WatchmanHQ

Blocking: Most likely safe to block.

Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC

Validated, and reported as malicious by at least one credible research team. Includes everything on Confident. Run it in alert or log-only mode for a week or two, look at every hit, then switch to block.

4,178 indicators. Numbers in the Sources column link to the original reports.

Indicator (defanged)TypeReported asBlock scopeFirst reportedListSources
sunnypaydayloan[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
suveniricrnagora[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
tamilarnews[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
thistle-productions[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
tycoonsrow[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
us-addnewdevice[.]comDomainMalware downloadDomain and subdomains2026-09-14BlockingSekoia [1]
ustgate[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
verification-js-cdn[.]boatsDomainCommand and controlDomain and subdomains2026-09-14BlockingSekoia [1]
virgensantisima[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
vydlje[.]comDomainMalware downloadDomain and subdomains2026-09-14BlockingSekoia [1]
washingtondc-plumbing[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
wergwee[.]comDomainMalware downloadDomain and subdomains2026-09-14BlockingSekoia [1]
whirlpoploaderfast[.]comDomainCommand and controlDomain and subdomains2026-09-14BlockingSekoia [1]
yuriajonesphotography[.]comDomainMalware downloadThat exact host2026-09-14BlockingSekoia [1]
193[.]41[.]68[.]196IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
2[.]27[.]5[.]165IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
31[.]76[.]31[.]28IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
31[.]77[.]228[.]46IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
65[.]21[.]18[.]60IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
65[.]21[.]208[.]199IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
85[.]239[.]144[.]195IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
85[.]239[.]149[.]13IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
85[.]239[.]149[.]14IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
89[.]34[.]90[.]217IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
91[.]92[.]33[.]156IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
91[.]92[.]43[.]245IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
93[.]152[.]223[.]161IP addressMalware downloadThat address only2026-09-14BlockingSekoia [1]
94[.]26[.]90[.]126IP addressCommand and controlThat address only2026-09-14BlockingSekoia [1]
affordableonline[.]onlineDomainListed by researchersDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
californicationdetroit[.]comDomainListed by researchersDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
connection[.]upgradeonline[.]siteDomainMalware downloadThat exact host2026-09-14BlockingElastic Security Labs [1]
cremeb[.]comDomainListed by researchersDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
donalurdesconfeitos[.]siteDomainListed by researchersDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
find-postman[.]ddesdokww[.]workers[.]devDomainListed by researchersThat exact host2026-09-14BlockingElastic Security Labs [1]
granderevolucao[.]storeDomainListed by researchersDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
graph[.]checkeligibitily[.]workers[.]devDomainListed by researchersThat exact host2026-09-14BlockingElastic Security Labs [1]
luizestrelhashapr[.]onlineDomainListed by researchersDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
orange-sun-195a[.]checkeligibitily[.]workers[.]devDomainListed by researchersThat exact host2026-09-14BlockingElastic Security Labs [1]
seguranca[.]versionnova[.]siteDomainListed by researchersThat exact host2026-09-14BlockingElastic Security Labs [1]
version[.]checkeligibitily[.]workers[.]devDomainListed by researchersThat exact host2026-09-14BlockingElastic Security Labs [1]
volmira[.]siteDomainMalware downloadDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
www[.]creamp1eonlyfans[.]netDomainMalware downloadThat exact host2026-09-14BlockingElastic Security Labs [1]
zaviro[.]onlineDomainMalware downloadDomain and subdomains2026-09-14BlockingElastic Security Labs [1]
104[.]219[.]250[.]37IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
144[.]172[.]112[.]239IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
172[.]234[.]24[.]211IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
172[.]239[.]57[.]117IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
176[.]98[.]187[.]47IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
178[.]92[.]162[.]38IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
185[.]221[.]23[.]133IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
2[.]59[.]170[.]20IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
209[.]99[.]185[.]204IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
