################################################################ # ThreatFox IOCs: recent URLs - CSV format # # Last updated: 2026-01-11 22:02:20 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter" "2026-01-11 22:02:20", "1700937", "https://cdn.jsdelivr.net/gh/service28-discovery-registr/n-state-manager-cache128/load", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 21:58:34", "1700936", "https://cdn.jsdelivr.net/gh/service28-discovery-registr/n-state-manager-cache128/jpg", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 21:17:22", "1700935", "https://cdn.jsdelivr.net/gh/service28-discovery-registr/n-state-manager-cache128/sdvvv12", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 20:45:50", "1700934", "https://cdn.jsdelivr.net/gh/service28-discovery-registr/fexw8qvyvqj8qe-identity-token-issuer/oiaaai", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 20:41:35", "1700933", "https://cdn.jsdelivr.net/gh/service28-discovery-registr/fexw8qvyvqj8qe-identity-token-issuer/outh", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 20:30:21", "1700932", "https://cdn.jsdelivr.net/gh/service28-discovery-registr/fexw8qvyvqj8qe-identity-token-issuer/set1", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 19:31:44", "1700923", "https://cdn.jsdelivr.net/gh/service28-discovery-registr/fexw8qvyvqj8qe-identity-token-issuer/trc20", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 19:16:02", "1700922", "https://cdn.jsdelivr.net/gh/az2-prd-rs01/s3-backet-cloud73-s1/gfn-srvc", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 17:54:21", "1700886", "https://cdn.jsdelivr.net/gh/az2-prd-rs01/s3-backet-cloud73-s1/final", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 16:36:24", "1700851", "https://whitegambit.com:8080/auth", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "AS40021,byakugan,Contabo Inc.,DYNADOT LLC", "0", "antiphishorg" "2026-01-11 16:36:22", "1700856", "https://evih.scamfreeweb.com/Webpanel/", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "AS31898,Bluehost Inc.,cythosia,Oracle Corporation,subdomain", "0", "antiphishorg" "2026-01-11 16:36:22", "1700855", "http://k0d3in.myftp.org/webpanel/pages/login.php", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "AS47524,subdomain,Turksat Uydu Haberlesme ve Kablo TV Isletme A.S.,unam", "0", "antiphishorg" "2026-01-11 15:30:16", "1700857", "https://cdn.jsdelivr.net/gh/az2-prd-rs01/canary-bg01/add-48", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 15:24:19", "1700854", "https://cdn.jsdelivr.net/gh/az2-prd-rs01/canary-bg01/echo", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 15:04:03", "1700852", "https://cdn.jsdelivr.net/gh/az2-prd-rs01/canary-bg01/ufo", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 14:57:19", "1700839", "http://69.164.242.27:3000/auth", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "AS19318,Interserver Inc,ltx", "0", "antiphishorg" "2026-01-11 14:10:14", "1700838", "https://cdn.jsdelivr.net/gh/token-issuer-svc/7cdtdbq6uewmq5/tem46", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 13:22:59", "1700836", "https://cdn.jsdelivr.net/gh/token-issuer-svc/7cdtdbq6uewmq5/bn9", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 12:05:58", "1700831", "http://194.164.34.182", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "100", "False", "https://tria.ge/260111-hw73fadt9a", "AS216071,C2,stealc,stealer,triage", "0", "DonPasci" "2026-01-11 10:08:36", "1700813", "https://cdn.jsdelivr.net/gh/browse-via-api/fb-api-keys/keys", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 09:23:56", "1700812", "https://cdn.jsdelivr.net/gh/id-core-rs-com/power2/fast", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 06:33:09", "1700418", "https://iamdavidachom.com/tentrady-confirmation/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/iamdavidachom.com", "ClickFix", "0", "CarsonWilliams" "2026-01-11 05:08:50", "1700777", "https://cdn.jsdelivr.net/gh/token-id-4-api/api50-mint-ok/fl", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 04:41:35", "1700776", "https://cdn.jsdelivr.net/gh/id-core-rs-com/err2/local", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 03:50:13", "1700761", "http://77.110.102.154/ce369e7324834845.