{ "1760912": [ { "ioc_value": "fallshie.stonefield.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 12:38:27", "last_seen_utc": "2026-03-07 12:39:15", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760911": [ { "ioc_value": "alt-cor3.darkridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 12:20:19", "last_seen_utc": "2026-03-07 12:21:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760910": [ { "ioc_value": "moonjoggers.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 12:17:15", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760909": [ { "ioc_value": "tintttw.darkridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 12:14:34", "last_seen_utc": "2026-03-07 12:18:16", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760908": [ { "ioc_value": "min0r-stream.darkridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 12:08:09", "last_seen_utc": "2026-03-07 12:14:34", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760906": [ { "ioc_value": "maisonhildegarde.fr", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 12:04:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760898": [ { "ioc_value": "filmreplikleri.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "apk.hook", "malware_alias": null, "malware_printable": "Hook", "first_seen_utc": "2026-03-07 12:01:11", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://search.censys.io/hosts/2606:4700:3035:0:0:0:ac43:96ca+filmreplikleri.org", "tags": "AS13335,C2,censys,CLOUDFLARENET,Hookbot", "anonymous": "0", "reporter": "DonPasci" } ], "1760893": [ { "ioc_value": "vvest-route.darkridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 12:00:36", "last_seen_utc": "2026-03-07 12:02:55", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760892": [ { "ioc_value": "maintenance.ourhamlet.website", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 11:41:55", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760891": [ { "ioc_value": "5ync4-loop.goldridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 11:41:07", "last_seen_utc": "2026-03-07 11:59:42", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760890": [ { "ioc_value": "klu8kdx.goldridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 11:33:40", "last_seen_utc": "2026-03-07 11:34:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760889": [ { "ioc_value": "alignion.goldridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 11:27:04", "last_seen_utc": "2026-03-07 11:27:41", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760888": [ { "ioc_value": "www.2akks6668.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.valley_rat", "malware_alias": "Winos", "malware_printable": "ValleyRAT", "first_seen_utc": "2026-03-07 11:25:20", "last_seen_utc": null, "confidence_level": 75, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/b3d939afd740dbde97e84a6b110c95c40873f811045686649b2d3ba1290f654f/", "tags": "valleyrat_s2", "anonymous": "0", "reporter": "abuse_ch" } ], "1760885": [ { "ioc_value": "udfu.goldridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 11:21:07", "last_seen_utc": "2026-03-07 11:21:19", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760884": [ { "ioc_value": "3h4lpbpy.bluecrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 11:14:44", "last_seen_utc": "2026-03-07 11:15:43", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760883": [ { "ioc_value": "neo-f0re5t.bluecrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 11:09:15", "last_seen_utc": "2026-03-07 11:10:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760881": [ { "ioc_value": "0qbwh6hprn.localto.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-07 11:01:51", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-kt3q2sht4m", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760880": [ { "ioc_value": "imprisso-eg.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-07 11:00:14", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-k2v16sbt6z", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760879": [ { "ioc_value": "webcottages.co.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-07 11:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-k2954abt7s", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760878": [ { "ioc_value": "yourgymstory.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-07 11:00:10", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-k5z5ashv4m", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760877": [ { "ioc_value": "kooshangallery.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-07 11:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-k8dqgahv7k", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760876": [ { "ioc_value": "proonepersan.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-07 11:00:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-k848esbv3v", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760875": [ { "ioc_value": "lapdatcameravhb.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-07 11:00:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-k9xjzabv4s", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760874": [ { "ioc_value": "drifstac.bluecrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:56:27", "last_seen_utc": "2026-03-07 11:07:30", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760873": [ { "ioc_value": "un1te3-trace.bluecrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:50:21", "last_seen_utc": "2026-03-07 10:51:06", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760872": [ { "ioc_value": "ship-spark.redcrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:38:04", "last_seen_utc": "2026-03-07 10:49:25", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760871": [ { "ioc_value": "hill-ciphe.redcrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:32:34", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760870": [ { "ioc_value": "vor-valeal.redcrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:26:35", "last_seen_utc": "2026-03-07 10:27:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760869": [ { "ioc_value": "maheshwaristerling.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 10:23:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760868": [ { "ioc_value": "vorven0a.redcrest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:19:42", "last_seen_utc": "2026-03-07 10:20:27", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760867": [ { "ioc_value": "solidcarg.getreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:13:37", "last_seen_utc": "2026-03-07 10:14:10", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760866": [ { "ioc_value": "crafshi.getreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:07:39", "last_seen_utc": "2026-03-07 10:08:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760865": [ { "ioc_value": "geneexp.getreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 10:02:12", "last_seen_utc": "2026-03-07 10:03:38", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760864": [ { "ioc_value": "73rgwdew.getreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:55:14", "last_seen_utc": "2026-03-07 10:00:35", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760863": [ { "ioc_value": "maheradadaprinting.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 09:49:35", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760862": [ { "ioc_value": "w5iqlr.automodglass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:48:21", "last_seen_utc": "2026-03-07 09:49:15", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760861": [ { "ioc_value": "fjmlw8.automodglass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:42:52", "last_seen_utc": "2026-03-07 09:43:58", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760860": [ { "ioc_value": "visualstock.automodglass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:37:29", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760859": [ { "ioc_value": "normark5or.automodglass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:32:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760858": [ { "ioc_value": "neo-5ound.caseoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:26:04", "last_seen_utc": "2026-03-07 09:32:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760857": [ { "ioc_value": "sol-nexex.caseoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:20:49", "last_seen_utc": "2026-03-07 09:21:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760855": [ { "ioc_value": "passiveasset.caseoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:14:14", "last_seen_utc": "2026-03-07 09:15:20", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760854": [ { "ioc_value": "magroplast.ba", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 09:09:52", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760853": [ { "ioc_value": "ki540.caseoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:07:44", "last_seen_utc": "2026-03-07 09:08:46", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760852": [ { "ioc_value": "lgjzs62i.rockexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 09:01:50", "last_seen_utc": "2026-03-07 09:02:06", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760851": [ { "ioc_value": "lumcore6en.rockexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:53:45", "last_seen_utc": "2026-03-07 08:54:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760850": [ { "ioc_value": "luxabco.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 08:53:15", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760849": [ { "ioc_value": "i1lum-flow.rockexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:48:51", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760848": [ { "ioc_value": "invoicetiny.rockexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:43:02", "last_seen_utc": "2026-03-07 08:43:19", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760847": [ { "ioc_value": "xib3i7ay.budenowcvolt.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:35:11", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760846": [ { "ioc_value": "0a6nq1j0.budenowcvolt.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:34:33", "last_seen_utc": "2026-03-07 08:35:15", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1760845": [ { "ioc_value": "trispireum7.dancingvck.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:33:19", "last_seen_utc": "2026-03-07 08:34:31", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760843": [ { "ioc_value": "cargo9-stack.dancingvck.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:26:12", "last_seen_utc": "2026-03-07 08:27:44", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760842": [ { "ioc_value": "stone3-lab.dancingvck.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:21:20", "last_seen_utc": "2026-03-07 08:22:24", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760840": [ { "ioc_value": "ca1m-graph.reinsurunrock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:07:19", "last_seen_utc": "2026-03-07 08:08:07", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760838": [ { "ioc_value": "unit-gri.reinsurunrock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 08:01:26", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760834": [ { "ioc_value": "filmkenti.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "apk.hook", "malware_alias": null, "malware_printable": "Hook", "first_seen_utc": "2026-03-07 08:01:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://search.censys.io/hosts/2606:4700:3033:0:0:0:ac43:9091+filmkenti.org", "tags": "AS13335,C2,censys,CLOUDFLARENET,Hookbot", "anonymous": "0", "reporter": "DonPasci" } ], "1760831": [ { "ioc_value": "magicvision.ca", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 07:58:45", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760830": [ { "ioc_value": "mh738ng0.reinsurunrock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:55:04", "last_seen_utc": "2026-03-07 07:55:21", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760829": [ { "ioc_value": "zendra2is.reinsurunrock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:48:54", "last_seen_utc": "2026-03-07 07:49:46", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760828": [ { "ioc_value": "thorntrue.draniercismn.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:42:57", "last_seen_utc": "2026-03-07 07:43:12", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760827": [ { "ioc_value": "n3ural-mark.draniercismn.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:36:07", "last_seen_utc": "2026-03-07 07:42:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760826": [ { "ioc_value": "coralwil.draniercismn.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:29:59", "last_seen_utc": "2026-03-07 07:31:40", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760825": [ { "ioc_value": "misfinal.draniercismn.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:24:37", "last_seen_utc": "2026-03-07 07:25:42", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760824": [ { "ioc_value": "2nyix.albaniangun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:18:15", "last_seen_utc": "2026-03-07 07:19:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760583": [ { "ioc_value": "kittiemc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:14", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760584": [ { "ioc_value": "cuttiesmp.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760585": [ { "ioc_value": "sweetiecraft.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760586": [ { "ioc_value": "cherriecraft.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760587": [ { "ioc_value": "greatsmp.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:11", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760588": [ { "ioc_value": "kittieslandmc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:11", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760589": [ { "ioc_value": "kittypixel.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:11", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760590": [ { "ioc_value": "ragnacook.site", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:10", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760591": [ { "ioc_value": "kittysmp.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:09", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760592": [ { "ioc_value": "cutiemc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:09", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760593": [ { "ioc_value": "kittiensmc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760594": [ { "ioc_value": "sanriomc.online", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760595": [ { "ioc_value": "sanriomc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760596": [ { "ioc_value": "kittlycraft.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760598": [ { "ioc_value": "kittensmp.site", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760597": [ { "ioc_value": "kittlycraft.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760599": [ { "ioc_value": "hellokittymc.online", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760600": [ { "ioc_value": "kitllycraft.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760601": [ { "ioc_value": "hellokittysmc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760602": [ { "ioc_value": "vrcmodz.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760604": [ { "ioc_value": "kittiescraft.xyz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:02", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760603": [ { "ioc_value": "www.uwucraft.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:01", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760605": [ { "ioc_value": "www.sweet-craft.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:00", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760606": [ { "ioc_value": "sugarsmp.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:15:00", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760607": [ { "ioc_value": "sweetkittycraft.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:59", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760608": [ { "ioc_value": "kitseramc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:59", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760609": [ { "ioc_value": "purfall.games", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:58", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760610": [ { "ioc_value": "kittenscraft.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:57", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760611": [ { "ioc_value": "yagiz.art", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:57", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760612": [ { "ioc_value": "neekocraft.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:56", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760613": [ { "ioc_value": "sweetcraft.site", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:55", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760614": [ { "ioc_value": "mysticraftsmp.fun", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:53", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760615": [ { "ioc_value": "minicraft.world", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:53", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760617": [ { "ioc_value": "kittiesmc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:51", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760618": [ { "ioc_value": "kittiescraft.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:51", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760616": [ { "ioc_value": "kittyscrafts.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:50", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760619": [ { "ioc_value": "kittenmc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:48", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760620": [ { "ioc_value": "kittyescraft.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:47", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760621": [ { "ioc_value": "playsweetcraft.site", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:47", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760622": [ { "ioc_value": "pinkcraftmc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-07 07:14:46", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "infostealer,stealer", "anonymous": "0", "reporter": "antiphishorg" } ], "1760823": [ { "ioc_value": "9guk.albaniangun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:12:44", "last_seen_utc": "2026-03-07 07:13:24", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760312": [ { "ioc_value": "currencyflow.usdwane.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:07:40", "last_seen_utc": "2026-03-06 12:55:23", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "6March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760316": [ { "ioc_value": "keitarocheats.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-07 07:07:38", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "vidar", "anonymous": "0", "reporter": "burger" } ], "1760315": [ { "ioc_value": "p8qzr.blinderdevour.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:07:37", "last_seen_utc": "2026-03-06 13:06:41", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "6March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760351": [ { "ioc_value": "ewar4pres.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.kongtuke", "malware_alias": "TAG-124,js.LandUpdate808", "malware_printable": "KongTuke", "first_seen_utc": "2026-03-07 07:07:35", "last_seen_utc": "2026-03-06 16:12:36", "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Kongtuke", "anonymous": "0", "reporter": "HuntYethHounds" } ], "1760374": [ { "ioc_value": "road-to-hell.top", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.kongtuke", "malware_alias": "TAG-124,js.LandUpdate808", "malware_printable": "KongTuke", "first_seen_utc": "2026-03-07 07:07:32", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": "https://infosec.exchange/@monitorsg/116183108796436147", "tags": "KongTuke", "anonymous": "0", "reporter": "monitorsg" } ], "1760391": [ { "ioc_value": "tricitiesbydesign.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-07 07:07:27", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "ClickFix,ErrTraffic", "anonymous": "0", "reporter": "HuntYethHounds" } ], "1760392": [ { "ioc_value": "ooe.digitalmatters360.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-07 07:07:26", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-vl5ksacv2w/behavioral3", "tags": "c2,vidar", "anonymous": "0", "reporter": "burger" } ], "1760433": [ { "ioc_value": "blood04.dialectblood.