216[.]203[.]21[.]40IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
37[.]16[.]74[.]100IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
37[.]16[.]74[.]34IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
45[.]90[.]13[.]210IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
45[.]90[.]13[.]77IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
72[.]251[.]7[.]22IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
72[.]251[.]7[.]23IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
88[.]99[.]149[.]241IP addressListed by researchersThat address only2026-09-14BlockingElastic Security Labs [1]
106eac79396a3ff77b8f375c391260ce422be2ae4d55d3aa75b2635cbdc0fa42SHA-256 hashMalware fileThat file2026-09-14BlockingElastic Security Labs [1]
170dffb37e05f525f735bc9ad84b3908a488f7ce43fcb07739a10e4331e15a2cSHA-256 hashMalware fileThat file2026-09-14BlockingElastic Security Labs [1]
223be3f8648bf6998c4a58b972522e5fda8d9d0a57b4e163811930de66c3f7caSHA-256 hashMalware fileThat file2026-09-14BlockingElastic Security Labs [1]
5ece7fd3766b0b7f8aadefa562313cea6c3c94f9398658dd389910e5be44f552SHA-256 hashMalware fileThat file2026-09-14BlockingElastic Security Labs [1]
ba80216c960977fa45e317f00dcf31e96acab29904a737cbc0bf86e929c3be5fSHA-256 hashMalware fileThat file2026-09-14BlockingElastic Security Labs [1]
c8c38634dd44d7c6162c66174a6ee23ee404265125166e8d757681bdd66a4268SHA-256 hashMalware fileThat file2026-09-14BlockingElastic Security Labs [1]
cb15cbf3f01a92e609e4c2bc26155e667e96c5d04770e83abba66ee07bcecea0SHA-256 hashMalware fileThat file2026-09-14BlockingElastic Security Labs [1]
hxxps://cremeb[.]com/qrcode/api/v1/read?domain=$URLMalware downloadThat exact URL2026-09-14BlockingElastic Security Labs [1]
hxxps://graph[.]checkeligibitily[.]workers[.]dev/x01aab878f25420380b3?op=98d8049e-804f-11f1-b79f-ae3a8bb85d01URLCommand and controlThat exact URL2026-09-14BlockingElastic Security Labs [1]
hxxps://volmira[.]site//api/savecredsURLCommand and controlThat exact URL2026-09-14BlockingElastic Security Labs [1]
hxxps://volmira[.]site/api/ext/versionURLMalware downloadThat exact URL2026-09-14BlockingElastic Security Labs [1]
hxxps://volmira[.]site/api/ext?p=98d8049e-804f-11f1-b79f-ae3a8bb85d01URLMalware downloadThat exact URL2026-09-14BlockingElastic Security Labs [1]
hxxps://zaviro[.]online//api/v1/fingerprintURLCommand and controlThat exact URL2026-09-14BlockingElastic Security Labs [1]
domainlify[.]netDomainListed by researchersDomain and subdomains2026-09-10BlockingMicrosoft Threat Intelligence [1]
service-nowinc[.]comDomainPhishingDomain and subdomains2026-09-10BlockingMicrosoft Threat Intelligence [1]
api[.]telephoneip[.]netDomainListed by researchersThat exact host2026-09-10BlockingZscaler ThreatLabz [1]
api[.]truesmart[.]orgDomainListed by researchersThat exact host2026-09-10BlockingZscaler ThreatLabz [1]
finger[.]linked4x[.]comDomainMalware downloadThat exact host2026-09-10BlockingZscaler ThreatLabz [1]
skipraid[.]comDomainMalware downloadDomain and subdomains2026-09-10BlockingZscaler ThreatLabz [1]
stro7121[.]blob[.]core[.]windows[.]netDomainListed by researchersDomain and subdomains2026-09-10BlockingZscaler ThreatLabz [1]
00c116e498799dc831c8aeb602349296c4b9325535d674fe2b6e2e091878dcecSHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
1439990ff65364a0f608a322aa3a493bc1683cb5fc30cffc44948da29623fffdSHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
2f3d95de716f330fad2330d8787ebdbecb3322453bdc41b2113427f9f92d32d2SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
3a8994928f512fffcb32e117ac45e0ee093541d99a9dba5f69a264f7f3054b19SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
466f9b8dce77b3a026fe4f833aa4949784fb854bea4137e52609e857d439dec8SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
4ecb2d06510dfee1b67f5d9a68c60f6d09ddb5be36cc1766a41d77c5b89d3a56SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
518cd57a303ff7ac2b5c4c8439aa5bcbf9a287d4653de7b76051bde73a94d064SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
607212cfe73c5c84b2dd95b2c0ff37a47f4c8aad08e6d5cbb7c19a62c6b765f9SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
680c3a9f5fdddfcc34856c7a67d21bbdd2b47d70bdfb829ff59cfa0e3bc72d21SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
6d50bb50d4e7d6ac36ca6d2761f382be8e1ddbebf3cdf4733cf989ba291f9013SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
7bb025b426ae6ccbc170fbca58634b8dd77a61447e48dabe9c2e2fb0d339d8b7SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
8774533134d9d1514106c4090a0c5bccab4550facdcfe03f4e02b9764343a990SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
93273ea09bd9df881a594db8cfe1b1bbc54f40f623f44427278ae96fb9b46490SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
971f25f84be88c4fd304d555b5e3da12f6b368e4b9ba0943961ff21ba6fa4d4dSHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
9f84cfcf988530941555d1cb7780a091743cf567396201eff7731f5475768f9aSHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