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "100", "False", "None", "Steal", "0", "abuse_ch" "2026-01-11 02:19:21", "1700758", "https://cdn.jsdelivr.net/gh/token-issuer-svc/s3/boom", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 01:18:49", "1700757", "https://cdn.jsdelivr.net/gh/token-issuer-svc/s3/back", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 01:06:30", "1700755", "https://cdn.jsdelivr.net/gh/token-issuer-svc/api80-1int-m35461/b12", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-11 00:05:19", "1700749", "https://cdn.jsdelivr.net/gh/token-issuer-svc/api80-1int-m35461/jhjfjj", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 23:35:03", "1700736", "https://cdn.jsdelivr.net/gh/token-issuer-svc/api80-1int-m35461/bmmm", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 22:45:09", "1700725", "http://towerbingobongoboom.com:8080/updater?for=35E0458051D58F59A7469F0DED1C9220", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "GoProxy", "0", "abuse_ch" "2026-01-10 21:59:41", "1700724", "https://cdn.jsdelivr.net/gh/token-issuer-svc/88ss-12bnm-140-ok/nim5", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 20:27:03", "1700663", "https://fricaec.cyou/api", "url", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "100", "False", "None", "10January2026,iocbottest", "0", "Gi7w0rm" "2026-01-10 20:27:01", "1700662", "https://t.me/sadvdfsadv1v312", "url", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "100", "False", "None", "10January2026,iocbottest", "0", "Gi7w0rm" "2026-01-10 19:01:44", "1700448", "https://cdn.jsdelivr.net/gh/token-issuer-svc/88ss-12bnm-140-ok/shared", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 18:17:58", "1700431", "https://cdn.jsdelivr.net/gh/token-issuer-svc/s4-p2-df6-s9/pet5", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 18:01:36", "1700427", "https://cdn.jsdelivr.net/gh/token-issuer-svc/int-api50-config90/token", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 17:52:24", "1700426", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/a8-core74/testnet", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 17:25:08", "1700425", "http://89.35.130.82/c8b3175e.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "False", "None", "DCRat,RAT", "0", "abuse_ch" "2026-01-10 16:50:51", "1700424", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/a8-core74/dot40", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 16:30:13", "1700423", "http://towerbingobongoboom.com:8080/updater?for=85A8192051669E4383E3D2041F07FDC6", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "GoProxy", "0", "abuse_ch" "2026-01-10 14:47:27", "1700373", "http://91.214.78.169:5000/send", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/f0bed15538e01b50c19ae3e088d47786654370a1878ee9326ca5f5950ef9bc46/", "c2", "0", "burger" "2026-01-10 14:47:26", "1700374", "http://91.214.78.169:5000/send_photo", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/f0bed15538e01b50c19ae3e088d47786654370a1878ee9326ca5f5950ef9bc46/", "c2", "0", "burger" "2026-01-10 14:47:25", "1700376", "https://msmgt.sbs/direct/Win_Driver_SSL_support_v43.22.209.44.exe", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/f0bed15538e01b50c19ae3e088d47786654370a1878ee9326ca5f5950ef9bc46/", "None", "0", "burger" "2026-01-10 14:47:24", "1700377", "https://msmgt.sbs/direct/Printer_Driver_SSL_support_v43.22.209.99.exe", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/f0bed15538e01b50c19ae3e088d47786654370a1878ee9326ca5f5950ef9bc46/", "None", "0", "burger" "2026-01-10 13:35:40", "1700402", "http://195.201.252.143:80", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "75", "False", "https://bazaar.abuse.ch/sample/719f762fbc61df4c651dd30e07831c5aee2c7a8b8dac7dbb2ad61d040eeaa79b/", "vidar", "0", "abuse_ch" "2026-01-10 13:20:09", "1700399", "http://91.208.162.22/8c7b4b8ca19f42f3.