2026-08-04 09:28143.198.206.191:12345 AisuruAISURU c2 Bitsight
2026-08-04 09:2023.95.103.253:2404 Remcosremcos abuse_ch
2026-08-04 09:20102.220.160.146:5050 XWormXWorm abuse_ch
2026-08-04 09:17ftp.darlenemarino.cyou Agent TeslaAgentTesla abuse_ch
2026-08-04 09:15www.jahstandclassprojectbackup3.com Remcosremcos abuse_ch
2026-08-04 09:15www.jahstandclassproject.com Remcosremcos abuse_ch
2026-08-04 09:15www.jahstandclassprojectbackup.com Remcosremcos abuse_ch
2026-08-04 09:15www.jahstandclassprojectbackup1.com Remcosremcos abuse_ch
2026-08-04 09:15www.jahstandclassprojectbackup2.com Remcosremcos abuse_ch
2026-08-04 09:15www.ikukuomaproject.com Remcosremcos abuse_ch
2026-08-04 09:15www.ikukuomaprojectbackup.com Remcosremcos abuse_ch
2026-08-04 09:15www.ikukuomaprojectbackup1.com Remcosremcos abuse_ch
2026-08-04 09:15www.ikukuomaprojectbackup2.com Remcosremcos abuse_ch
2026-08-04 09:14ftp.melrz.com Agent TeslaAgentTesla abuse_ch
2026-08-04 09:14ftp.lodenrandmarines.com Agent TeslaAgentTesla abuse_ch
2026-08-04 09:10217.60.195.87:443 XWormXWorm abuse_ch
2026-08-04 09:1084.38.133.132:6000 XWormXWorm abuse_ch
2026-08-04 09:10109.248.150.234:1012 XWormXWorm abuse_ch
2026-08-04 09:08ftp.raxclopent.info Agent TeslaAgentTesla abuse_ch
2026-08-04 09:0589.116.220.116:22 Unknown malwareViper Anonymous
2026-08-04 09:0589.116.220.116:80 Unknown malwareViper Anonymous
2026-08-04 09:0589.116.220.116:8080 Unknown malwareViper Anonymous
2026-08-04 09:05117.72.72.254:7000 Unknown malwareSupershell Anonymous
2026-08-04 09:0589.116.220.116:443 Unknown malwareViper Anonymous
2026-08-04 09:03zoiitac.nobodydenied.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 09:00aydlee.nairmess.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 08:58nobodydenied.com ClearFakeClearFake threatcat_ch
2026-08-04 08:57nairmess.com ClearFakeClearFake threatcat_ch
2026-08-04 08:50178.16.55.104:8848 AsyncRATasyncrat abuse_ch
2026-08-04 08:33makeverizyjar.info Unknown malwareClickFix threatcat_ch
2026-08-04 08:33thu-ipad-03.cfd Unknown malwareClickFix threatcat_ch
2026-08-04 08:33enter-press-cdn.info Unknown malwareClickFix threatcat_ch
2026-08-04 08:33tue-orange-04.cfd Unknown malwareClickFix threatcat_ch
2026-08-04 08:33mon-banana-06.cfd Unknown malwareClickFix threatcat_ch
2026-08-04 08:30http://196.251.107.186/svbia/post.php SVCStealerSvcStealer abuse_ch
2026-08-04 08:29synergytms.com Unknown malwareClickFix ClickFixer
2026-08-04 08:29ubiqueags.org Unknown malwareClickFix ClickFixer
2026-08-04 08:29thetayf.com Unknown malwareClickFix ClickFixer
2026-08-04 08:29http://62.60.226.232/zpzp/get.php SVCStealerSvcStealer abuse_ch
2026-08-04 08:24js5po212.kaarenorge.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 08:23https://doc.nfe-online.com/h/estagio1.php Unknown malware abuse_ch
2026-08-04 08:22doc.nfiscais.com Unknown malware abuse_ch
2026-08-04 08:22217.60.195.161:443 Unknown malware abuse_ch
2026-08-04 08:21doc.nfe-online.com Unknown malware abuse_ch
2026-08-04 08:18182.92.83.146:8080 Cobalt StrikeCobaltStrike cs-watermark-666666666 abuse_ch
2026-08-04 08:18206.238.42.153:4433 Cobalt StrikeCobaltStrike cs-watermark-666666666 abuse_ch