a13fcbb0870f2fabb7e0a8c757ee3b763bd4a4b0cdf59eeff981d8e307fcf316SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
bdcf8fe230e23692b658b62b6547374e2234f2a497b19d26637018a1839e6dfdSHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
c0ef62a2d5ca11c2eedad3561d5d1d8b6e9847aa6b8613493e5bc233ece3d189SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
cb9930d0cde5bf8e8a7ad08fe2c60b937c7beaf9ab51b03191dfcaba40b7b189SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
eaa52d2d6d4daf29157e8e813247fb2e92797324230ee42c79f7861b2f5c341dSHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
f534a957edec74d69081665309311b791b6d11a3221fffa67744812d73ad98ebSHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
ff142fc192daa2a83bc565e5b38ebbe05561f3a19c7fc2d08e38c97e1986bbc5SHA-256 hashMalware fileThat file2026-09-10BlockingZscaler ThreatLabz [1]
hxxps://stro7121[.]blob[.]core[.]windows[.]net/dpp1/config[.]pyURLMalware downloadThat exact URL2026-09-10BlockingZscaler ThreatLabz [1]
40228af4d9a094f0fef2d7a303a3b6a689c4b4eba2fa9f7da5125b81d2d68ec8SHA-256 hashMalware fileThat file2026-09-10BlockingUnit 42 [1]
company-name[.]integratedsso[.]comDomainListed by researchersThat exact host2026-09-09BlockingMicrosoft Threat Intelligence [1]
company-name[.]secure-passkey[.]comDomainListed by researchersThat exact host2026-09-09BlockingMicrosoft Threat Intelligence [1]
integratedsso[.]comDomainListed by researchersDomain and subdomains2026-09-09BlockingMicrosoft Threat Intelligence [1]
oktasession[.]comDomainListed by researchersDomain and subdomains2026-09-09BlockingMicrosoft Threat Intelligence [1]
oskeyregister[.]comDomainListed by researchersDomain and subdomains2026-09-09BlockingMicrosoft Threat Intelligence [1]
oskeysetup[.]comDomainListed by researchersDomain and subdomains2026-09-09BlockingMicrosoft Threat Intelligence [1]
setupmypasskey[.]comDomainListed by researchersDomain and subdomains2026-09-09BlockingMicrosoft Threat Intelligence [1]
syncmykey[.]comDomainListed by researchersDomain and subdomains2026-09-09BlockingMicrosoft Threat Intelligence [1]
validationsetupac[.]comDomainListed by researchersDomain and subdomains2026-09-09BlockingMicrosoft Threat Intelligence [1]
cloud[.]shinewrist[.]netDomainMalware downloadThat exact host2026-09-09BlockingVolexity [1]
gitprogram[.]comDomainMalware downloadDomain and subdomains2026-09-09BlockingVolexity [1]
photos[.]msbenefit[.]comDomainMalware downloadThat exact host2026-09-09BlockingVolexity [1]
proof[.]gitprogram[.]comDomainMalware downloadThat exact host2026-09-09BlockingVolexity [1]
hxxps://photos[.]msbenefit[.]com/fa/t3URLListed by researchersThat exact URL2026-09-09BlockingVolexity [1]
hxxps://proof[.]gitprogram[.]com/a4/j8URLListed by researchersThat exact URL2026-09-09BlockingVolexity [1]
hxxps://xyz0102[.]gitprogram[.]com/a001URLMalware downloadThat exact URL2026-09-09BlockingVolexity [1]
black-flower-9250[.]v93xdd5g[.]workers[.]devDomainCommand and controlThat exact host2026-09-09BlockingProofpoint Threat Insight [1]
brianwilli[.]comDomainMalware downloadDomain and subdomains2026-09-09BlockingProofpoint Threat Insight [1]
dns[.]elixnovorem[.]comDomainCommand and controlThat exact host2026-09-09BlockingProofpoint Threat Insight [1]
dns[.]getaiexo[.]comDomainCommand and controlThat exact host2026-09-09BlockingProofpoint Threat Insight [1]
fracons[.]comDomainCommand and controlDomain and subdomains2026-09-09BlockingProofpoint Threat Insight [1]
homepage[.]brianwilli[.]comDomainMalware downloadThat exact host2026-09-09BlockingProofpoint Threat Insight [1]
ms[.]checrity[.]comDomainCommand and controlThat exact host2026-09-09BlockingProofpoint Threat Insight [1]
msbenefit[.]comDomainMalware downloadDomain and subdomains2026-09-09BlockingProofpoint Threat Insight, Volexity [1] [2]
royal-surf-a2e2[.]daoahueb[.]workers[.]devDomainMalware downloadThat exact host2026-09-09BlockingProofpoint Threat Insight [1]
hxxps://api-prod[.]secboxes[.]com:443/downloadURLMalware downloadThat exact URL2026-09-09BlockingProofpoint Threat Insight [1]
hxxps://download[.]secboxes[.]com:443/dist[.]zipURLMalware downloadThat exact URL2026-09-09BlockingProofpoint Threat Insight [1]
hxxps://homepage[.]brianwilli[.]com/d/URLMalware downloadThat exact URL2026-09-09BlockingProofpoint Threat Insight [1]
7[.]tcp[.]eu[.]ngrok[.]ioDomainCommand and controlThat exact host2026-09-09BlockingHuntress [1]
0e39e8d7b641bcda4376ebbfeff7b12eMD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
15eca4a3f7350423cf4db0b4c30d1968MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
1ec9eff863dc4418d1498bc3d904899dMD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
2a0834560ed3770fc33d7a42f8229722MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
2a385fe7bed9899d77d05cb8e302d557MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
57b9c56ef97a7ada98257b23577bf5e3MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
60a0f58001ea7be538cd42b651924cc7MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