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:07:22", "last_seen_utc": "2026-03-06 19:26:50", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "6March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760498": [ { "ioc_value": "halroda.cyou", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.lumma", "malware_alias": "LummaC2 Stealer", "malware_printable": "Lumma Stealer", "first_seen_utc": "2026-03-07 07:07:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Domain,Lumma,Lumma Stealer,Stealer", "anonymous": "0", "reporter": "RacWatchin8872" } ], "1760499": [ { "ioc_value": "infhkkh.cyou", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.lumma", "malware_alias": "LummaC2 Stealer", "malware_printable": "Lumma Stealer", "first_seen_utc": "2026-03-07 07:07:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Domain,Lumma,Lumma Stealer,Stealer", "anonymous": "0", "reporter": "RacWatchin8872" } ], "1760500": [ { "ioc_value": "pardpew.cyou", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.lumma", "malware_alias": "LummaC2 Stealer", "malware_printable": "Lumma Stealer", "first_seen_utc": "2026-03-07 07:07:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Domain,Lumma,Lumma Stealer,Stealer", "anonymous": "0", "reporter": "RacWatchin8872" } ], "1760501": [ { "ioc_value": "phyerfs.cyou", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.lumma", "malware_alias": "LummaC2 Stealer", "malware_printable": "Lumma Stealer", "first_seen_utc": "2026-03-07 07:07:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Domain,Lumma,Lumma Stealer,Stealer", "anonymous": "0", "reporter": "RacWatchin8872" } ], "1760502": [ { "ioc_value": "trafsyt.cyou", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.lumma", "malware_alias": "LummaC2 Stealer", "malware_printable": "Lumma Stealer", "first_seen_utc": "2026-03-07 07:07:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Domain,Lumma,Lumma Stealer,Stealer", "anonymous": "0", "reporter": "RacWatchin8872" } ], "1760503": [ { "ioc_value": "worteof.cyou", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.lumma", "malware_alias": "LummaC2 Stealer", "malware_printable": "Lumma Stealer", "first_seen_utc": "2026-03-07 07:07:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Domain,Lumma,Lumma Stealer,Stealer", "anonymous": "0", "reporter": "RacWatchin8872" } ], "1760539": [ { "ioc_value": "sur-vault.reinsurundock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:06:53", "last_seen_utc": "2026-03-07 01:44:09", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "7March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760576": [ { "ioc_value": "nasot04.nasotoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:06:47", "last_seen_utc": "2026-03-07 04:05:08", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "7March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760577": [ { "ioc_value": "ional-sync.nasotoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:06:46", "last_seen_utc": "2026-03-07 04:14:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "7March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760822": [ { "ioc_value": "ktmx.albaniangun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:04:06", "last_seen_utc": "2026-03-07 07:05:07", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760821": [ { "ioc_value": "lumtideen.albaniangun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 07:02:30", "last_seen_utc": "2026-03-07 07:02:45", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760820": [ { "ioc_value": "9ecfdotb.horsesence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:59:51", "last_seen_utc": "2026-03-07 07:01:02", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760817": [ { "ioc_value": "cloud-ker.horsesence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:52:22", "last_seen_utc": "2026-03-07 06:53:13", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760816": [ { "ioc_value": "ba7mcgai.horsesence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:50:43", "last_seen_utc": "2026-03-07 06:50:52", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760815": [ { "ioc_value": "ultra-g3ne.horsesence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:47:55", "last_seen_utc": "2026-03-07 06:48:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760814": [ { "ioc_value": "nd4ih.padohooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:42:28", "last_seen_utc": "2026-03-07 06:43:10", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760813": [ { "ioc_value": "driv3-logic.padohooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:36:40", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760812": [ { "ioc_value": "revi-clust.padohooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:34:56", "last_seen_utc": "2026-03-07 06:35:08", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760811": [ { "ioc_value": "vect0-signal.padohooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:30:44", "last_seen_utc": "2026-03-07 06:31:03", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760810": [ { "ioc_value": "replay-net.putreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:07:57", "last_seen_utc": "2026-03-07 06:08:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760805": [ { "ioc_value": "g70aw0re.bucketeuthan.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 06:00:45", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1760804": [ { "ioc_value": "kgcrad14.bucketeuthan.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 05:58:12", "last_seen_utc": "2026-03-07 05:58:46", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760803": [ { "ioc_value": "put08.putreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 05:55:32", "last_seen_utc": "2026-03-07 06:01:46", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760802": [ { "ioc_value": "replay-v1.putreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 05:45:48", "last_seen_utc": "2026-03-07 05:46:40", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760801": [ { "ioc_value": "macrobatic.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 05:39:20", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760800": [ { "ioc_value": "put-play.putreplay.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 05:30:21", "last_seen_utc": "2026-03-07 05:30:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760799": [ { "ioc_value": "mod-logic.automodcompass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 05:15:03", "last_seen_utc": "2026-03-07 05:19:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760798": [ { "ioc_value": "mabnetsolutions.co.za", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 05:10:26", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760797": [ { "ioc_value": "auto-v33.automodcompass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 05:03:57", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760796": [ { "ioc_value": "m3geeks.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 04:56:57", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760795": [ { "ioc_value": "mod-track.automodcompass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 04:50:31", "last_seen_utc": "2026-03-07 05:00:15", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760794": [ { "ioc_value": "m3-cleaning.solution25-staging.website", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 04:47:09", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760580": [ { "ioc_value": "auto-compass.automodcompass.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 04:27:38", "last_seen_utc": "2026-03-07 04:33:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760579": [ { "ioc_value": "m2afutbol.es", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 04:27:25", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760575": [ { "ioc_value": "m.sdfauto.ro", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 04:03:31", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760568": [ { "ioc_value": "www.antalyarehber.xyz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "apk.hook", "malware_alias": null, "malware_printable": "Hook", "first_seen_utc": "2026-03-07 04:01:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://search.censys.io/hosts/2606:4700:3036:0:0:0:6815:5637+www.antalyarehber.xyz", "tags": "AS13335,C2,censys,CLOUDFLARENET,Hookbot", "anonymous": "0", "reporter": "DonPasci" } ], "1760567": [ { "ioc_value": "manisarehber.xyz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "apk.hook", "malware_alias": null, "malware_printable": "Hook", "first_seen_utc": "2026-03-07 04:01:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://search.censys.io/hosts/2606:4700:3032:0:0:0:ac43:9286+manisarehber.xyz", "tags": "AS13335,C2,censys,CLOUDFLARENET,Hookbot", "anonymous": "0", "reporter": "DonPasci" } ], "1760562": [ { "ioc_value": "ional-hub.nasotoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 03:39:25", "last_seen_utc": "2026-03-07 03:40:35", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760561": [ { "ioc_value": "nasot-opt.nasotoptional.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 03:35:19", "last_seen_utc": "2026-03-07 03:35:23", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760559": [ { "ioc_value": "lent-net.chopexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 03:30:18", "last_seen_utc": "2026-03-07 03:30:45", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760558": [ { "ioc_value": "chop-v81.chopexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 03:26:37", "last_seen_utc": "2026-03-07 03:27:28", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760557": [ { "ioc_value": "luxtravel.info", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 03:25:44", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760556": [ { "ioc_value": "lent-unit.chopexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 03:22:18", "last_seen_utc": "2026-03-07 03:22:29", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760555": [ { "ioc_value": "luxhouse.net.vn", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 03:17:37", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760554": [ { "ioc_value": "chop-excel.chopexcellent.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 03:15:20", "last_seen_utc": "2026-03-07 03:15:50", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760553": [ { "ioc_value": "luxobense.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 03:12:27", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760552": [ { "ioc_value": "wgDV1FDEQGBTBTRBh3-35046.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-07 03:01:54", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-crtrcshs9r", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760551": [ { "ioc_value": "josh.it.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-07 03:00:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260307-clklhaa16t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760550": [ { "ioc_value": "dance-v9.dancingvcr.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 02:38:32", "last_seen_utc": "2026-03-07 02:39:14", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760549": [ { "ioc_value": "vcr-logic.dancingvcr.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 02:34:37", "last_seen_utc": "2026-03-07 02:35:35", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760546": [ { "ioc_value": "lxbrands.se", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 02:30:44", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760545": [ { "ioc_value": "move-node.dancingvcr.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 02:16:14", "last_seen_utc": "2026-03-07 02:32:44", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760543": [ { "ioc_value": "dance-vcr.dancingvcr.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 02:06:33", "last_seen_utc": "2026-03-07 02:11:52", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760542": [ { "ioc_value": "lvlenergy.pl", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 02:06:15", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760541": [ { "ioc_value": "sur-sync.reinsurundock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 02:00:42", "last_seen_utc": "2026-03-07 02:01:32", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760540": [ { "ioc_value": "rein-v44.reinsurundock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 01:52:32", "last_seen_utc": "2026-03-07 01:52:45", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760538": [ { "ioc_value": "rein-dock.reinsurundock.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 01:39:03", "last_seen_utc": "2026-03-07 01:39:22", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760537": [ { "ioc_value": "cism-flow.draniercism.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 01:34:43", "last_seen_utc": "2026-03-07 01:36:41", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760535": [ { "ioc_value": "dran02.draniercism.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 01:27:29", "last_seen_utc": "2026-03-07 01:32:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760534": [ { "ioc_value": "lupkow.pl", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-07 01:23:30", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760533": [ { "ioc_value": "cism-base.draniercism.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 01:20:05", "last_seen_utc": "2026-03-07 01:22:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760532": [ { "ioc_value": "dran-optic.draniercism.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 01:13:45", "last_seen_utc": "2026-03-07 01:19:36", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760531": [ { "ioc_value": "petun-data.albanianpetun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:53:07", "last_seen_utc": "2026-03-07 00:53:37", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760529": [ { "ioc_value": "alba-v77.albanianpetun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:42:17", "last_seen_utc": "2026-03-07 00:43:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760528": [ { "ioc_value": "petun-sys.albanianpetun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:34:47", "last_seen_utc": "2026-03-07 00:40:34", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760526": [ { "ioc_value": "alba-route.albanianpetun.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:27:25", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760525": [ { "ioc_value": "pres-gate.horspresence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:23:57", "last_seen_utc": "2026-03-07 00:24:45", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760524": [ { "ioc_value": "hors05.horspresence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:19:09", "last_seen_utc": "2026-03-07 00:19:28", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760523": [ { "ioc_value": "pres-mode.horspresence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:12:04", "last_seen_utc": "2026-03-07 00:14:37", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760522": [ { "ioc_value": "hors-link.horspresence.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-07 00:08:47", "last_seen_utc": "2026-03-07 00:09:01", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760505": [ { "ioc_value": "woo-sync.gadowooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 23:56:55", "last_seen_utc": "2026-03-06 23:57:52", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760504": [ { "ioc_value": "gadow-v12.gadowooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 23:47:49", "last_seen_utc": "2026-03-06 23:48:41", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1760497": [ { "ioc_value": "woo-point.gadowooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 23:37:31", "last_seen_utc": "2026-03-06 23:40:58", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760496": [ { "ioc_value": "gado-trace.gadowooing.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 23:25:40", "last_seen_utc": "2026-03-06 23:26:24", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760494": [ { "ioc_value": "lucunha.lbatho.com.br", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 23:20:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760493": [ { "ioc_value": "sanct-net.sanctunputer.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 23:15:56", "last_seen_utc": "2026-03-06 23:16:13", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760492": [ { "ioc_value": "put03.sanctunputer.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 23:10:32", "last_seen_utc": "2026-03-06 23:10:56", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760490": [ { "ioc_value": "sanct-v1.sanctunputer.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 23:03:38", "last_seen_utc": "2026-03-06 23:04:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1760489": [ { "ioc_value": "laohen29.myvnc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 23:02:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-x6n5mscz3l", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760488": [ { "ioc_value": "xrootx.zapto.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.remcos", "malware_alias": "RemcosRAT,Remvio,Socmer", "malware_printable": "Remcos", "first_seen_utc": "2026-03-06 23:00:42", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-y6cbhsdy3n", "tags": "Remcos", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760487": [ { "ioc_value": "1.habladourf.top", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.remcos", "malware_alias": "RemcosRAT,Remvio,Socmer", "malware_printable": "Remcos", "first_seen_utc": "2026-03-06 23:00:37", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-zc3r2sdz9j", "tags": "Remcos", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760483": [ { "ioc_value": "v2.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760484": [ { "ioc_value": "v2.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760485": [ { "ioc_value": "v3.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760486": [ { "ioc_value": "v3.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760474": [ { "ioc_value": "data.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760475": [ { "ioc_value": "ddos.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760476": [ { "ioc_value": "ddos.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760477": [ { "ioc_value": "malware.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760478": [ { "ioc_value": "malware.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760479": [ { "ioc_value": "phishing.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760480": [ { "ioc_value": "phishing.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760481": [ { "ioc_value": "quantri.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760482": [ { "ioc_value": "quantri.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:07", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760469": [ { "ioc_value": "atex.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:06", "last_seen_utc": "2026-03-06 23:00:08", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760470": [ { "ioc_value": "atex.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:06", "last_seen_utc": "2026-03-06 23:00:08", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760471": [ { "ioc_value": "backup.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760472": [ { "ioc_value": "backup.cakhiaax.cc", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760473": [ { "ioc_value": "data.borneorhinoalliance.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 23:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ylldpafv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760467": [ { "ioc_value": "put-vault.sanctunputer.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:52:18", "last_seen_utc": "2026-03-06 22:55:48", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760466": [ { "ioc_value": "test-sync.intesttop.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:45:42", "last_seen_utc": "2026-03-06 22:46:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760465": [ { "ioc_value": "top06.intesttop.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:39:45", "last_seen_utc": "2026-03-06 22:40:51", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760464": [ { "ioc_value": "intest-v9.intesttop.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:31:42", "last_seen_utc": "2026-03-06 22:32:08", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760463": [ { "ioc_value": "test-top.intesttop.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:25:49", "last_seen_utc": "2026-03-06 22:27:32", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760462": [ { "ioc_value": "repr-net.representtank.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:20:50", "last_seen_utc": "2026-03-06 22:21:35", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760461": [ { "ioc_value": "tank05.representtank.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:12:44", "last_seen_utc": "2026-03-06 22:13:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760460": [ { "ioc_value": "repr-v8.representtank.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 22:02:27", "last_seen_utc": "2026-03-06 22:03:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760458": [ { "ioc_value": "tank-gate.representtank.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 21:51:10", "last_seen_utc": "2026-03-06 21:57:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760457": [ { "ioc_value": "rich-flow.minenrichment.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 21:46:29", "last_seen_utc": "2026-03-06 21:47:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760455": [ { "ioc_value": "mine08.minenrichment.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 21:34:56", "last_seen_utc": "2026-03-06 21:41:21", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760454": [ { "ioc_value": "rich-v7.minenrichment.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 21:25:15", "last_seen_utc": "2026-03-06 21:27:31", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760453": [ { "ioc_value": "mine-base.minenrichment.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 21:17:07", "last_seen_utc": "2026-03-06 21:18:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760452": [ { "ioc_value": "double-sync.austrodouble.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 21:09:39", "last_seen_utc": "2026-03-06 21:14:43", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760446": [ { "ioc_value": "www.uqr4lo1t.shop", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.quasar_rat", "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil", "malware_printable": "Quasar RAT", "first_seen_utc": "2026-03-06 20:01:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://search.censys.io/hosts/118.107.47.86+www.uqr4lo1t.shop", "tags": "AS152194,C2,censys,CTGSERVERLIMITED-AS-AP,Quasar,RAT", "anonymous": "0", "reporter": "DonPasci" } ], "1760445": [ { "ioc_value": "www.vqpnhn8j.shop", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.quasar_rat", "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil", "malware_printable": "Quasar RAT", "first_seen_utc": "2026-03-06 20:01:11", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://search.censys.io/hosts/118.107.47.86+www.vqpnhn8j.shop", "tags": "AS152194,C2,censys,CTGSERVERLIMITED-AS-AP,Quasar,RAT", "anonymous": "0", "reporter": "DonPasci" } ], "1760438": [ { "ioc_value": "austro02.austrodouble.