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "100", "False", "None", "Steal", "0", "abuse_ch" "2026-01-10 13:15:45", "1700398", "http://91.208.162.22", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "75", "False", "https://bazaar.abuse.ch/sample/83f96ebb903ce23ef34f3ad69ae98686d69153b3ca58baa197d728d63a14fc27/", "stealc", "0", "abuse_ch" "2026-01-10 12:55:53", "1700366", "https://hurtohjertuihjriotujhrth.com/WULAOEmxtAjF86oQzzNhlqJUL9KlWrp1/NOUJoogreojijoiJlOjiogrejiooijio.png", "url", "payload_delivery", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "https://bazaar.abuse.ch/sample/2e17c6be77af380ef919edd9c666cc3bd39d876092a2601f9ee21b3782ad354a", "ScarfaceStealer", "0", "burger" "2026-01-10 12:55:52", "1700304", "http://154.222.18.152:8888/supershell/login/", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "AS401701,cognetcloud INC,supershell", "0", "antiphishorg" "2026-01-10 12:55:52", "1700358", "https://138.226.237.187/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://bazaar.abuse.ch/sample/19e90ba9c47ff9422ffd1e1e6b3b53d4c39c9a4809e0de50de8202bb5b3b4cb7/", "c2,vidar", "0", "burger" "2026-01-10 12:55:51", "1700342", "http://130.12.180.85/file/bbc", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "75", "False", "https://greedybear.honeynet.org", "honeypot", "0", "greedybear" "2026-01-10 12:55:51", "1700343", "https://commerce-ciao.info/", "url", "payload_delivery", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "https://bazaar.abuse.ch/browse/signature/BRAT/", "BRAT,RAT", "0", "burger" "2026-01-10 12:55:50", "1700359", "https://telegra.ph/Endangered-Animals-01-05", "url", "botnet_cc", "unknown_stealer", "None", "Unknown Stealer", "", "100", "True", "https://bazaar.abuse.ch/sample/2e17c6be77af380ef919edd9c666cc3bd39d876092a2601f9ee21b3782ad354a", "c2,ScarfaceStealer", "0", "burger" "2026-01-10 12:55:49", "1700365", "https://hurtohjertuihjriotujhrth.com/WULAOEmxtAjF86oQzzNhlqJUL9KlWrp1/8GVk01wwWXHHto7BJ1pwBajM8YOnUuQf.mp4", "url", "payload_delivery", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "https://bazaar.abuse.ch/sample/2e17c6be77af380ef919edd9c666cc3bd39d876092a2601f9ee21b3782ad354a", "ScarfaceStealer", "0", "burger" "2026-01-10 12:55:47", "1700364", "https://hurtohjertuihjriotujhrth.com/WULAOEmxtAjF86oQzzNhlqJUL9KlWrp1/1BOi0tXTJJWgZS1BzlecvJPgUWQPYe3K.avi", "url", "payload_delivery", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "https://bazaar.abuse.ch/sample/2e17c6be77af380ef919edd9c666cc3bd39d876092a2601f9ee21b3782ad354a", "ScarfaceStealer", "0", "burger" "2026-01-10 12:55:47", "1700363", "https://colorfulglowllc.com/4ba66c65842a03f81b59c01b798915f5/tasks", "url", "payload_delivery", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "https://bazaar.abuse.ch/sample/2e17c6be77af380ef919edd9c666cc3bd39d876092a2601f9ee21b3782ad354a", "ScarfaceStealer", "0", "burger" "2026-01-10 12:55:46", "1700371", "http://82.221.139.173:49180/wgain.sh", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "75", "False", "https://greedybear.honeynet.org", "honeypot", "0", "greedybear" "2026-01-10 12:55:46", "1700367", "https://hurtohjertuihjriotujhrth.com/WULAOEmxtAjF86oQzzNhlqJUL9KlWrp1/ytZ6TsGsonOO0AP2TMhqDwlDJpn9vTFh.bin", "url", "payload_delivery", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "https://bazaar.abuse.ch/sample/2e17c6be77af380ef919edd9c666cc3bd39d876092a2601f9ee21b3782ad354a", "ScarfaceStealer", "0", "burger" "2026-01-10 11:54:40", "1700368", "https://cdn.jsdelivr.net/gh/id-core-rs-com/core-1d/clock", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 08:18:00", "1700320", "https://cdn.jsdelivr.net/gh/id-core-rs-com/core-id4/stage", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 07:24:54", "1700303", "https://cdn.jsdelivr.net/gh/id-core-rs-com/core-id/fact", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 06:34:28", "1700142", "https://rcmceberio.net/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/rcmceberio.net", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:28", "1700143", "https://phambilihighschool.co.za/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/phambilihighschool.co.za", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:27", "1700185", "http://154.201.65.97:8888/supershell/login/", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "AS401696,cognetcloud INC,supershell", "0", "antiphishorg" "2026-01-10 06:34:25", "1700198", "https://138.226.237.121/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://bazaar.abuse.ch/sample/741662f285aec6ba7878c4b98b909eae44a94dca60d7dbe9f1479852d11925c8/", "c2,vidar", "0", "burger" "2026-01-10 06:34:24", "1700203", "https://18.202.117.177/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/18.202.117.177", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:23", "1700276", "https://republic-crane-k-s.