6b49f24d5d5b49127476bc385565f8b0MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
8da3fe3664d81226b0fb2a50a0537d4fMD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
b9648ec8cc806e7661aabcfc91dc836cMD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
dfdf5e5b78d2ec764c0e5641cf9a0d26MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
ea991bc9334b36a6b958f564ee716776MD5 hashMalware fileThat file2026-09-09BlockingHuntress [1]
relay[.]illuminantgroup[.]netDomainCommand and controlThat exact host2026-09-09BlockingHuntress [1]
scx[.]illuminantgroup[.]netDomainMalware downloadThat exact host2026-09-09BlockingHuntress [1]
selectstructure[.]com[.]auDomainListed by researchersDomain and subdomains2026-09-09BlockingHuntress [1]
41d2097e8ac636a478aa011e12128c03b3b9bb3c8efca43d3c4f214ac8b1f07bSHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
9f5910d69a4fbc56ff1854e7e0df3199fbfddd7fe6b374f7d816fa6ae70ef991SHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
f048400c23add8c75abe189393d33c873c02c74eeaf43d47b950c8d643763b35SHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1] [2]
fc96a04c615847f0fb1391f04d9d1aac7f78ddfb7d459168df0a4172b98354e2SHA-256 hashMalware fileThat file2026-09-09ConfidentHuntress, Microsoft Threat Intelligence [1] [2]
achievershelf[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
activitymeal[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
adviceturn[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
afternoonscrew[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
agreementjuice[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
airplaneiron[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
airtwig[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
animalrecord[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
apparatustruck[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
apparelplate[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
archairport[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
atthelake[.]infoDomainMalware downloadThat exact host2026-09-09BlockingUnit 42 [1]
authoritykittens[.]infoDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
babyvein[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
badgewing[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
bagcare[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
basinpleasure[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
basketballyear[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
baskethumor[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
bedroomdesire[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
beliefpicture[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
bellplayground[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
bikesdonkey[.]infoDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
birthdaymagic[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
boatthought[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
boundarychickens[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
boytank[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
branchmorning[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
breathdoctor[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
bubbleslip[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
cabbagemeasure[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
cardgrape[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
cattlegold[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
celeryerror[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
centscarf[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
chalkprose[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
chawton[.]infoDomainCommand and controlThat exact host2026-09-09BlockingUnit 42 [1]
cherriestruck[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
chesstail[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
chickensmine[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
churchpail[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
clothcrib[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
coatberry[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
connect[.]activitykitty[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]armcard[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]badgeterritory[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]baitmetal[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]believesisters[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]boundaryfly[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]chinexpert[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]conditiongrade[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]dresstent[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]dropjeans[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]edgeplayground[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]existencediscussion[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]expansionsalt[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