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 19:45:36", "last_seen_utc": "2026-03-06 19:46:02", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760437": [ { "ioc_value": "double-v6.austrodouble.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 19:40:08", "last_seen_utc": "2026-03-06 19:40:15", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760435": [ { "ioc_value": "austro-hub.austrodouble.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 19:34:28", "last_seen_utc": "2026-03-06 19:34:47", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760434": [ { "ioc_value": "dia-net.dialectblood.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 19:30:22", "last_seen_utc": "2026-03-06 19:30:50", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760431": [ { "ioc_value": "dia-v5.dialectblood.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 19:16:18", "last_seen_utc": "2026-03-06 19:17:12", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760430": [ { "ioc_value": "blood-unit.dialectblood.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 19:12:27", "last_seen_utc": "2026-03-06 19:13:21", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760429": [ { "ioc_value": "mx7society.com.br", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 19:08:46", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760428": [ { "ioc_value": "moro-sync.moroshkasvet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 19:08:02", "last_seen_utc": "2026-03-06 19:09:08", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760427": [ { "ioc_value": "pidoras6742-56928.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 19:01:56", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-xcx6fscs4n", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760426": [ { "ioc_value": "aviammo.shop", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 19:00:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-wnbk6ac141", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760424": [ { "ioc_value": "svet09.moroshkasvet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 18:35:12", "last_seen_utc": "2026-03-06 18:35:39", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760422": [ { "ioc_value": "muvisaskillgen.org", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 18:23:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760421": [ { "ioc_value": "moro-v4.moroshkasvet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 18:21:02", "last_seen_utc": "2026-03-06 18:22:03", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760420": [ { "ioc_value": "svet-core.moroshkasvet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 18:14:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760419": [ { "ioc_value": "woman-flow.youngwoman.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 18:12:57", "last_seen_utc": "2026-03-06 18:13:37", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760418": [ { "ioc_value": "young01.youngwoman.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 18:07:08", "last_seen_utc": "2026-03-06 18:08:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760416": [ { "ioc_value": "woman-v3.youngwoman.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 18:02:47", "last_seen_utc": "2026-03-06 18:02:52", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760413": [ { "ioc_value": "basic-incoming.gl.at.ply.gg", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.njrat", "malware_alias": "Bladabindi,Lime-Worm", "malware_printable": "NjRAT", "first_seen_utc": "2026-03-06 18:02:25", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-seg5ssg14q", "tags": "C2,domain,njrat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1760399": [ { "ioc_value": "drplus.in.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 18:01:07", "last_seen_utc": "2026-03-06 19:00:08", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-sqwsbsbt9y", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1760398": [ { "ioc_value": "backup5555.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 18:01:06", "last_seen_utc": "2026-03-06 19:00:09", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-sed35sg14m", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1760396": [ { "ioc_value": "arklen-64027.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 18:00:31", "last_seen_utc": "2026-03-06 19:01:59", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-t3zkesat9n", "tags": "C2,domain,triage,xworm", "anonymous": "0", "reporter": "DonPasci" } ], "1760395": [ { "ioc_value": "jaheya5849-64670.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 18:00:30", "last_seen_utc": "2026-03-06 19:01:57", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-wb3h4scx6x", "tags": "C2,domain,triage,xworm", "anonymous": "0", "reporter": "DonPasci" } ], "1760394": [ { "ioc_value": "mrem.workinnet.com.br", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 17:59:44", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760393": [ { "ioc_value": "musique.gaboivin.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 17:25:53", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760384": [ { "ioc_value": "adapters-invitations-seating-sims.trycloudflare.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.epsilon_stealer", "malware_alias": null, "malware_printable": "Epsilon Stealer", "first_seen_utc": "2026-03-06 16:28:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/4e7bc4bbb8199dd8aebb9dd01e624f0e9b63906af056b33d0a746e6604f0e9a8/", "tags": "EpsilonStealer", "anonymous": "1", "reporter": "NDA0E" } ], "1760385": [ { "ioc_value": "floppy-excited-advertisers-hosted.trycloudflare.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.epsilon_stealer", "malware_alias": null, "malware_printable": "Epsilon Stealer", "first_seen_utc": "2026-03-06 16:28:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/4e7bc4bbb8199dd8aebb9dd01e624f0e9b63906af056b33d0a746e6604f0e9a8/", "tags": "EpsilonStealer", "anonymous": "1", "reporter": "NDA0E" } ], "1760381": [ { "ioc_value": "download.businessventure.cv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "elf.xmrig", "malware_alias": null, "malware_printable": "XMRIG", "first_seen_utc": "2026-03-06 16:20:03", "last_seen_utc": "2026-03-06 16:20:03", "confidence_level": 100, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/bc4b8678d0fca85d3f80017b13e87f9b3eb8a279afe7f69db8f4fa7d65c3e5bc/", "tags": "coinminer,xmrig", "anonymous": "1", "reporter": "NDA0E" } ], "1760382": [ { "ioc_value": "download.vercel.qpon", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "elf.xmrig", "malware_alias": null, "malware_printable": "XMRIG", "first_seen_utc": "2026-03-06 16:20:03", "last_seen_utc": "2026-03-06 16:20:03", "confidence_level": 100, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/bc4b8678d0fca85d3f80017b13e87f9b3eb8a279afe7f69db8f4fa7d65c3e5bc/", "tags": "coinminer,xmrig", "anonymous": "1", "reporter": "NDA0E" } ], "1760383": [ { "ioc_value": "download.skibidibopbop.lol", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "elf.xmrig", "malware_alias": null, "malware_printable": "XMRIG", "first_seen_utc": "2026-03-06 16:20:03", "last_seen_utc": "2026-03-06 16:20:03", "confidence_level": 100, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/bc4b8678d0fca85d3f80017b13e87f9b3eb8a279afe7f69db8f4fa7d65c3e5bc/", "tags": "coinminer,xmrig", "anonymous": "1", "reporter": "NDA0E" } ], "1760375": [ { "ioc_value": "munirhassan.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 16:14:50", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760361": [ { "ioc_value": "mundopetaraucaria.com.br", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 15:55:17", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760358": [ { "ioc_value": "mundoluz.prestacel.online", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 15:42:44", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760356": [ { "ioc_value": "multipinturasguanipa.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 15:30:26", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760354": [ { "ioc_value": "givemebestblessfromtheangelforcashouttog.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.remcos", "malware_alias": "RemcosRAT,Remvio,Socmer", "malware_printable": "Remcos", "first_seen_utc": "2026-03-06 15:20:31", "last_seen_utc": "2026-03-06 19:00:35", "confidence_level": 75, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/2cfa6c6e8069781cac1cee634e4fd346c714b7ebe244c92c8ca02d0b240e0f5c/", "tags": "remcos", "anonymous": "0", "reporter": "abuse_ch" } ], "1760353": [ { "ioc_value": "young-site.youngwoman.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 15:18:04", "last_seen_utc": "2026-03-06 15:25:46", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760350": [ { "ioc_value": "pigeon-net.pigeonbreed.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 15:14:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760349": [ { "ioc_value": "breed07.pigeonbreed.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 15:05:04", "last_seen_utc": "2026-03-06 15:05:27", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760348": [ { "ioc_value": "fsocietyserver-63331.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 15:02:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-pszefsgz5s", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760347": [ { "ioc_value": "fusldhtp5.localto.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 15:02:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-raecnsfz3l", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760346": [ { "ioc_value": "abujafirms-36349.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.remcos", "malware_alias": "RemcosRAT,Remvio,Socmer", "malware_printable": "Remcos", "first_seen_utc": "2026-03-06 15:00:28", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-r7xkhsgy6m", "tags": "Remcos", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760345": [ { "ioc_value": "dkcraneservices.in.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:16", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-pjlf8sgw91", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760343": [ { "ioc_value": "dolarciao.it.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:11", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-p4mj2aft2m", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760340": [ { "ioc_value": "ike.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-rh4yash17w", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760341": [ { "ioc_value": "rqtuxh.sa.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-rh4yash17w", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760342": [ { "ioc_value": "ufb.uk.comufb.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-rh4yash17w", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760336": [ { "ioc_value": "OK8386.CHEAP", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ryadmaav6z", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760337": [ { "ioc_value": "c168.casino", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ryadmaav6z", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760338": [ { "ioc_value": "c168.fund", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ryadmaav6z", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760339": [ { "ioc_value": "fly88.limited", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:04", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ryadmaav6z", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760335": [ { "ioc_value": "OK8386.CASINO", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 15:00:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-ryadmaav6z", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760334": [ { "ioc_value": "pigeon-v2.pigeonbreed.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 14:58:42", "last_seen_utc": "2026-03-06 14:59:43", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760333": [ { "ioc_value": "bird-farm.pigeonbreed.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 14:48:22", "last_seen_utc": "2026-03-06 14:54:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760332": [ { "ioc_value": "sync-base.comenskeptic.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 14:42:36", "last_seen_utc": "2026-03-06 14:42:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760331": [ { "ioc_value": "com03.comenskeptic.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 14:28:23", "last_seen_utc": "2026-03-06 14:29:15", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760330": [ { "ioc_value": "skept-v1.comenskeptic.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 14:22:46", "last_seen_utc": "2026-03-06 14:23:38", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760329": [ { "ioc_value": "loja.controlink.pt", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 14:20:39", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760328": [ { "ioc_value": "com-node.comenskeptic.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 14:16:03", "last_seen_utc": "2026-03-06 14:16:22", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760327": [ { "ioc_value": "fieldman-toolnode.fieldmanfix.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 14:06:46", "last_seen_utc": "2026-03-06 14:06:58", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760326": [ { "ioc_value": "qi1.xin", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 14:05:26", "last_seen_utc": "2026-03-06 18:01:07", "confidence_level": 75, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/89e52fa31535e46b5f08becbe1c591aff709036554856e6d250a503719081705/", "tags": "asyncrat", "anonymous": "0", "reporter": "abuse_ch" } ], "1760324": [ { "ioc_value": "vrf.myserver.com.bd", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-06 13:48:46", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Vidar", "anonymous": "0", "reporter": "crep1x" } ], "1760325": [ { "ioc_value": "vrf.digitalmatters360.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-06 13:48:46", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Vidar", "anonymous": "0", "reporter": "crep1x" } ], "1760322": [ { "ioc_value": "ruralcraft.fieldmanfix.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 13:46:53", "last_seen_utc": "2026-03-06 13:47:13", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760319": [ { "ioc_value": "y6mrx.fieldmanfix.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 13:39:48", "last_seen_utc": "2026-03-06 13:40:36", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760318": [ { "ioc_value": "blind-devgrid.blinderdevour.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 13:30:46", "last_seen_utc": "2026-03-06 13:31:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760317": [ { "ioc_value": "darkconsume.blinderdevour.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 13:25:48", "last_seen_utc": "2026-03-06 13:26:08", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760313": [ { "ioc_value": "usd-waneframe.usdwane.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:59:47", "last_seen_utc": "2026-03-06 13:00:10", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760311": [ { "ioc_value": "k3wqt.usdwane.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:49:28", "last_seen_utc": "2026-03-06 12:49:45", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760309": [ { "ioc_value": "even-sponsorlink.evenssponsor.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:41:25", "last_seen_utc": "2026-03-06 12:42:01", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760307": [ { "ioc_value": "brandbridge.evenssponsor.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:26:50", "last_seen_utc": "2026-03-06 12:27:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760306": [ { "ioc_value": "z7rvk.evenssponsor.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:20:52", "last_seen_utc": "2026-03-06 12:21:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760305": [ { "ioc_value": "dropout-switchgate.dropout.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:14:31", "last_seen_utc": "2026-03-06 12:15:30", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760304": [ { "ioc_value": "s2kpplbt.awakepathog.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:12:15", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760303": [ { "ioc_value": "sqddakti.awakepathog.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:11:56", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1760302": [ { "ioc_value": "exitroute.dropout.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:09:16", "last_seen_utc": "2026-03-06 12:11:39", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760301": [ { "ioc_value": "fartnaga123-37438.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.nanocore", "malware_alias": "Nancrat,NanoCore", "malware_printable": "Nanocore RAT", "first_seen_utc": "2026-03-06 12:05:00", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-nqyjpsdt3j", "tags": "C2,domain,nanocore,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1760300": [ { "ioc_value": "m2q9x.dropout.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 12:03:04", "last_seen_utc": "2026-03-06 12:03:45", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760292": [ { "ioc_value": "shadowlogikov-33583.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 12:00:48", "last_seen_utc": "2026-03-06 15:02:11", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-nh736sc14m", "tags": "C2,domain,triage,xworm", "anonymous": "0", "reporter": "DonPasci" } ], "1760291": [ { "ioc_value": "fsocietyserver-38405.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 12:00:46", "last_seen_utc": "2026-03-06 15:02:07", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-nr6ayafw8v", "tags": "C2,domain,triage,xworm", "anonymous": "0", "reporter": "DonPasci" } ], "1760290": [ { "ioc_value": "piit-tabvector.piittablet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:57:39", "last_seen_utc": "2026-03-06 11:58:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760289": [ { "ioc_value": "msipep.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 11:54:32", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760288": [ { "ioc_value": "dataplate.piittablet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:51:19", "last_seen_utc": "2026-03-06 11:51:51", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760287": [ { "ioc_value": "t5zw3.piittablet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:45:22", "last_seen_utc": "2026-03-06 11:46:13", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1760286": [ { "ioc_value": "rantier-loopnode.rantiercling.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:39:29", "last_seen_utc": "2026-03-06 11:40:12", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760285": [ { "ioc_value": "msi.tiendajae.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 11:38:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760283": [ { "ioc_value": "circleforge.rantiercling.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:33:23", "last_seen_utc": "2026-03-06 11:34:12", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760282": [ { "ioc_value": "r8kqm.rantiercling.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:27:37", "last_seen_utc": "2026-03-06 11:28:32", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1760281": [ { "ioc_value": "ochech-lockframe.ochechstop.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:20:34", "last_seen_utc": "2026-03-06 11:21:18", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760280": [ { "ioc_value": "haltpoint.ochechstop.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:15:36", "last_seen_utc": "2026-03-06 11:16:19", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760279": [ { "ioc_value": "x4qzt.ochechstop.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:05:51", "last_seen_utc": "2026-03-06 11:09:03", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760278": [ { "ioc_value": "hyblazemc.myddns.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 11:02:09", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-h8w6psgy2j", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760275": [ { "ioc_value": "Doghan-52372.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 11:02:01", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-l9hw9aa19p", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760273": [ { "ioc_value": "proof-anchorgrid.proofsurvivor.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 11:00:41", "last_seen_utc": "2026-03-06 11:02:51", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760272": [ { "ioc_value": "flivication-officefax.myhome-server.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.remcos", "malware_alias": "RemcosRAT,Remvio,Socmer", "malware_printable": "Remcos", "first_seen_utc": "2026-03-06 11:00:31", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-l5f7vsaz7m", "tags": "Remcos", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760271": [ { "ioc_value": "login.motchillio.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 11:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-kfpx2acv5t", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760270": [ { "ioc_value": "cryptx.root64.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 11:00:08", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-kjvyfsht6q", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760268": [ { "ioc_value": "mrwebconsultant.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 10:54:22", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760267": [ { "ioc_value": "lifeline.proofsurvivor.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:54:00", "last_seen_utc": "2026-03-06 10:58:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760266": [ { "ioc_value": "v9k2p.proofsurvivor.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:48:33", "last_seen_utc": "2026-03-06 10:49:36", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760265": [ { "ioc_value": "addict-veilcore.addictfear.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:42:06", "last_seen_utc": "2026-03-06 10:43:42", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760264": [ { "ioc_value": "shadowpulse.addictfear.