2026-08-04 08:13nh-construction.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 08:13lake-butler.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 08:12crownhillrdymix.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 08:11nailxpohuberheights.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 08:0589.116.220.116:60000 Unknown malwareViper Anonymous
2026-08-04 08:05101.42.249.98:8084 VShellVshell Anonymous
2026-08-04 08:05103.30.76.214:8779 VShellVshell Anonymous
2026-08-04 08:05106.75.249.202:8080 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 08:03newnanfoodbank.org ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 08:03jackpot123.de.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 08:02cr88.de.com ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 08:01nailhousechicago.com ClearFakeClearFake threatcat_ch
2026-08-04 07:59nesplowell.com ClearFakeClearFake threatcat_ch
2026-08-04 07:5964.89.160.76:8443 PureLogs StealerPureLogsStealer abuse_ch
2026-08-04 07:5864.89.160.76:8288 PureLogs StealerPureLogsStealer abuse_ch
2026-08-04 07:5864.89.160.76:9508 PureLogs StealerPureLogsStealer abuse_ch
2026-08-04 07:5864.89.160.76:465 PureLogs StealerPureLogsStealer abuse_ch
2026-08-04 07:54myboutiqswitch.com ClearFakeClearFake threatcat_ch
2026-08-04 07:44185.242.3.65:9001 PureLogs StealerPureLogsStealer abuse_ch
2026-08-04 07:43ftp.ambikaexportsindia.com Phantom StealerPhantomStealer abuse_ch
2026-08-04 07:40194.156.79.203:4449 Unknown RATRAT SiriusRAT abuse_ch
2026-08-04 07:352.27.160.29:5173 Overlord RATOverlordRAT RAT abuse_ch
2026-08-04 07:32http://94.26.106.195:5555 xmrigcryptojacking proxyjacking traffmonetizer xmrig nwicks
2026-08-04 07:32http://94.26.106.195:80 xmrigcryptojacking proxyjacking traffmonetizer xmrig nwicks
2026-08-04 07:32http://57.129.119.218:13333 xmrigcryptojacking proxyjacking traffmonetizer xmrig nwicks
2026-08-04 07:32enter-press-cdn.com Unknown malwareClickFix etherhiding Polygon Anonymous
2026-08-04 07:32stv4ec5.shop Unknown malwareetherhiding Polygon Anonymous
2026-08-04 07:32stati-fy.sbs Unknown malwareetherhiding Polygon TDS Anonymous
2026-08-04 07:32statifile.sbs Unknown malwareetherhiding Polygon TDS Anonymous
2026-08-04 07:32ravenstonekeep.top Unknown malwareetherhiding shadowburn Anonymous
2026-08-04 07:32voidravenwatch.com Unknown malwareetherhiding shadowburn Anonymous
2026-08-04 07:14khzxbhq.necedubd.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 07:13necedubd.com ClearFakeClearFake threatcat_ch
2026-08-04 07:12dtxwvm.mustlovedogsmobilegrooming.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 07:0965.21.212.79:62020 PureLogs StealerPureLogsStealer abuse_ch
2026-08-04 07:09mustlovedogsmobilegrooming.com ClearFakeClearFake threatcat_ch
2026-08-04 07:0538.76.194.219:8090 VShellVshell Anonymous
2026-08-04 07:05106.75.249.202:443 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 07:05106.75.249.202:80 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 06:59http://42.232.238.126:40504/Mozi.m Mozielf IoT Mozi HoneyLabs
2026-08-04 06:59http://182.126.198.5:57587/Mozi.a Mozielf IoT Mozi HoneyLabs
2026-08-04 06:59https://v-k.com.ua/vcapcha.ps1 Unknown malwareClickFix Loader powershell Anonymous
2026-08-04 06:59regenerate5141.icu Unknown malwareClickFix etherhiding injected-loader TDS Anonymous
2026-08-04 06:5564.89.160.127:6680 AsyncRATasyncrat abuse_ch