]fangstitch[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]fogparcel[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]foodhook[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]forkcountry[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]geesepurpose[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]giantsdogs[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]giraffetoothpaste[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]guitarrobin[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]harborclam[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]holecompany[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]monthsmoke[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]prosesalt[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]purposethings[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]quiltgirls[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]reactionbit[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]rewardrun[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]seashoreletters[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]shapeboot[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]shoptax[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]stopfinger[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]structurekiss[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]tanksuggestion[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]thingbrass[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]thoughtslave[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]trickbushes[.]infoDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]vacationthought[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]woolreward[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
connect[.]zebratransport[.]xyzDomainListed by researchersThat exact host2026-09-09BlockingUnit 42 [1]
controlprice[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
countrypipe[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
cowsfoot[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
crackfood[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
creamfurniture[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
creditchickens[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
crediteducation[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
crimestreet[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
crimesupport[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
crowdstri[.]comDomainCommand and controlDomain and subdomains2026-09-09BlockingUnit 42 [1]
curvebite[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
deathshop[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
decisionreaction[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
dinosaursjam[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
distancebedroom[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
distributiontheory[.]cfdDomainMalware downloadDomain and subdomains2026-09-09BlockingUnit 42 [1]
dolldebt[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
doorsoap[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
expansionsalt[.]infoDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
extentrack[.]comDomainMalware downloadDomain and subdomains2026-09-09BlockingUnit 42 [1]
fallbeginner[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
fangbear[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
filescenter[.]cloudDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
flavorwood[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
fleshfrog[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
fleshplants[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
fleshproduce[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
foodrock[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
forkmice[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
friendjewel[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
geeseairport[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
glassmove[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
goldsteel[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
governmentyard[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
grandfatherquiver[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
gripcollar[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
gripsleep[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
gunbear[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
hairreward[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
healthiron[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
holemuscle[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
homecub[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
homefireman[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
honeyfear[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
instrumentvolcano[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