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:37:13", "last_seen_utc": "2026-03-06 10:37:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760263": [ { "ioc_value": "q7mxr.addictfear.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:31:01", "last_seen_utc": "2026-03-06 10:36:10", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760262": [ { "ioc_value": "kvid5obz.awakepathog.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:29:59", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1760261": [ { "ioc_value": "gq6gzvw6.awakepathog.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:29:46", "last_seen_utc": "2026-03-06 12:12:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760260": [ { "ioc_value": "amp-winvector.amperewin.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:25:52", "last_seen_utc": "2026-03-06 10:26:58", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760259": [ { "ioc_value": "currentflow.amperewin.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:20:28", "last_seen_utc": "2026-03-06 10:21:42", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760258": [ { "ioc_value": "mreza.izkruga.org", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 10:15:18", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760257": [ { "ioc_value": "y7qz2.amperewin.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:13:27", "last_seen_utc": "2026-03-06 10:19:03", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760256": [ { "ioc_value": "mrbuho.mx", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 10:06:29", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760255": [ { "ioc_value": "scene4-render.fourscene.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 10:05:51", "last_seen_utc": "2026-03-06 10:08:16", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760254": [ { "ioc_value": "visualstage.fourscene.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:59:24", "last_seen_utc": "2026-03-06 10:05:19", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760253": [ { "ioc_value": "bapesta.akjqdf.xyz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-06 09:58:43", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/28d6e78b0f33f771aa49458a7adf89227e832574a71e214a6933b0116b70ca9f/", "tags": "RevStealer", "anonymous": "0", "reporter": "abuse_ch" } ], "1760251": [ { "ioc_value": "q8rvk.fourscene.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:53:58", "last_seen_utc": "2026-03-06 09:54:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760081": [ { "ioc_value": "go88x.pro", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.quasar_rat", "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil", "malware_printable": "Quasar RAT", "first_seen_utc": "2026-03-06 09:51:28", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://www.virustotal.com/gui/domain/go88x.pro", "tags": null, "anonymous": "0", "reporter": "Olieee" } ], "1760082": [ { "ioc_value": "go88trangchu.biz", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.quasar_rat", "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil", "malware_printable": "Quasar RAT", "first_seen_utc": "2026-03-06 09:51:27", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://www.virustotal.com/gui/domain/go88trangchu.biz", "tags": null, "anonymous": "0", "reporter": "Olieee" } ], "1760212": [ { "ioc_value": "bestbettersolutions.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 09:50:10", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "ClickFix,ErrTraffic", "anonymous": "0", "reporter": "HuntYethHounds" } ], "1760220": [ { "ioc_value": "clearstats.org", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 09:50:10", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "ClickFix,ErrTraffic", "anonymous": "0", "reporter": "HuntYethHounds" } ], "1760235": [ { "ioc_value": "n0sasahqstdjb67a.frostapi.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-06 09:50:09", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-kv1yvahw7k/behavioral2", "tags": "c2,FrostStealer", "anonymous": "0", "reporter": "burger" } ], "1760238": [ { "ioc_value": "datadrive.corvetfordata.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:50:08", "last_seen_utc": "2026-03-06 09:12:22", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "6March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760250": [ { "ioc_value": "lsvvpb8t.drinktide.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:49:34", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1760249": [ { "ioc_value": "d2t7xj4f.drinktide.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:48:37", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760248": [ { "ioc_value": "denny-holdgrid.dennyportfol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:48:16", "last_seen_utc": "2026-03-06 09:52:33", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760247": [ { "ioc_value": "assetfolio.dennyportfol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:42:06", "last_seen_utc": "2026-03-06 09:43:10", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760245": [ { "ioc_value": "w3x9m.dennyportfol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:35:45", "last_seen_utc": "2026-03-06 09:36:13", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760243": [ { "ioc_value": "mpcpolyplast.ru", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 09:27:23", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760240": [ { "ioc_value": "movitelf.es", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 09:19:19", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760239": [ { "ioc_value": "corvetx-stream.corvetfordata.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:17:44", "last_seen_utc": "2026-03-06 09:18:27", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1760237": [ { "ioc_value": "z5qtr.corvetfordata.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 09:06:02", "last_seen_utc": "2026-03-06 09:06:53", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1760234": [ { "ioc_value": "movietripshow.de", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 09:03:56", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760233": [ { "ioc_value": "anny-devframe.annyprogramm.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:59:28", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760232": [ { "ioc_value": "molip.sk", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "win.strelastealer", "malware_alias": null, "malware_printable": "StrelaStealer", "first_seen_utc": "2026-03-06 08:57:32", "last_seen_utc": null, "confidence_level": 100, "is_compromised": true, "reference": null, "tags": "StrelaStealer", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760231": [ { "ioc_value": "codesprint.annyprogramm.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:50:53", "last_seen_utc": "2026-03-06 08:51:20", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760230": [ { "ioc_value": "ygzulpfl.floatmurta.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:47:29", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1760229": [ { "ioc_value": "h5gxu4pp.floatmurta.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:46:01", "last_seen_utc": "2026-03-06 08:46:14", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760228": [ { "ioc_value": "v8kq3.annyprogramm.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:44:54", "last_seen_utc": "2026-03-06 08:46:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760227": [ { "ioc_value": "microb1o-lattice.sdflkmicrobiol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:39:33", "last_seen_utc": "2026-03-06 08:39:50", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760226": [ { "ioc_value": "cellculture.sdflkmicrobiol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:36:16", "last_seen_utc": "2026-03-06 08:38:21", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760225": [ { "ioc_value": "n4qx7.sdflkmicrobiol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:27:40", "last_seen_utc": "2026-03-06 08:35:39", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760224": [ { "ioc_value": "birdfract-sky.breaknbird.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:21:17", "last_seen_utc": "2026-03-06 08:27:27", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760223": [ { "ioc_value": "wingflight.breaknbird.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:17:12", "last_seen_utc": "2026-03-06 08:19:20", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760222": [ { "ioc_value": "t6pzr.breaknbird.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:15:18", "last_seen_utc": "2026-03-06 08:16:23", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760221": [ { "ioc_value": "constell-1node.constellupd.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 08:08:21", "last_seen_utc": "2026-03-06 08:09:20", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760213": [ { "ioc_value": "starvector.constellupd.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:58:04", "last_seen_utc": "2026-03-06 07:59:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760211": [ { "ioc_value": "q9wm4.constellupd.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:52:31", "last_seen_utc": "2026-03-06 07:54:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760204": [ { "ioc_value": "nap.myserver.com.bd", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-06 07:51:49", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Vidar", "anonymous": "0", "reporter": "crep1x" } ], "1760205": [ { "ioc_value": "nap.digitalmatters360.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-06 07:51:49", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Vidar", "anonymous": "0", "reporter": "crep1x" } ], "1760196": [ { "ioc_value": "coachburn-edge.coachcoal.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:46:34", "last_seen_utc": "2026-03-06 07:47:58", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760083": [ { "ioc_value": "teamforge.coachcoal.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:30:28", "last_seen_utc": "2026-03-06 07:31:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759284": [ { "ioc_value": "oriana84.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.kongtuke", "malware_alias": "TAG-124,js.LandUpdate808", "malware_printable": "KongTuke", "first_seen_utc": "2026-03-06 07:12:36", "last_seen_utc": "2026-03-06 04:14:50", "confidence_level": 100, "is_compromised": true, "reference": "https://infosec.exchange/@monitorsg/116179028856486281", "tags": "KongTuke", "anonymous": "0", "reporter": "monitorsg" } ], "1759287": [ { "ioc_value": "heavens-gate.top", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.kongtuke", "malware_alias": "TAG-124,js.LandUpdate808", "malware_printable": "KongTuke", "first_seen_utc": "2026-03-06 07:12:33", "last_seen_utc": "2026-03-06 04:14:53", "confidence_level": 100, "is_compromised": true, "reference": "https://infosec.exchange/@monitorsg/116179028856486281", "tags": "KongTuke", "anonymous": "0", "reporter": "monitorsg" } ], "1759282": [ { "ioc_value": "cryp-sync.cryptonest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:12:31", "last_seen_utc": "2026-03-05 22:53:32", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759256": [ { "ioc_value": "flow-core.fluxbridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:12:29", "last_seen_utc": "2026-03-05 21:58:50", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759233": [ { "ioc_value": "gerony.top", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.smartapesg", "malware_alias": "HANEYMANEY,ZPHP", "malware_printable": "SmartApeSG", "first_seen_utc": "2026-03-06 07:12:26", "last_seen_utc": "2026-03-05 20:19:19", "confidence_level": 100, "is_compromised": true, "reference": "https://infosec.exchange/@monitorsg/116178416579840754", "tags": "SmartApeSG", "anonymous": "0", "reporter": "monitorsg" } ], "1759228": [ { "ioc_value": "kero01.avonkerosene.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:12:22", "last_seen_utc": "2026-03-05 20:16:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759227": [ { "ioc_value": "amfredio.com", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.smartapesg", "malware_alias": "HANEYMANEY,ZPHP", "malware_printable": "SmartApeSG", "first_seen_utc": "2026-03-06 07:12:21", "last_seen_utc": "2026-03-05 21:09:03", "confidence_level": 100, "is_compromised": true, "reference": "https://infosec.exchange/@monitorsg/116178368753014125", "tags": "SmartApeSG", "anonymous": "0", "reporter": "monitorsg" } ], "1759223": [ { "ioc_value": "trofedi.top", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.smartapesg", "malware_alias": "HANEYMANEY,ZPHP", "malware_printable": "SmartApeSG", "first_seen_utc": "2026-03-06 07:12:17", "last_seen_utc": "2026-03-05 21:08:59", "confidence_level": 100, "is_compromised": true, "reference": "https://infosec.exchange/@monitorsg/116178368753014125", "tags": "SmartApeSG", "anonymous": "0", "reporter": "monitorsg" } ], "1759192": [ { "ioc_value": "avon-v9.avonkerosene.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:12:14", "last_seen_utc": "2026-03-05 20:13:41", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1760063": [ { "ioc_value": "kz7v2.coachcoal.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 07:09:19", "last_seen_utc": "2026-03-06 07:10:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760057": [ { "ioc_value": "rajkumarred.ddnsgeek.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 07:01:52", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-g5qzvabw7y", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760058": [ { "ioc_value": "rajkumarred.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 07:01:52", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-g5qzvabw7y", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760051": [ { "ioc_value": "au88.br.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 07:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-gzthsabs4s", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760052": [ { "ioc_value": "au88a.cn.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 07:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-gzthsabs4s", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760053": [ { "ioc_value": "au88green.us.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 07:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-gzthsabs4s", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760054": [ { "ioc_value": "wwi.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 07:00:06", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-gzthsabs4s", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760050": [ { "ioc_value": "travel-korean.in.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 07:00:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-g2ykhsgs7l", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1760049": [ { "ioc_value": "abcgrid-0form.abcdesign.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 06:59:03", "last_seen_utc": "2026-03-06 06:59:30", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760047": [ { "ioc_value": "win-sys-health.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_rat", "malware_alias": null, "malware_printable": "Unknown RAT", "first_seen_utc": "2026-03-06 06:46:13", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "fakermm,trustconnect", "anonymous": "0", "reporter": "juroots" } ], "1760048": [ { "ioc_value": "artworkinc.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_rat", "malware_alias": null, "malware_printable": "Unknown RAT", "first_seen_utc": "2026-03-06 06:46:13", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "fakermm,trustconnect", "anonymous": "0", "reporter": "juroots" } ], "1760045": [ { "ioc_value": "maherooff12.no-ip.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.njrat", "malware_alias": "Bladabindi,Lime-Worm", "malware_printable": "NjRAT", "first_seen_utc": "2026-03-06 06:44:34", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,njrat", "anonymous": "0", "reporter": "juroots" } ], "1760034": [ { "ioc_value": "server4.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760035": [ { "ioc_value": "server5.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760036": [ { "ioc_value": "server5.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760037": [ { "ioc_value": "server6.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760038": [ { "ioc_value": "server6.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760039": [ { "ioc_value": "server7.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760040": [ { "ioc_value": "server7.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760041": [ { "ioc_value": "server8.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760042": [ { "ioc_value": "server8.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760043": [ { "ioc_value": "server9.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760044": [ { "ioc_value": "server9.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:37", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760024": [ { "ioc_value": "fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760025": [ { "ioc_value": "server1.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760026": [ { "ioc_value": "server1.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": "2026-03-06 06:43:37", "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760027": [ { "ioc_value": "server10.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760028": [ { "ioc_value": "server10.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760029": [ { "ioc_value": "server2.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760030": [ { "ioc_value": "server2.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760031": [ { "ioc_value": "server3.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760032": [ { "ioc_value": "server3.sofolisk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760033": [ { "ioc_value": "server4.fulusus.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.glupteba", "malware_alias": null, "malware_printable": "Glupteba", "first_seen_utc": "2026-03-06 06:43:36", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "c2,glupteba", "anonymous": "0", "reporter": "juroots" } ], "1760021": [ { "ioc_value": "pixelcraft.abcdesign.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 06:43:14", "last_seen_utc": "2026-03-06 06:44:19", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760019": [ { "ioc_value": "marketplace.br.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 06:42:32", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "asyncrat,c2", "anonymous": "0", "reporter": "juroots" } ], "1760020": [ { "ioc_value": "vuabets88.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-06 06:42:32", "last_seen_utc": null, "confidence_level": 50, "is_compromised": false, "reference": "", "tags": "asyncrat,c2", "anonymous": "0", "reporter": "juroots" } ], "1760015": [ { "ioc_value": "rx8qk.abcdesign.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 06:19:09", "last_seen_utc": "2026-03-06 06:20:38", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760012": [ { "ioc_value": "stre06.aquastream.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 06:02:34", "last_seen_utc": "2026-03-06 06:04:02", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1760010": [ { "ioc_value": "x98wr-43312.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.quasar_rat", "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil", "malware_printable": "Quasar RAT", "first_seen_utc": "2026-03-06 06:02:15", "last_seen_utc": "2026-03-06 07:00:41", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-gjm13aay6x", "tags": "C2,domain,quasar,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1760008": [ { "ioc_value": "f7ozu1t9.flogginquisit.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 05:52:00", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1760007": [ { "ioc_value": "k2rprgmy.flogginquisit.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 05:51:43", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759996": [ { "ioc_value": "pauktriixu.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759997": [ { "ioc_value": "peculaters.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759998": [ { "ioc_value": "tracktimespa.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759999": [ { "ioc_value": "teuffered.club", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1760000": [ { "ioc_value": "communistric.live", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1760001": [ { "ioc_value": "oldestricks.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1760002": [ { "ioc_value": "unaffects.de.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1760003": [ { "ioc_value": "illegate.wiki", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1760004": [ { "ioc_value": "sectifiers.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1760005": [ { "ioc_value": "obeliscobrindes.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1760006": [ { "ioc_value": "imporation.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:09", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759967": [ { "ioc_value": "sub.cobarteres.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759968": [ { "ioc_value": "accounteering.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759969": [ { "ioc_value": "authorians.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759970": [ { "ioc_value": "aceh4dstand.kazmielecom.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759971": [ { "ioc_value": "lscomic.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759972": [ { "ioc_value": "comparisting.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759973": [ { "ioc_value": "micecable.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759974": [ { "ioc_value": "independoza.news", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759975": [ { "ioc_value": "proximatical.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759976": [ { "ioc_value": "sub.cyberchael.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759977": [ { "ioc_value": "capturessing.