2026-08-04 06:46195.177.94.112:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:4694.154.32.30:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:46195.177.94.91:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:46158.94.211.183:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:46104.249.10.76:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:46104.249.10.205:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:46104.239.66.228:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:46104.249.10.144:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:4645.83.28.88:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:46217.217.97.53:443 Unknown RATConnectWise rmm ScreenConnect abuse_ch
2026-08-04 06:31qybtsfy.natsumitapas.net ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 06:28natsumitapas.net ClearFake4August2026 ClearFake Commandline DomainShadowing Windows Gi7w0rm
2026-08-04 06:27748v1dlo.hectortm-plumbing.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 06:24xalfsi.mspa-naperville.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 06:24h6gthnnl.earnmoneyfx.com ClearFakeClearFake mac-0xfb64 macOS Anonymous
2026-08-04 06:23mspa-naperville.com ClearFakeClearFake threatcat_ch
2026-08-04 06:22update-microsoft-data.services Unknown malware abuse_ch
2026-08-04 06:21jzugv4j0.halcyonhempltd.com ClearFakeClearFake mac-0x76c7 macOS Anonymous
2026-08-04 06:12pazona.shop RemusRemusStealer abuse_ch
2026-08-04 06:08157.20.182.81:419 Tofseetofsee abuse_ch
2026-08-04 06:08157.20.182.81:429 Tofseetofsee abuse_ch
2026-08-04 06:05101.133.225.51:8888 Unknown malwareSupershell Anonymous
2026-08-04 06:0539.105.213.209:8084 VShellVshell Anonymous
2026-08-04 06:05124.222.145.172:7000 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 06:05136.115.85.178:80 AsyncRATasyncrat Anonymous
2026-08-04 06:05195.177.94.210:443 AsyncRATasyncrat Anonymous
2026-08-04 06:0331.207.7.91:53943 Unknown malware abuse_ch
2026-08-04 06:025748asheve.gooning.st MiraiMirai Anonymous
2026-08-04 06:02iloveboats.st MiraiMirai Anonymous
2026-08-04 06:02gooning.st MiraiMirai Anonymous
2026-08-04 06:01176.9.164.115:41365 Unknown malware abuse_ch
2026-08-04 06:0045.10.40.102:6666 Unknown malware abuse_ch
2026-08-04 05:58danielklijn.com Unknown malwareClickFix ClickFixer
2026-08-04 05:58essentiel-leman.com Unknown malwareClickFix ClickFixer
2026-08-04 05:47tkushmo.naolemedia.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 05:42naolemedia.com ClearFakeClearFake threatcat_ch
2026-08-04 05:39pbbyus.mountainsoccer.org ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 05:37mountainsoccer.org ClearFakeClearFake threatcat_ch
2026-08-04 05:25enter-pverif-code.info Unknown malwareClickFix abuse_ch
2026-08-04 05:21189.249.195.86:7443 Unknown malwareAS 8151 c2 censys Mythic Online f1nd3r
2026-08-04 05:2185.120.81.167:34567 AisuruAISURU c2 Bitsight
2026-08-04 05:21130.94.115.222:7443 Unknown malwarec2 Mythic Online self-signed f1nd3r
2026-08-04 05:21198.199.72.177:9900 Cobalt Strike14061 c2 censys Cobalt Strike sojubear
2026-08-04 05:21glentraverse.com Unknown malwareClickFix SmartApeSG Anonymous
2026-08-04 05:2146.16.34.50:8443 AisuruAISURU c2 Bitsight
2026-08-04 05:21http://glentraverse.com/kos SmartApeSGClickFix SmartApeSG Anonymous
2026-08-04 05:21http://94.154.43.231:3001/install.sh Unknown malwarehoneypot greedybear