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/republic-crane-k-s.com", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:22", "1700277", "https://pakdailyupdate.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/pakdailyupdate.com", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:21", "1700282", "https://track2studio.com.br/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/track2studio.com.br", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:20", "1700284", "https://turskeserijee-net-qqff.loadserve.dev/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/turskeserijee-net-qqff.loadserve.dev", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:20", "1700283", "https://displaysecurity.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/displaysecurity.com", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:19", "1700288", "https://barnehagemobler.no/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/barnehagemobler.no", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:18", "1700285", "https://controlpcaps.com.br/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/controlpcaps.com.br", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:17", "1700286", "https://www.craneworldasia.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/www.craneworldasia.com", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:16", "1700287", "https://alpha2omegabh.org/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/alpha2omegabh.org", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:15", "1700289", "https://divinedirectory.com/author/368betcv-52871/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/divinedirectory.com", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:14", "1700292", "https://www.durable-coating.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/www.durable-coating.com", "ClickFix", "0", "CarsonWilliams" "2026-01-10 06:34:14", "1700295", "https://showtimedetailingservice.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/showtimedetailingservice.com", "ClickFix", "0", "CarsonWilliams" "2026-01-10 05:57:58", "1700291", "https://cdn.jsdelivr.net/gh/id-core-rs-com/browse4/das", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 01:46:49", "1700274", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/svc457-api357-metadata-regist8/tbnb-morf", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 01:31:44", "1700273", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/svc457-api357-metadata-regist8/tbnb", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 01:15:29", "1700272", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/svc457-api357-metadata-regist8/404", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 01:02:16", "1700271", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/svc457-api357-metadata-regist8/bnb", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 00:54:02", "1700270", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/svc457-api357-metadata-regist8/ghhhhdhhh", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 00:43:30", "1700268", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/route-s215/fooot", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 00:37:26", "1700267", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/route-s215/bmn", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 00:17:53", "1700266", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/route-s215/opal50", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-10 00:04:37", "1700260", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/tkn-mgr0280/ino5f", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-09 23:57:16", "1700254", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/tkn-mgr0280/tvtbtn", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" "2026-01-09 23:37:35", "1700253", "https://cdn.jsdelivr.net/gh/identity-hub-rs-com/tkn-mgr0280/baa50", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch" # Number of entries: 91