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759978": [ { "ioc_value": "quantumflickhub.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759979": [ { "ioc_value": "win772.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759980": [ { "ioc_value": "paperwriting-service.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759981": [ { "ioc_value": "histofort.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759982": [ { "ioc_value": "lessenges.bid", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759983": [ { "ioc_value": "greaterializing.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759984": [ { "ioc_value": "terminal4dstar.amigdalomoraitis.gr", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759985": [ { "ioc_value": "zenfusionnowx.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759986": [ { "ioc_value": "seapons.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759987": [ { "ioc_value": "magleekbotais.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759988": [ { "ioc_value": "excellence.palachiangle.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": "2026-03-06 05:49:09", "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759989": [ { "ioc_value": "mysticfusionnow.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759990": [ { "ioc_value": "vibezenithx.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759991": [ { "ioc_value": "glimmerforge.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759992": [ { "ioc_value": "centioch.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759993": [ { "ioc_value": "contacticaller.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759994": [ { "ioc_value": "security-images.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759995": [ { "ioc_value": "goalternal.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:08", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759938": [ { "ioc_value": "dispossessive.bid", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759939": [ { "ioc_value": "alvdalensforetagsmassa.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759940": [ { "ioc_value": "amazon-row.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759941": [ { "ioc_value": "newzfresh.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759942": [ { "ioc_value": "vaattlacteng.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759943": [ { "ioc_value": "procely.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759944": [ { "ioc_value": "cominally.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759945": [ { "ioc_value": "covertiny.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759946": [ { "ioc_value": "pureglownow.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759947": [ { "ioc_value": "subduedpush.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759948": [ { "ioc_value": "historative.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759949": [ { "ioc_value": "solarlynxx.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759950": [ { "ioc_value": "mysticfusionx.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759951": [ { "ioc_value": "flashzenithx.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759952": [ { "ioc_value": "mail6.brabluthe.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759953": [ { "ioc_value": "sparently.stream", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759954": [ { "ioc_value": "cobarteres.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759955": [ { "ioc_value": "kerchase.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759956": [ { "ioc_value": "turboechonow.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759957": [ { "ioc_value": "borrock.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759958": [ { "ioc_value": "consultoria01a.sairavoabemalto.cfd", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759959": [ { "ioc_value": "folloquially.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759960": [ { "ioc_value": "circulosive.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759961": [ { "ioc_value": "sidgwart.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759962": [ { "ioc_value": "outsidences.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759963": [ { "ioc_value": "billinessmer.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759964": [ { "ioc_value": "cpanel.alvdalensforetagsmassa.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759965": [ { "ioc_value": "jcpcom.vip-cheats.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759966": [ { "ioc_value": "surgecraft.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:07", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759908": [ { "ioc_value": "richigantial.cfd", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759909": [ { "ioc_value": "36b5759.hirthe.deternating.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759910": [ { "ioc_value": "folkcatart.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759911": [ { "ioc_value": "cck-opal-cosmetics.sa.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759912": [ { "ioc_value": "espied.diversist.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759913": [ { "ioc_value": "638760838653830192.paris-lmnnew-aaa.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759914": [ { "ioc_value": "lunadrift.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759915": [ { "ioc_value": "networkshirles.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759916": [ { "ioc_value": "democracialism.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759917": [ { "ioc_value": "bbs.diversist.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759918": [ { "ioc_value": "imd02.diversist.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759919": [ { "ioc_value": "solarwavex.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759920": [ { "ioc_value": "refusaling.online", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759921": [ { "ioc_value": "kjobedfkog.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759922": [ { "ioc_value": "turboblazenowx.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759923": [ { "ioc_value": "plainstandard.love", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759924": [ { "ioc_value": "econcreato.pro", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759925": [ { "ioc_value": "imporategory.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759926": [ { "ioc_value": "billagellion.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759927": [ { "ioc_value": "terminal4dgacor.saarthitrust.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759928": [ { "ioc_value": "turboblazenow.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759929": [ { "ioc_value": "stoichigan.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759930": [ { "ioc_value": "crometimes.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759931": [ { "ioc_value": "visit.newsbelarus.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759932": [ { "ioc_value": "zenvibenowx.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759933": [ { "ioc_value": "johanniba.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759934": [ { "ioc_value": "mysticblazenowx.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759935": [ { "ioc_value": "acceptionics.stream", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759936": [ { "ioc_value": "essaugavada.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759937": [ { "ioc_value": "websupport.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:06", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759878": [ { "ioc_value": "urbanpulsex.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759879": [ { "ioc_value": "hermenish.com.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759880": [ { "ioc_value": "neopological.pw", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759881": [ { "ioc_value": "zenstreamnow.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759882": [ { "ioc_value": "wolketinued.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759883": [ { "ioc_value": "otherench.news", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759884": [ { "ioc_value": "5c10365e5d.hirthe.deternating.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759885": [ { "ioc_value": "contactivities.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759886": [ { "ioc_value": "perposed.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759887": [ { "ioc_value": "caroliness.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759888": [ { "ioc_value": "decliniwerks.dev", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759889": [ { "ioc_value": "decreteur.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759890": [ { "ioc_value": "commoditeral.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759891": [ { "ioc_value": "ilottered.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759892": [ { "ioc_value": "c.arkadia12.xyz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759893": [ { "ioc_value": "extrustrative.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759894": [ { "ioc_value": "lentars.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759895": [ { "ioc_value": "easuldron.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759896": [ { "ioc_value": "contracterium.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759897": [ { "ioc_value": "chniticarovies.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759898": [ { "ioc_value": "howevertension.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759899": [ { "ioc_value": "compireach.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759900": [ { "ioc_value": "vladiyatt.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759901": [ { "ioc_value": "compreheart.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759902": [ { "ioc_value": "pureglowx.dev", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759903": [ { "ioc_value": "stellarzenx.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759904": [ { "ioc_value": "5c103b5e5d.hirthe.deternating.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759905": [ { "ioc_value": "ddfsfsdf.bavarsi.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759906": [ { "ioc_value": "flouristic.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759907": [ { "ioc_value": "mclaughlin.hypernovastrata.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:05", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759848": [ { "ioc_value": "reforestoryv.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759849": [ { "ioc_value": "revueandnews.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759850": [ { "ioc_value": "quantumminglex.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759851": [ { "ioc_value": "zenwavex.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759852": [ { "ioc_value": "gangaikov.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759853": [ { "ioc_value": "turner.confederably.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759854": [ { "ioc_value": "gibson.iwerkshi.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759855": [ { "ioc_value": "purenexusnow.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759856": [ { "ioc_value": "mannelson.us.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759857": [ { "ioc_value": "poverting.pro", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759858": [ { "ioc_value": "zenminglenowx.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759859": [ { "ioc_value": "turboglownow.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759860": [ { "ioc_value": "quantumzenith.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759861": [ { "ioc_value": "limitational.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759862": [ { "ioc_value": "boldfusionnow.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759863": [ { "ioc_value": "zenithdrift.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759864": [ { "ioc_value": "containoa.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759865": [ { "ioc_value": "truepulsenow.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759866": [ { "ioc_value": "likelyn.bid", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759867": [ { "ioc_value": "trueglownowx.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759868": [ { "ioc_value": "nonstoplong-term.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759869": [ { "ioc_value": "vibeloom.dev", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759870": [ { "ioc_value": "collingular.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759871": [ { "ioc_value": "starpulsecore.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759872": [ { "ioc_value": "containstrast.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759873": [ { "ioc_value": "flashminglenowx.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759874": [ { "ioc_value": "governovelisk.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759875": [ { "ioc_value": "warshere.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759876": [ { "ioc_value": "mechangels.jp.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759877": [ { "ioc_value": "elimitressbow.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:04", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759818": [ { "ioc_value": "cihxmeazaj.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759819": [ { "ioc_value": "sfimosrgch.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759820": [ { "ioc_value": "pblyltthfe.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759821": [ { "ioc_value": "kftwmhigho.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759822": [ { "ioc_value": "imfsoyhdsz.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759823": [ { "ioc_value": "fgiizmzm6.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759824": [ { "ioc_value": "voiceunbecoming.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759825": [ { "ioc_value": "vluhsxhtjc.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759826": [ { "ioc_value": "separticle.cloud", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759827": [ { "ioc_value": "passault.support", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759828": [ { "ioc_value": "jizoiqgwkj.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759829": [ { "ioc_value": "ysnathnhxh.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759830": [ { "ioc_value": "lxuimwtmbh.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759831": [ { "ioc_value": "mrt1122.ddns.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759832": [ { "ioc_value": "vwestqocet.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759833": [ { "ioc_value": "phudrmagsy.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759834": [ { "ioc_value": "decembers.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759835": [ { "ioc_value": "mo5hvp.dyiw7.boatersbowness.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759836": [ { "ioc_value": "guitrar.drumbalsruffows.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759837": [ { "ioc_value": "turbopulsex.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759838": [ { "ioc_value": "wonderpulse.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759839": [ { "ioc_value": "vmi2571064.contaboserver.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759840": [ { "ioc_value": "nordinatently.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759841": [ { "ioc_value": "at-assurances.be", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759842": [ { "ioc_value": "goldgrabberhighbankers.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759843": [ { "ioc_value": "controllege.gold", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759844": [ { "ioc_value": "unreleasted.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759845": [ { "ioc_value": "ziphelpless.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759846": [ { "ioc_value": "kuhic.nutriwellcoaching.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759847": [ { "ioc_value": "webcerthost.digital", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:03", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759798": [ { "ioc_value": "turbofusionnowx.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759799": [ { "ioc_value": "atmosphored.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759800": [ { "ioc_value": "collectroduce.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759801": [ { "ioc_value": "essentends.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759802": [ { "ioc_value": "urbanstreamnow.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759803": [ { "ioc_value": "tunationina.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759804": [ { "ioc_value": "thentions.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759805": [ { "ioc_value": "symmetreas.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759806": [ { "ioc_value": "spectivized.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759807": [ { "ioc_value": "payment.spfwebgov.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759808": [ { "ioc_value": "tarbuthnonymous.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759809": [ { "ioc_value": "arbizosacches.bid", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759810": [ { "ioc_value": "mattuce.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759811": [ { "ioc_value": "urbanvibex.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759812": [ { "ioc_value": "supportantiqui.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759813": [ { "ioc_value": "qlhatbmjgx.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759814": [ { "ioc_value": "lcqulvnudu.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759815": [ { "ioc_value": "rsnycdwm.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759816": [ { "ioc_value": "sarkovic.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759817": [ { "ioc_value": "moshup.dyiw7.boatersbowness.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:02", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759779": [ { "ioc_value": "businging.support", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759780": [ { "ioc_value": "stellarechonow.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759781": [ { "ioc_value": "urbanglowx.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759782": [ { "ioc_value": "pureechonowx.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759783": [ { "ioc_value": "mysticstreamnowx.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759784": [ { "ioc_value": "nassified.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759785": [ { "ioc_value": "quantummingle.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759786": [ { "ioc_value": "flashvibenowhub.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759787": [ { "ioc_value": "eclinately.com.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759788": [ { "ioc_value": "swiftechohub.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759789": [ { "ioc_value": "urbanzenx.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759790": [ { "ioc_value": "turbostream.dev", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759791": [ { "ioc_value": "quantumvibex.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759792": [ { "ioc_value": "pyramidshipment.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759793": [ { "ioc_value": "animitical.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759794": [ { "ioc_value": "nimizing.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759795": [ { "ioc_value": "moraining.support", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759796": [ { "ioc_value": "scorintern.jp.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759797": [ { "ioc_value": "yieldestroke.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:01", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759750": [ { "ioc_value": "dreamblazex.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759751": [ { "ioc_value": "hypercore.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759752": [ { "ioc_value": "purevibenow.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759753": [ { "ioc_value": "notective.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759754": [ { "ioc_value": "debritary.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759755": [ { "ioc_value": "crystalpulsevibe.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759756": [ { "ioc_value": "comediasport.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759757": [ { "ioc_value": "allowheatres.bid", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759758": [ { "ioc_value": "againsteam.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759759": [ { "ioc_value": "condor2835.startdedicated.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759760": [ { "ioc_value": "authorsenic.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759761": [ { "ioc_value": "responsonic.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759762": [ { "ioc_value": "3gpjizz.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759763": [ { "ioc_value": "governorshrug.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759764": [ { "ioc_value": "purepulsenow.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759765": [ { "ioc_value": "dreamblazenowx.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759766": [ { "ioc_value": "purepulsenowx.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759767": [ { "ioc_value": "zenblazenow.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759768": [ { "ioc_value": "rapidvibenow.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759769": [ { "ioc_value": "chillzing.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759770": [ { "ioc_value": "boldglidex.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759771": [ { "ioc_value": "ppldn.purporate.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759772": [ { "ioc_value": "edistantive.live", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759773": [ { "ioc_value": "arrondi.monticle-facture.zayat.ineffections.