2026-08-04 05:21109.104.155.94:5326 Remusc2 Remus Bitsight
2026-08-04 05:21lexingtoncancerfoundation.org Unknown malwareClickFix ClickFixer
2026-08-04 05:21muhammedmuheisen.com Unknown malwareClickFix ClickFixer
2026-08-04 05:21liobet.org Unknown malwareClickFix ClickFixer
2026-08-04 05:21determinedresults.com Unknown malwareClickFix ClickFixer
2026-08-04 05:21coogeechamber.com.au Unknown malwareClickFix ClickFixer
2026-08-04 05:21betensured-tips.com Unknown malwareClickFix ClickFixer
2026-08-04 05:21soyseaw.com Unknown malwareClickFix ClickFixer
2026-08-04 05:202ff86a4fdfec4a5b49d5545f9a62ec4c Unknown malwarecrpx0 Ransomware TheRavenFile
2026-08-04 05:20cc2c8ac5aea8d7c36e9161d54e4255f3 Unknown malwarecrpx0 Ransomware TheRavenFile
2026-08-04 05:204966992c81f7062ed3913ee023240edc Unknown malwarecrpx0 Ransomware TheRavenFile
2026-08-04 05:20a8e9a638aa9e1c2d73f3432b997d7a7f Unknown malwarecrpx0 Ransomware TheRavenFile
2026-08-04 05:20ced4c9b53c3c93a4dbefe2f243cd1c71 Unknown malwarecrpx0 Ransomware TheRavenFile
2026-08-04 05:201ef19373aae940002a980a984f25555b Unknown malwarecrpx0 Ransomware TheRavenFile
2026-08-04 05:20ea3f9230bb76deb18dedfaea490fd687 Unknown malwarecrpx0 Ransomware TheRavenFile
2026-08-04 05:20globalprotection.services Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:20paloaltopnetwork.site Unknown malwareClickFix malvertising Anonymous
2026-08-04 05:20download.paloaltopnetwork.site Unknown malwareClickFix malvertising Anonymous
2026-08-04 05:20tricerat.website Unknown malwareClickFix malvertising Anonymous
2026-08-04 05:20download.tricerat.website Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:20download.globalprotection.services Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:20https://tricerat.website/download/GlobalProtect_Installer.vhd Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:20https://tricerat.website/download/WorkspotClientSetup64.vhd Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:20https://download.paloaltopnetwork.site/downloadclient/ Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:20https://tricerat.website/ Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:20https://download.globalprotection.services/ Unknown malwareAtera ClickFix FakeInstaller GlobalProtect GoogleAds LNK malvertising rmm typosquat vhd Anonymous
2026-08-04 05:15https://synergytms.com/ VidarClickFix compromised etherhiding Polygon Vidar WordPress Anonymous
2026-08-04 05:05159.75.159.217:22 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 05:0535.182.201.45:4444 AsyncRATasyncrat Anonymous
2026-08-04 05:02eaqbbco.jimmieleeautosales.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 04:53resjtt.rsfoodproducts.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 04:22edixil2z.healthfoodzone.com ClearFakeClearFake mac-0x68dc macOS Anonymous
2026-08-04 04:16sammkop.jadoou.lat ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 04:0564.176.46.103:22 Cobalt StrikeCobaltStrike Anonymous
2026-08-04 04:03kzcjtx.morlies.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 03:18euevpre.jackpot88.de.com ClearFakeClearFake win-0x4679 Windows Anonymous
2026-08-04 03:17scdzji.modernglowllc.com ClearFakeClearFake win-0x0cd5 Windows Anonymous
2026-08-04 03:05122.51.1.118:8084 VShellVshell Anonymous