kittenschalk[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
kittensgrade[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
landerror[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
liptendency[.]infoDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
liquidtoes[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
liquidwrench[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
lockettrail[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
memorycompany[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
micesisters[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
milkname[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
minuteblade[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
mountainsurprise[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
mouthfruit[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
noiseship[.]cfdDomainMalware downloadDomain and subdomains2026-09-09BlockingUnit 42 [1]
northbox[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
partpipe[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
partyfriends[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
passengerbrake[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
peacetongue[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
petminister[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
pictureporter[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
pieplant[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
pizzasthread[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
popcornregret[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
powerbushes[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
profitfact[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
prosetoothbrush[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
quincepage[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
raintexture[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
rakepurpose[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
raterake[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
readingscience[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
reasonachiever[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
recessgiraffe[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
recordhistory[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
reg[.]pcsdkflyer[.]caDomainCommand and controlThat exact host2026-09-09BlockingUnit 42 [1]
regretsquirrel[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
restbucket[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
ricestar[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
rifledog[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
ringsparcel[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
roadyear[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
rockcredit[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
rollglass[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
roofbattle[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
roofreaction[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
rosegrip[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
routeletters[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
runhouses[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
scarecrowcare[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
screwbirth[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
seatlace[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
seaword[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
servantadvice[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
shiptank[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
shirtexample[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
shoesearthquake[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
sinkwash[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
skirtloss[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
slipvegetable[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
smokecar[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
songtheory[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
spadeleg[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
sparkrice[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
sparkrub[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
spoonducks[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
springdogs[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
spybaseball[.]spaceDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
startmonkey[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
statementservant[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
statementtouch[.]xyzDomainCommand and controlDomain and subdomains2026-09-09BlockingUnit 42 [1]
steamhouses[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
stopzinc[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
structurelinen[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
stryper[.]infoDomainCommand and controlDomain and subdomains2026-09-09BlockingUnit 42 [1]