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759774": [ { "ioc_value": "vibefusionx.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759775": [ { "ioc_value": "zenstrivenow.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759776": [ { "ioc_value": "ulricheld.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759777": [ { "ioc_value": "quantumglowx.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759778": [ { "ioc_value": "rapidzenith.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:49:00", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759719": [ { "ioc_value": "allisoned.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759720": [ { "ioc_value": "changham.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759721": [ { "ioc_value": "lushtidex.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759722": [ { "ioc_value": "aaronchodka.support", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759723": [ { "ioc_value": "boldmingle.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759724": [ { "ioc_value": "centratisfact.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759725": [ { "ioc_value": "zenfusionhub.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759726": [ { "ioc_value": "squariate.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759727": [ { "ioc_value": "zentidenowx.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759728": [ { "ioc_value": "fluidshine.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759729": [ { "ioc_value": "potaming.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759730": [ { "ioc_value": "urbanquakenow.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759731": [ { "ioc_value": "glowrevolt.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759732": [ { "ioc_value": "cambojas.com.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759733": [ { "ioc_value": "manhattempted.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759734": [ { "ioc_value": "sucanday.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759735": [ { "ioc_value": "eachief.jp.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759736": [ { "ioc_value": "aggressity.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759737": [ { "ioc_value": "lushfusion.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759738": [ { "ioc_value": "rapidglownow.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759739": [ { "ioc_value": "mysticvibeco.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759740": [ { "ioc_value": "epiczenithx.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759741": [ { "ioc_value": "pulseloom.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759742": [ { "ioc_value": "federican.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759743": [ { "ioc_value": "quantumhaven.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759744": [ { "ioc_value": "electricnest.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759745": [ { "ioc_value": "stellarflickx.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759746": [ { "ioc_value": "aleclewlast.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759747": [ { "ioc_value": "currectly.bid", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759748": [ { "ioc_value": "flashpulsenow.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759749": [ { "ioc_value": "eithelief.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:59", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759690": [ { "ioc_value": "correspecified.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759691": [ { "ioc_value": "braveverve.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759692": [ { "ioc_value": "purenestx.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759693": [ { "ioc_value": "createrize.live", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759694": [ { "ioc_value": "quantumblazex.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759695": [ { "ioc_value": "consumpting.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759696": [ { "ioc_value": "quantumblazenowx.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759697": [ { "ioc_value": "postponently.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759698": [ { "ioc_value": "trueglowx.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759699": [ { "ioc_value": "data.distributionrot.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759700": [ { "ioc_value": "kilometerming.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759701": [ { "ioc_value": "quantumechox.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759702": [ { "ioc_value": "denometricit.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759703": [ { "ioc_value": "mccroneously.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759704": [ { "ioc_value": "wildpulsenow.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759705": [ { "ioc_value": "turbostreamnowx.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759706": [ { "ioc_value": "boldtide.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759707": [ { "ioc_value": "purringfence.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759708": [ { "ioc_value": "consibilitical.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759709": [ { "ioc_value": "rapidglownowx.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759710": [ { "ioc_value": "urbanechox.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759711": [ { "ioc_value": "fllko.xwinistered.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759712": [ { "ioc_value": "electricstrive.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759713": [ { "ioc_value": "downturies.support", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759714": [ { "ioc_value": "rapetus.online", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759715": [ { "ioc_value": "modificial.support", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759716": [ { "ioc_value": "unsuccessor.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759717": [ { "ioc_value": "boldvibex.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759718": [ { "ioc_value": "bisogynists.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:58", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759661": [ { "ioc_value": "upton.dennesbury.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759662": [ { "ioc_value": "physiquests.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759663": [ { "ioc_value": "frequivaldic.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759664": [ { "ioc_value": "playstoreapp.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759665": [ { "ioc_value": "charanciscolone.stream", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759666": [ { "ioc_value": "wirelation.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759667": [ { "ioc_value": "mrarsh.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759668": [ { "ioc_value": "dylandmarkets.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759669": [ { "ioc_value": "faminary.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759670": [ { "ioc_value": "supportablish.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759671": [ { "ioc_value": "exportantic.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759672": [ { "ioc_value": "contactus.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759673": [ { "ioc_value": "postallegan.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759674": [ { "ioc_value": "pampaign.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759675": [ { "ioc_value": "contactus.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759676": [ { "ioc_value": "controllidea.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759677": [ { "ioc_value": "amerized.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759678": [ { "ioc_value": "debusscar.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759679": [ { "ioc_value": "greatongate.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759680": [ { "ioc_value": "mail.45-137-20-96.cprapid.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759681": [ { "ioc_value": "squartefano.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759682": [ { "ioc_value": "backgroup.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759683": [ { "ioc_value": "pachit.7tcsc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759684": [ { "ioc_value": "mjsshootingsupplies.com.au", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759685": [ { "ioc_value": "germansion.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759686": [ { "ioc_value": "eltmengotia.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759687": [ { "ioc_value": "rapidstreamnowx.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759688": [ { "ioc_value": "fusionstrive.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759689": [ { "ioc_value": "massassical.com.co", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:57", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759632": [ { "ioc_value": "evoltages.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759633": [ { "ioc_value": "castructed.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759634": [ { "ioc_value": "alive.provichy.directory", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759635": [ { "ioc_value": "condor2826.startdedicated.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759636": [ { "ioc_value": "tsfepztnzl.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759637": [ { "ioc_value": "zhxiynroje.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759638": [ { "ioc_value": "venhtmpgak.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759639": [ { "ioc_value": "snkdmlqsoy.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759640": [ { "ioc_value": "czde.seconduce.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759641": [ { "ioc_value": "cemeterms.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759642": [ { "ioc_value": "aparse.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759643": [ { "ioc_value": "veterned.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759644": [ { "ioc_value": "haterms.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759645": [ { "ioc_value": "evoltairca.pro", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759646": [ { "ioc_value": "precalled.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759647": [ { "ioc_value": "blomsterpigerne.dk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759648": [ { "ioc_value": "billiaments.us.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759649": [ { "ioc_value": "petervig.dk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759650": [ { "ioc_value": "flipmarts.shop", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759651": [ { "ioc_value": "wadsholt.dk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759652": [ { "ioc_value": "btrcv.pkcrmeruj.kugbygok.store.ass0091.congregority.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759653": [ { "ioc_value": "paintact.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759654": [ { "ioc_value": "stellarlynx.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759655": [ { "ioc_value": "dixomwyudd.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759656": [ { "ioc_value": "transcombina.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759657": [ { "ioc_value": "marcotting.me", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759658": [ { "ioc_value": "youness1.haji80.pserver.space", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759659": [ { "ioc_value": "mcdermott.ichernhang.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759660": [ { "ioc_value": "dennesbury.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:56", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759605": [ { "ioc_value": "relevensively.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759606": [ { "ioc_value": "capitalinguage.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759607": [ { "ioc_value": "info.seconduce.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759608": [ { "ioc_value": "numericalled.bid", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759609": [ { "ioc_value": "falcoung.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759610": [ { "ioc_value": "aressimbee.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759611": [ { "ioc_value": "inclusional.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759612": [ { "ioc_value": "automaticalled.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759613": [ { "ioc_value": "fouristinent.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759614": [ { "ioc_value": "qqhjgygtwc.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759615": [ { "ioc_value": "francerto.de.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759616": [ { "ioc_value": "smtpdelivery.brasiltecnoeletronicos.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759617": [ { "ioc_value": "glicte.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759618": [ { "ioc_value": "forremed.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759619": [ { "ioc_value": "inhabitan.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759620": [ { "ioc_value": "accenturied.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759621": [ { "ioc_value": "disonall.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759622": [ { "ioc_value": "sellowed.stream", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759623": [ { "ioc_value": "condor2848.startdedicated.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759624": [ { "ioc_value": "alonesses.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759625": [ { "ioc_value": "shaanxiety.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759626": [ { "ioc_value": "insidespiter.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759627": [ { "ioc_value": "digestern.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759628": [ { "ioc_value": "corganish.online", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759629": [ { "ioc_value": "becausinese.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759630": [ { "ioc_value": "folderge.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759631": [ { "ioc_value": "fermembers.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:55", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759577": [ { "ioc_value": "fuchstone.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759578": [ { "ioc_value": "signateers.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759579": [ { "ioc_value": "boldtidenow.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759580": [ { "ioc_value": "agilliamethod.in.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759581": [ { "ioc_value": "laicos.agilliamethod.in.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759582": [ { "ioc_value": "boundwateria.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759583": [ { "ioc_value": "lghjxbsfek.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759584": [ { "ioc_value": "wcuckpfoyy.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759585": [ { "ioc_value": "anglication.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759586": [ { "ioc_value": "etctkplaig.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759587": [ { "ioc_value": "joinelegant.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759588": [ { "ioc_value": "allucidal.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759589": [ { "ioc_value": "transporozone.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759590": [ { "ioc_value": "famountriggest.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759591": [ { "ioc_value": "swamisans.online", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759592": [ { "ioc_value": "dowerldentin.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759593": [ { "ioc_value": "imagesicle.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759594": [ { "ioc_value": "adivionts.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759595": [ { "ioc_value": "vmi2608192.contaboserver.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759596": [ { "ioc_value": "behinductive.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759597": [ { "ioc_value": "claimantic.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759598": [ { "ioc_value": "buthertaily.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759599": [ { "ioc_value": "hideytik.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759600": [ { "ioc_value": "dmitten.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759601": [ { "ioc_value": "extremble.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759602": [ { "ioc_value": "reconsfol.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759603": [ { "ioc_value": "pvfsmqzals.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759604": [ { "ioc_value": "communisted.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:54", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759549": [ { "ioc_value": "qx56fjn88.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759550": [ { "ioc_value": "transliters.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759551": [ { "ioc_value": "begualt.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759552": [ { "ioc_value": "frontomb.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759553": [ { "ioc_value": "pervica.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759554": [ { "ioc_value": "gimenooresman.ddns.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759555": [ { "ioc_value": "stablessenior.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759556": [ { "ioc_value": "resumerous.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759557": [ { "ioc_value": "railroadcast.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759558": [ { "ioc_value": "descriptide.club", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759559": [ { "ioc_value": "pallbears.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759560": [ { "ioc_value": "officiencess.club", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759561": [ { "ioc_value": "fantrieslibert.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759562": [ { "ioc_value": "extendous.pro", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759563": [ { "ioc_value": "godriga.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759564": [ { "ioc_value": "hoy02d0hb.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759565": [ { "ioc_value": "malacedonia.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759566": [ { "ioc_value": "permingwa.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759567": [ { "ioc_value": "suristind.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759568": [ { "ioc_value": "dominents.pro", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759569": [ { "ioc_value": "microbustain.com.se", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759570": [ { "ioc_value": "majounds.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759571": [ { "ioc_value": "hadiuse.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759572": [ { "ioc_value": "termenian.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759573": [ { "ioc_value": "muuter.7tcsc.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759574": [ { "ioc_value": "dimpyvgnrs.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759575": [ { "ioc_value": "zerosoftward.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759576": [ { "ioc_value": "dov2fm.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:53", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759522": [ { "ioc_value": "ebelagbooks.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759523": [ { "ioc_value": "pfkieixmus.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759524": [ { "ioc_value": "subtletons.us.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759525": [ { "ioc_value": "stokes.outritics.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": "2026-03-06 05:48:57", "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759526": [ { "ioc_value": "elfoce.timbedded.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759527": [ { "ioc_value": "separtist.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759528": [ { "ioc_value": "bombined.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759529": [ { "ioc_value": "spowelits.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759530": [ { "ioc_value": "prumhfahkc.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759531": [ { "ioc_value": "politaring.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759532": [ { "ioc_value": "eauozbfuyy.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759533": [ { "ioc_value": "xynaeqtqur.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759534": [ { "ioc_value": "gwagonnnn.silverines.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": "2026-03-06 05:49:00", "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759535": [ { "ioc_value": "westindcitycenter.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759536": [ { "ioc_value": "outralism.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759537": [ { "ioc_value": "aptivalks.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759538": [ { "ioc_value": "ledner.monrovince.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759539": [ { "ioc_value": "claiminated.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759540": [ { "ioc_value": "formulationarch.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759541": [ { "ioc_value": "seconduce.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759542": [ { "ioc_value": "elephor.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759543": [ { "ioc_value": "wuyzksyamv.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759544": [ { "ioc_value": "nsptbcvfeh.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759545": [ { "ioc_value": "simultilizie.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759546": [ { "ioc_value": "cummings.reflectronic.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759547": [ { "ioc_value": "calize.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759548": [ { "ioc_value": "napollup.gb.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:52", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759495": [ { "ioc_value": "investmentiful.com.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759496": [ { "ioc_value": "thissubdomainshouldonlyresolveifwildcard.hermiston.parates.mex.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759497": [ { "ioc_value": "107-150-49-154.cprapid.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759498": [ { "ioc_value": "638809242571143912.warsaw-shledrc-acat.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759499": [ { "ioc_value": "bunnyvalents.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759500": [ { "ioc_value": "actering.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759501": [ { "ioc_value": "dewittewatermolen.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759502": [ { "ioc_value": "courthelength.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759503": [ { "ioc_value": "nichthi.ch", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759504": [ { "ioc_value": "stionfireigh.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759505": [ { "ioc_value": "jiyndemabr.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759506": [ { "ioc_value": "gvuoekiety.marriedricht.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759507": [ { "ioc_value": "willionally.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759508": [ { "ioc_value": "youthwested.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759509": [ { "ioc_value": "attances.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759510": [ { "ioc_value": "thatury.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759511": [ { "ioc_value": "daybright.mex.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759512": [ { "ioc_value": "paideakes.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759513": [ { "ioc_value": "authorov.pro", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759514": [ { "ioc_value": "fundercos.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759515": [ { "ioc_value": "krumarily.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759516": [ { "ioc_value": "tedurgy.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759517": [ { "ioc_value": "stellarluxecore.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759518": [ { "ioc_value": "supportinian.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759519": [ { "ioc_value": "approvidence.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759520": [ { "ioc_value": "ultiplying.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759521": [ { "ioc_value": "yundt.capilled.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:51", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759467": [ { "ioc_value": "prismcloudemberedge.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759468": [ { "ioc_value": "valenquistry.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759469": [ { "ioc_value": "scandidatest.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759470": [ { "ioc_value": "subjectionship.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759471": [ { "ioc_value": "revolumbustic.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759472": [ { "ioc_value": "638820236370106360.tabriz-shledrc-accf.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759473": [ { "ioc_value": "zorvalantian.nl", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759474": [ { "ioc_value": "vmi2644314.contaboserver.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759475": [ { "ioc_value": "vexophalynic.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759476": [ { "ioc_value": "zontryvalics.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759477": [ { "ioc_value": "placedon.uk.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759478": [ { "ioc_value": "builm.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759479": [ { "ioc_value": "westernitude.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759480": [ { "ioc_value": "distakes.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759481": [ { "ioc_value": "rematogram.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759482": [ { "ioc_value": "vmi2631549.contaboserver.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759483": [ { "ioc_value": "fsahgalhpq.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759484": [ { "ioc_value": "slhanalehx.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759485": [ { "ioc_value": "snqtszmbem.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759486": [ { "ioc_value": "controller.dream-folded.pluie.rare.kepockele.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759487": [ { "ioc_value": "9fia93.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759488": [ { "ioc_value": "lzyaswoncx.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759489": [ { "ioc_value": "jrvqbitvuu.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759490": [ { "ioc_value": "pneumonicle.live", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759491": [ { "ioc_value": "eajxfzzkgl.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759492": [ { "ioc_value": "thillocentrace.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759493": [ { "ioc_value": "suervo.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759494": [ { "ioc_value": "gresidever.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:50", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759440": [ { "ioc_value": "postules.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759441": [ { "ioc_value": "holden1104.startdedicated.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759442": [ { "ioc_value": "pleseprearty.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759443": [ { "ioc_value": "trionymorpha.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759444": [ { "ioc_value": "boldfrost.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759445": [ { "ioc_value": "xenovandrite.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759446": [ { "ioc_value": "purezenithzenithquest.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759447": [ { "ioc_value": "sincentribution.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759448": [ { "ioc_value": "yondaphluxio.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759449": [ { "ioc_value": "ukdzjbffdg.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759450": [ { "ioc_value": "wargend.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759451": [ { "ioc_value": "triangelofyx.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759452": [ { "ioc_value": "playgullible.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759453": [ { "ioc_value": "vexiloventry.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759454": [ { "ioc_value": "whombium.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759455": [ { "ioc_value": "lightcascade.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759456": [ { "ioc_value": "sovietnamed.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759457": [ { "ioc_value": "servicensus.us", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759458": [ { "ioc_value": "veltracognito.dev", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759459": [ { "ioc_value": "volcanishing.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759460": [ { "ioc_value": "pariest.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759461": [ { "ioc_value": "taunae.vejigatorias.uk.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759462": [ { "ioc_value": "holden1101.startdedicated.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759463": [ { "ioc_value": "vallenn.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759464": [ { "ioc_value": "metreatments.pro", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759465": [ { "ioc_value": "jhzpaxsgvy.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759466": [ { "ioc_value": "trackmystatus.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:49", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759414": [ { "ioc_value": "pixelnestnovaedge.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759415": [ { "ioc_value": "nervoir.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759416": [ { "ioc_value": "genemely.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759417": [ { "ioc_value": "rapidechox.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759418": [ { "ioc_value": "summeript.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759419": [ { "ioc_value": "ombrazephyrix.dev", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759420": [ { "ioc_value": "saaheleter.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759421": [ { "ioc_value": "penancialister.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759422": [ { "ioc_value": "privativities.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759423": [ { "ioc_value": "hebattitle.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759424": [ { "ioc_value": "smtp.abbott.parates.mex.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759425": [ { "ioc_value": "immangly.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759426": [ { "ioc_value": "qriewlinvy.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759427": [ { "ioc_value": "peterstand.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759428": [ { "ioc_value": "universids.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759429": [ { "ioc_value": "209-126-100-81.hinet-ip.hinet.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759430": [ { "ioc_value": "starloom.info", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759431": [ { "ioc_value": "xeravontique.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759432": [ { "ioc_value": "quantumflarestarzenith.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759433": [ { "ioc_value": "quantumpathzenstorm.me.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759434": [ { "ioc_value": "swisscom.giize.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759435": [ { "ioc_value": "prograper.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759436": [ { "ioc_value": "airporate.eu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759437": [ { "ioc_value": "adverturning.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759438": [ { "ioc_value": "syntroglenix.de", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759439": [ { "ioc_value": "squantially.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:48", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759386": [ { "ioc_value": "taminese.store", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759387": [ { "ioc_value": "zqdutsvaon.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759388": [ { "ioc_value": "yidhzcvewv.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759389": [ { "ioc_value": "wrivistur.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759390": [ { "ioc_value": "spironethica.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759391": [ { "ioc_value": "donolulu.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759392": [ { "ioc_value": "peakflarepulseforge.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759393": [ { "ioc_value": "novashimpath.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759394": [ { "ioc_value": "ww2.yesmovie.bz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759395": [ { "ioc_value": "smtpmail.hermiston.parates.mex.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759396": [ { "ioc_value": "plasmovision.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759397": [ { "ioc_value": "paulicational.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759398": [ { "ioc_value": "relay.abbott.parates.mex.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759399": [ { "ioc_value": "nuarads.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759400": [ { "ioc_value": "smtpauth.hermiston.parates.mex.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759401": [ { "ioc_value": "photroglyzon.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759402": [ { "ioc_value": "zenpulsefusion.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759403": [ { "ioc_value": "save7.bazidownloader.site", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759404": [ { "ioc_value": "grountra.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759405": [ { "ioc_value": "promosomeback.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759406": [ { "ioc_value": "gandalone.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759407": [ { "ioc_value": "tampion.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759408": [ { "ioc_value": "teached.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759409": [ { "ioc_value": "pinchedelive.co.in", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759410": [ { "ioc_value": "durinct.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759411": [ { "ioc_value": "quantumminglex.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759412": [ { "ioc_value": "importities.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759413": [ { "ioc_value": "soutcher.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:47", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759381": [ { "ioc_value": "ranciscoversion.biz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:46", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759382": [ { "ioc_value": "rkjptbfgpc.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:46", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759383": [ { "ioc_value": "yhgtn16y.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:46", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759384": [ { "ioc_value": "ptpafwqysn.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:46", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759385": [ { "ioc_value": "goosever.org.uk", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown", "malware_alias": null, "malware_printable": "Unknown malware", "first_seen_utc": "2026-03-06 05:48:46", "last_seen_utc": null, "confidence_level": 75, "is_compromised": true, "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Tycoon%202FA%20Phishing", "tags": "phishing,tycoon", "anonymous": "0", "reporter": "TheRavenFile" } ], "1759380": [ { "ioc_value": "aqua-sync.aquastream.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 05:22:42", "last_seen_utc": "2026-03-06 05:23:53", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759378": [ { "ioc_value": "stre-v9.aquastream.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 05:04:18", "last_seen_utc": "2026-03-06 05:04:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759376": [ { "ioc_value": "hydro-run.aquastream.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 04:36:02", "last_seen_utc": "2026-03-06 04:37:30", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759373": [ { "ioc_value": "vant05.trailvantage.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 04:13:30", "last_seen_utc": "2026-03-06 04:18:34", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759351": [ { "ioc_value": "trail-net.trailvantage.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 03:28:16", "last_seen_utc": "2026-03-06 03:33:15", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759350": [ { "ioc_value": "lamon.ddns.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-06 03:01:52", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260306-bt5e7sb13j", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759343": [ { "ioc_value": "vant-v8.trailvantage.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 01:28:58", "last_seen_utc": "2026-03-06 01:30:17", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759342": [ { "ioc_value": "logi-base.trailvantage.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 01:16:41", "last_seen_utc": "2026-03-06 01:17:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759341": [ { "ioc_value": "sent03.skysentry.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 01:10:05", "last_seen_utc": "2026-03-06 01:11:28", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759340": [ { "ioc_value": "sky-gate.skysentry.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 00:51:16", "last_seen_utc": "2026-03-06 00:52:08", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759339": [ { "ioc_value": "sent-v7.skysentry.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 00:37:06", "last_seen_utc": "2026-03-06 00:38:39", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759338": [ { "ioc_value": "aero-hub.skysentry.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 00:25:22", "last_seen_utc": "2026-03-06 00:26:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759337": [ { "ioc_value": "link08.organiclink.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 00:16:07", "last_seen_utc": "2026-03-06 00:17:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759336": [ { "ioc_value": "orga-sync.organiclink.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-06 00:02:33", "last_seen_utc": "2026-03-06 00:03:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759328": [ { "ioc_value": "link-v6.organiclink.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 23:53:20", "last_seen_utc": "2026-03-05 23:54:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759326": [ { "ioc_value": "bio-trace.organiclink.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 23:49:13", "last_seen_utc": "2026-03-05 23:50:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759325": [ { "ioc_value": "pulse02.metropulse.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 23:39:53", "last_seen_utc": "2026-03-05 23:40:54", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759324": [ { "ioc_value": "metro-net.metropulse.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 23:30:29", "last_seen_utc": "2026-03-05 23:31:12", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759323": [ { "ioc_value": "pulse-v5.metropulse.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 23:24:06", "last_seen_utc": "2026-03-05 23:24:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759322": [ { "ioc_value": "urban-sys.metropulse.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 23:13:31", "last_seen_utc": "2026-03-05 23:14:16", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759321": [ { "ioc_value": "nest09.cryptonest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 23:02:14", "last_seen_utc": "2026-03-05 23:03:38", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759320": [ { "ioc_value": "getting-acquisitions.gl.at.ply.gg", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-05 23:02:10", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-2h95esh13l", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759319": [ { "ioc_value": "thestreamhub.xyz", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.quasar_rat", "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil", "malware_printable": "Quasar RAT", "first_seen_utc": "2026-03-05 23:00:51", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-1y6lhahv4l", "tags": "quasar", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759316": [ { "ioc_value": "bigbang.co.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:19", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yb2ypafy7q", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759317": [ { "ioc_value": "malware.bigbang.co.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:19", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yb2ypafy7q", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759315": [ { "ioc_value": "197laststop.it.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:18", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-ydek6saz5z", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759302": [ { "ioc_value": "malware.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759303": [ { "ioc_value": "phishing.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759304": [ { "ioc_value": "phishing.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759305": [ { "ioc_value": "phishing.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759306": [ { "ioc_value": "quantri.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759307": [ { "ioc_value": "quantri.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759308": [ { "ioc_value": "quantri.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759309": [ { "ioc_value": "v2.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759310": [ { "ioc_value": "v2.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759311": [ { "ioc_value": "v2.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759312": [ { "ioc_value": "v3.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759313": [ { "ioc_value": "v3.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759314": [ { "ioc_value": "v3.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:13", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759288": [ { "ioc_value": "atex.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": "2026-03-05 23:00:13", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759289": [ { "ioc_value": "atex.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": "2026-03-05 23:00:13", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759290": [ { "ioc_value": "atex.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": "2026-03-05 23:00:13", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759291": [ { "ioc_value": "backup.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759292": [ { "ioc_value": "backup.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759293": [ { "ioc_value": "backup.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759294": [ { "ioc_value": "data.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759295": [ { "ioc_value": "data.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759296": [ { "ioc_value": "data.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759297": [ { "ioc_value": "ddos.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759298": [ { "ioc_value": "ddos.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759299": [ { "ioc_value": "ddos.xoilaczzlz.