suggestioncemetery[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
suitsoap[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
suitstraw[.]infoDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
swimrest[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
tablechess[.]infoDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
tailsilk[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
territorycaption[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
texturebadge[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
thrillducks[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
throneback[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
toespiders[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
toothpastesense[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
toothpastesun[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
townquiver[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
treesboard[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
truckpig[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
truckshat[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
turnclass[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
umbrellavessel[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
vacationengine[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
vesselsystem[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
vestthings[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
volcanopin[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
voyagemist[.]spaceDomainCommand and controlDomain and subdomains2026-09-09BlockingUnit 42 [1]
wastereading[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
wasteturkey[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
wastewine[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
wavepan[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
whistlebook[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
whistlesong[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
wormspark[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
woundsecretary[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
wrenobservation[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
yamsmell[.]xyzDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
yardvalue[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
zephyrhall[.]cfdDomainListed by researchersDomain and subdomains2026-09-09BlockingUnit 42 [1]
06e0afd01bbc6c9d5dc16c3165089b233dc071e1f251abd06235d1b9166cdac5SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
25558ea78c4aa0fdd0f45fafcaa546d3115dc5806809d144a5801a40e48fd4c5SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
2c6e11027b011042c9a118fc20728f8f4ebb6be8795cc84cc9a45622c297d354SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
3052bd320a34e12ee694811ed0578797477dfd480c664491e509ed15ce1a6961SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
553ce594c9c6afdd4794fddc28c194e3bc3c1b052310e5099c58ac15bab72104SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
62d49d0c78207ec2452cc8a30501db771c9edbae89889e41a7dd227551243e8eSHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
7f792c45de1e28fd42ac44c9444f157a2161742d130bac336c0e991aabbb112cSHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
9b0d9cbc0fd4a7bae8b78a15dfbe63052779414ad725845732c4a0083008da69SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
aaebc8c07de485be6d1bfa956668c5e18aa1ff5588dfe84672e20ae90b4560f1SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
b367762140ae7f5098230b8a5da738c9241f286281ec9439dd6ca581fc87989cSHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
ceb30a5eb9ad9d9c6712c80726df16f96f99d9fc0753be241b00b4d636eb576eSHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
cf184d04ca31fb2b6b7efd85399c29c1136b539153e137ceb3877b1b905791deSHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
d8d783f8e050a6e394f3c0aa5e2bc73a38d822e55fbc39c0648cbff566de3cdfSHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
e05bc22afbc5ddd50b49c85ee169dd13318000d38286de2b8bcff98217256a8dSHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
fc485882626512e7ff82a1d7cd8e8fb3e9751b026d97e682d6908aefff1f2d73SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
fdcc95b7791c0d6590dcf1a412dc9fcc92ad2095818d1b78368b31efad012007SHA-256 hashMalware fileThat file2026-09-09BlockingUnit 42 [1]
hxxp://aa[.]amazingshield[.]xyz/33244556546[.]pyURLMalware downloadThat exact URL2026-09-09BlockingUnit 42 [1]
hxxps://stryper[.]info/aa[.]jsURLMalware downloadThat exact URL2026-09-09BlockingUnit 42 [1]
hxxps://stryper[.]info/t[.]ps1URLMalware downloadThat exact URL2026-09-09BlockingUnit 42 [1]
0710ca983741bf6a95db1b6960c1985e45b10f276e5b26f4fae3157db283d1f3SHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
112fefc9348fa4acbb82d54d9688c96dd5671bcb2e6288c1f7f384baa8d2fdcfSHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
1f5d99864564c088a3260e54ad1728a3eadc0b509386cae200993b33673b343cSHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