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759300": [ { "ioc_value": "malware.coversproject.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759301": [ { "ioc_value": "malware.xoilac365ze.tv", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 23:00:12", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-yjmtqsa14y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759270": [ { "ioc_value": "nest-v4.cryptonest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 22:43:47", "last_seen_utc": "2026-03-05 22:45:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759269": [ { "ioc_value": "data-vault.cryptonest.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 22:25:11", "last_seen_utc": "2026-03-05 22:25:42", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759268": [ { "ioc_value": "brid01.fluxbridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 22:19:26", "last_seen_utc": "2026-03-05 22:20:34", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759267": [ { "ioc_value": "flux-net.fluxbridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 22:07:48", "last_seen_utc": "2026-03-05 22:08:11", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759266": [ { "ioc_value": "brid-v3.fluxbridge.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 22:02:01", "last_seen_utc": "2026-03-05 22:02:50", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759255": [ { "ioc_value": "matr07.fieldmatrix.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 21:48:53", "last_seen_utc": "2026-03-05 21:49:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759254": [ { "ioc_value": "field-sync.fieldmatrix.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 21:38:36", "last_seen_utc": "2026-03-05 21:39:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759253": [ { "ioc_value": "matr-v2.fieldmatrix.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 21:33:07", "last_seen_utc": "2026-03-05 21:34:00", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759252": [ { "ioc_value": "agro-unit.fieldmatrix.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 21:26:42", "last_seen_utc": "2026-03-05 21:27:30", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759251": [ { "ioc_value": "view04.tectoniview.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 21:09:54", "last_seen_utc": "2026-03-05 21:10:33", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759250": [ { "ioc_value": "tecto-sync.tectoniview.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 21:02:54", "last_seen_utc": "2026-03-05 21:03:23", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759249": [ { "ioc_value": "view-v1.tectoniview.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 20:56:37", "last_seen_utc": "2026-03-05 20:57:41", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759248": [ { "ioc_value": "cyber-node.tectoniview.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 20:44:02", "last_seen_utc": "2026-03-05 20:44:13", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759237": [ { "ioc_value": "lose06.amperelose.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 20:35:21", "last_seen_utc": "2026-03-05 20:41:17", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759236": [ { "ioc_value": "amp-v1.amperelose.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 20:29:06", "last_seen_utc": "2026-03-05 20:29:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759235": [ { "ioc_value": "volt-sync.amperelose.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 20:23:29", "last_seen_utc": "2026-03-05 20:23:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759231": [ { "ioc_value": "amp-lose.amperelose.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 20:16:25", "last_seen_utc": "2026-03-05 20:17:37", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759029": [ { "ioc_value": "kero-net.avonkerosene.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:54:21", "last_seen_utc": "2026-03-05 20:11:52", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759028": [ { "ioc_value": "avon-core.avonkerosene.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:46:20", "last_seen_utc": "2026-03-05 19:47:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759027": [ { "ioc_value": "maku07.makuhaportfol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:41:25", "last_seen_utc": "2026-03-05 19:42:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759026": [ { "ioc_value": "port-v8.makuhaportfol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:33:58", "last_seen_utc": "2026-03-05 19:35:17", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759025": [ { "ioc_value": "maku-base.makuhaportfol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:27:18", "last_seen_utc": "2026-03-05 19:28:12", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759024": [ { "ioc_value": "port-fol.makuhaportfol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:21:24", "last_seen_utc": "2026-03-05 19:22:21", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759023": [ { "ioc_value": "synch03.corvetsynchron.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:14:33", "last_seen_utc": "2026-03-05 19:15:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758964": [ { "ioc_value": "net-hub.commundesign.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:57", "last_seen_utc": "2026-03-05 15:55:14", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1758976": [ { "ioc_value": "com04.commundesign.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:55", "last_seen_utc": "2026-03-05 16:06:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1758978": [ { "ioc_value": "soup-node.coachsoup.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:54", "last_seen_utc": "2026-03-05 16:42:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1758981": [ { "ioc_value": "soup09.coachsoup.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:53", "last_seen_utc": "2026-03-05 16:47:04", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1758982": [ { "ioc_value": "const-gate.constelluntrav.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:51", "last_seen_utc": "2026-03-05 16:49:32", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1758992": [ { "ioc_value": "skird-net.breakskird.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:50", "last_seen_utc": "2026-03-05 17:24:39", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1758994": [ { "ioc_value": "skird05.breakskird.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:49", "last_seen_utc": "2026-03-05 18:28:09", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759005": [ { "ioc_value": "hryv08.hryvmicrobiol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:49", "last_seen_utc": "2026-03-05 18:34:02", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759003": [ { "ioc_value": "hryv-node.hryvmicrobiol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:48", "last_seen_utc": "2026-03-05 18:31:49", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759006": [ { "ioc_value": "login.craftyinkymagic.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "js.fakeupdates", "malware_alias": "FakeUpdate,GhoLoader,SocGholish", "malware_printable": "FAKEUPDATES", "first_seen_utc": "2026-03-05 19:06:47", "last_seen_utc": "2026-03-06 06:45:38", "confidence_level": 100, "is_compromised": true, "reference": "https://infosec.exchange/@monitorsg/116177933800137026", "tags": "SocGholish", "anonymous": "0", "reporter": "monitorsg" } ], "1759007": [ { "ioc_value": "big-prog.bigamyprogramm.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:47", "last_seen_utc": "2026-03-05 18:35:53", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759008": [ { "ioc_value": "sys-node.bigamyprogramm.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:45", "last_seen_utc": "2026-03-05 18:36:53", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759009": [ { "ioc_value": "prog-v6.bigamyprogramm.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 19:06:45", "last_seen_utc": "2026-03-05 18:38:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1759020": [ { "ioc_value": "Dldo3-53471.portmap.host", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.xworm", "malware_alias": null, "malware_printable": "XWorm", "first_seen_utc": "2026-03-05 19:01:51", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-xha8waft5p", "tags": "XWorm", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759019": [ { "ioc_value": "motchillio.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 19:00:03", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-xep8mafs7l", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1759017": [ { "ioc_value": "corvet-v7.corvetsynchron.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 18:58:16", "last_seen_utc": "2026-03-05 18:58:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1759016": [ { "ioc_value": "dinosaursjam.cfd", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_loader", "malware_alias": null, "malware_printable": "Unknown Loader", "first_seen_utc": "2026-03-05 18:57:29", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "OffLoader", "anonymous": "0", "reporter": "abuse_ch" } ], "1759015": [ { "ioc_value": "achievershelf.space", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_loader", "malware_alias": null, "malware_printable": "Unknown Loader", "first_seen_utc": "2026-03-05 18:54:50", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "OffLoader", "anonymous": "0", "reporter": "abuse_ch" } ], "1759013": [ { "ioc_value": "synch-node.corvetsynchron.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 18:50:12", "last_seen_utc": "2026-03-05 18:50:32", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759011": [ { "ioc_value": "corvet-sync.corvetsynchron.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 18:45:06", "last_seen_utc": "2026-03-05 18:49:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759010": [ { "ioc_value": "big02.bigamyprogramm.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 18:40:12", "last_seen_utc": "2026-03-05 18:47:48", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759004": [ { "ioc_value": "micro-v5.hryvmicrobiol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 18:08:11", "last_seen_utc": "2026-03-05 18:33:02", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1759002": [ { "ioc_value": "saj.gr.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 18:01:04", "last_seen_utc": "2026-03-05 19:00:14", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-sgmhases4y", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1759001": [ { "ioc_value": "acsmoney.in.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 18:01:02", "last_seen_utc": "2026-03-05 19:00:12", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-smwcdset7v", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1759000": [ { "ioc_value": "ufb.uk.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 18:00:59", "last_seen_utc": "2026-03-05 19:00:11", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-ten4saby5m", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1758999": [ { "ioc_value": "55gamei.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 18:00:57", "last_seen_utc": "2026-03-05 19:00:10", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-thlg3abz5n", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1758998": [ { "ioc_value": "broadres7.duckdns.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 18:00:56", "last_seen_utc": "2026-03-05 19:00:09", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-tgblgafs7z", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1758997": [ { "ioc_value": "diceroller.us.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 18:00:55", "last_seen_utc": "2026-03-05 19:00:05", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-wef5aahv5t", "tags": "asyncrat,C2,domain,rat,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1758996": [ { "ioc_value": "officedesk2026.4nmn.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.remcos", "malware_alias": "RemcosRAT,Remvio,Socmer", "malware_printable": "Remcos", "first_seen_utc": "2026-03-05 18:00:32", "last_seen_utc": "2026-03-05 19:00:22", "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-vdhq2sgv9t", "tags": "C2,domain,rat,remcos,triage", "anonymous": "0", "reporter": "DonPasci" } ], "1758995": [ { "ioc_value": "micro-bio.hryvmicrobiol.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 17:56:17", "last_seen_utc": "2026-03-05 18:30:09", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1758993": [ { "ioc_value": "break-v4.breakskird.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 17:35:50", "last_seen_utc": "2026-03-05 18:25:06", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1758990": [ { "ioc_value": "dog.myserver.com.bd", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-05 17:14:56", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Vidar", "anonymous": "0", "reporter": "crep1x" } ], "1758991": [ { "ioc_value": "dog.cricket-physio.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.vidar", "malware_alias": null, "malware_printable": "Vidar", "first_seen_utc": "2026-03-05 17:14:56", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "", "tags": "Vidar", "anonymous": "0", "reporter": "crep1x" } ], "1758987": [ { "ioc_value": "break-unit.breakskird.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 17:13:21", "last_seen_utc": "2026-03-05 17:14:13", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758985": [ { "ioc_value": "trav01.constelluntrav.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 17:02:00", "last_seen_utc": "2026-03-05 17:02:37", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758984": [ { "ioc_value": "const-v3.constelluntrav.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 16:56:49", "last_seen_utc": "2026-03-05 16:57:52", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758983": [ { "ioc_value": "trav-base.constelluntrav.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 16:51:17", "last_seen_utc": "2026-03-05 16:51:47", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758980": [ { "ioc_value": "coach-v2.coachsoup.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 16:26:31", "last_seen_utc": "2026-03-05 16:45:30", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1758977": [ { "ioc_value": "coach-sync.coachsoup.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 16:10:13", "last_seen_utc": "2026-03-05 16:10:55", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758970": [ { "ioc_value": "caregiveme.org", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.havoc", "malware_alias": "Havokiz", "malware_printable": "Havoc", "first_seen_utc": "2026-03-05 16:01:14", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://search.censys.io/hosts/2606:4700:3031:0:0:0:ac43:8850+caregiveme.org", "tags": "AS13335,C2,censys,CLOUDFLARENET,Havoc", "anonymous": "0", "reporter": "DonPasci" } ], "1758965": [ { "ioc_value": "design-v1.commundesign.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:58:37", "last_seen_utc": "2026-03-05 16:03:26", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758961": [ { "ioc_value": "update.mythic.cymru", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "unknown_stealer", "malware_alias": null, "malware_printable": "Unknown Stealer", "first_seen_utc": "2026-03-05 15:49:27", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://bazaar.abuse.ch/sample/028bc6de3033f51fe9602e5e3036abdef26e49b581a332f3a67ee5dd981b7f30/", "tags": "c2,MythStealer", "anonymous": "0", "reporter": "burger" } ], "1758962": [ { "ioc_value": "com-design.commundesign.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:46:50", "last_seen_utc": "2026-03-05 15:47:38", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758959": [ { "ioc_value": "mimi-knotline.mimisttie.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:40:33", "last_seen_utc": "2026-03-05 15:40:54", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1758958": [ { "ioc_value": "tinythread.mimisttie.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:33:18", "last_seen_utc": "2026-03-05 15:34:19", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758955": [ { "ioc_value": "zk8q4.mimisttie.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:27:55", "last_seen_utc": "2026-03-05 15:28:22", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758953": [ { "ioc_value": "geo-p1levector.geodesistpile.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:23:23", "last_seen_utc": "2026-03-05 15:24:22", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1758951": [ { "ioc_value": "surveyrock.geodesistpile.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:15:43", "last_seen_utc": "2026-03-05 15:16:33", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758949": [ { "ioc_value": "q7wz3.geodesistpile.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:10:39", "last_seen_utc": "2026-03-05 15:11:54", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758922": [ { "ioc_value": "w9m2kx.alaspasteur.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:06:24", "last_seen_utc": "2026-03-05 12:32:34", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "5March2026,ClearFake,Commandline,Windows", "anonymous": "0", "reporter": "Gi7w0rm" } ], "1758948": [ { "ioc_value": "engrave-vel0ur.engravevelvet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 15:03:57", "last_seen_utc": "2026-03-05 15:05:42", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "1", "reporter": "ttakvam" } ], "1758947": [ { "ioc_value": "miso88s.net", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 15:00:17", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-p63n2ahy6j", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1758946": [ { "ioc_value": "79sodo.media", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 15:00:09", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-qnbm9sas3r", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1758944": [ { "ioc_value": "pftkv.sa.com", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.asyncrat", "malware_alias": null, "malware_printable": "AsyncRAT", "first_seen_utc": "2026-03-05 15:00:05", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": "https://tria.ge/260305-rge8jsdw3y", "tags": "AsyncRAT", "anonymous": "0", "reporter": "dyingbreeds_" } ], "1758943": [ { "ioc_value": "softcarve.engravevelvet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 14:58:46", "last_seen_utc": "2026-03-05 14:59:35", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758942": [ { "ioc_value": "y6xq9.engravevelvet.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 14:54:20", "last_seen_utc": "2026-03-05 14:55:18", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758940": [ { "ioc_value": "aliyun.commandandcontrol.top", "ioc_type": "domain", "threat_type": "botnet_cc", "malware": "win.cobalt_strike", "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon", "malware_printable": "Cobalt Strike", "first_seen_utc": "2026-03-05 14:50:41", "last_seen_utc": "2026-03-07 11:48:21", "confidence_level": 75, "is_compromised": false, "reference": null, "tags": "CobaltStrike,drb-ra", "anonymous": "0", "reporter": "abuse_ch" } ], "1758939": [ { "ioc_value": "esaul-frostline.esaulsnow.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 14:44:41", "last_seen_utc": "2026-03-05 14:45:42", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758938": [ { "ioc_value": "wintertrail.esaulsnow.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 14:30:18", "last_seen_utc": "2026-03-05 14:31:57", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758935": [ { "ioc_value": "v8q2r.esaulsnow.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 14:09:37", "last_seen_utc": "2026-03-05 14:10:32", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758934": [ { "ioc_value": "infant-woodgrid.infantwoodman.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 14:03:41", "last_seen_utc": "2026-03-05 14:05:05", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758933": [ { "ioc_value": "youngtimber.infantwoodman.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 13:55:03", "last_seen_utc": "2026-03-05 13:55:53", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758932": [ { "ioc_value": "xk39q.infantwoodman.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 13:49:29", "last_seen_utc": "2026-03-05 13:50:27", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758931": [ { "ioc_value": "magnes-core.magnesshabas.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 13:41:56", "last_seen_utc": "2026-03-05 13:42:27", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758930": [ { "ioc_value": "4enjfmcl.wallnapalm.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 13:37:40", "last_seen_utc": null, "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "clearfake", "anonymous": "1", "reporter": "ttakvam" } ], "1758929": [ { "ioc_value": "1vqo4dqo.wallnapalm.digital", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 13:36:09", "last_seen_utc": "2026-03-05 13:37:07", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758928": [ { "ioc_value": "sabbathforge.magnesshabas.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 13:31:36", "last_seen_utc": "2026-03-05 13:32:40", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758927": [ { "ioc_value": "nq7w5.magnesshabas.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 13:10:03", "last_seen_utc": "2026-03-05 13:10:59", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758924": [ { "ioc_value": "pasteur0-lab.alaspasteur.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 12:55:28", "last_seen_utc": "2026-03-05 12:55:58", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ], "1758923": [ { "ioc_value": "labculture.alaspasteur.in.net", "ioc_type": "domain", "threat_type": "payload_delivery", "malware": "js.clearfake", "malware_alias": null, "malware_printable": "ClearFake", "first_seen_utc": "2026-03-05 12:49:12", "last_seen_utc": "2026-03-05 12:49:35", "confidence_level": 100, "is_compromised": false, "reference": null, "tags": "ClearFake", "anonymous": "0", "reporter": "threatcat_ch" } ] }