61274cf9f49e04e559b267d18617d352c48ba3b1f453773ee9f30e5a4e25dbbcSHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
66499653c0fff78d81db5dc319b9aaa0288dc5d76f555a5eba73660c0ee810ebSHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
9ca27df7938f12794bab0847434482955ca9adea714a34afd315c7a7be522611SHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
ae6f6eeba2bd4cc948d24610d9447986e52f913f4b5ff960ddea26075ff621aeSHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
b769721621aed0418b193e4a00e51bc772c8383a4149d23a5425b13475e2d501SHA-256 hashMalware fileThat file2026-09-09BlockingGroup-IB [1]
08bc4e82883eb42fc5219b206555b7a02a879860c76b4a12b2f82a64f6cc9020SHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
110fffc85370bb7cc60fa023447165c7e99175473d76bc5ffb2abecaa3a41d66SHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
19a3534da9f60c726be426ec5cc2b72c2d1254fefa0782bd2f08ef08117f3260SHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
de3b6836a88ae4b117e3b6de0e9cce3cd56a2b27b462d69e50c2fcac4089a457SHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
de89d560fc8302c778d88e3938327b240fa0db9a64fc1d5643067eedcbd2aedeSHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
ffd6d23f579571cc61936145791975da78b6ae914d780a9447a8f53c3688a0deSHA-256 hashMalware fileThat file2026-09-09BlockingHuntress [1]
1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093fSHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
25db85830d86cafbb93a660242f8b4017273cc4612e94dd7a8af29c948651bbeSHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
54716f0738af891f283d213b5c8d11b25896bb8ee3097d301eae718560cf974eSHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
5fbfc7929858c3c3d79637db857525695db3c0f41b9bf2a7b964c26b7226bde3SHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
7c26614e1d733892c2deac7e245ce115504b1d80592dd0a01b08e3e5a55f89caSHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
97f35ba586fc121590c867b4d6707777fbeca2ace5ad077807ec806540bb47cdSHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7SHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
debf48e690abd4288e5f76fa7e9f98a9fb3411171eba82906ef0d2bf1ef2dd6dSHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
e4d637f884f5babea6525266e1cb6ab332a16a446d6084dd51b4222540c1f16cSHA-256 hashMalware fileThat file2026-09-08BlockingANY.RUN [1]
c4f70f37daae63fe47b0c92adf006f8cf50b6c522ad572a4014275cf979013a0SHA-256 hashMalware fileThat file2026-09-08BlockingSeqrite [1]
5568cd69c754b392121f1dbb8f900fdaMD5 hashMalware fileThat file2026-09-06BlockingHuntress [1]
7916c33688385525078bee504c90f359MD5 hashMalware fileThat file2026-09-04BlockingSecurelist [1]
bfadbeee63a4f0bf19ec9deb8fa58f58MD5 hashMalware fileThat file2026-09-04BlockingSecurelist [1]
m-doxa-apodo[.]duckdns[.]orgDomainData theftDomain and subdomains2026-09-03BlockingUnit 42 [1]
m-doxa-geo[.]duckdns[.]orgDomainListed by researchersDomain and subdomains2026-09-03BlockingUnit 42 [1]
m-doxa-intel[.]duckdns[.]orgDomainListed by researchersDomain and subdomains2026-09-03BlockingUnit 42 [1]
m-doxa-vacunas[.]duckdns[.]orgDomainListed by researchersDomain and subdomains2026-09-03BlockingUnit 42 [1]
46ac289ce0c13666de616446f5d5a68da8bd150f4f065c3bec02f63776d3899cSHA-256 hashMalware fileThat file2026-09-03BlockingUnit 42 [1]
4e218e70afdbb116209ec0ebe8fc556e296e69648aa4e0425b83c0e863a8fee5SHA-256 hashMalware fileThat file2026-09-03BlockingUnit 42 [1]
7d766942ef34542cee39c852286599958c4c2e23187010c4d38dbf88fcb40bf8SHA-256 hashMalware fileThat file2026-09-03BlockingUnit 42 [1]
87bf8bc8b4a2cf34f0af1afe161f123a3d200e77f6c6f41b81bf6ae66ee172ecSHA-256 hashMalware fileThat file2026-09-03BlockingUnit 42 [1]
a38b2cf8beff32a276eed8783723ecf8cc53d7dc88669e1b998dddc4db6fe996SHA-256 hashMalware fileThat file2026-09-03BlockingUnit 42 [1]
update1n5[.]blob[.]core[.]windows[.]netDomainMalware downloadDomain and subdomains2026-09-02BlockingMicrosoft Threat Intelligence [1]
update1n6[.]blob[.]core[.]windows[.]netDomainMalware downloadDomain and subdomains2026-09-02BlockingMicrosoft Threat Intelligence [1]
update1n7[.]blob[.]core[.]windows[.]netDomainMalware downloadDomain and subdomains2026-09-02BlockingMicrosoft Threat Intelligence [1]
update1n9[.]blob[.]core[.]windows[.]netDomainMalware downloadDomain and subdomains2026-09-02BlockingMicrosoft Threat Intelligence [1]
updatetmp[.]blob[.]core[.]windows[.]netDomainMalware downloadDomain and subdomains2026-09-02BlockingMicrosoft Threat Intelligence [1]
4cfdcae6dd1d6d98b870c8f0654d504f2bf10479a117dc297de789c249dc389dSHA-256 hashMalware fileThat file2026-09-02BlockingMicrosoft Threat Intelligence [1]
a4d145a6347e47d40b3ca48af5c6dba01bf019d0110e31a44bb70fc77d1d1676SHA-256 hashMalware fileThat file2026-09-02BlockingMicrosoft Threat Intelligence [1]
cc6d0f3f47afeba018173604e34f527e8413d3a54ffb35caed529bff49055ec5SHA-256 hashMalware fileThat file2026-09-02BlockingMicrosoft Threat Intelligence [1]
idoej[.]comDomainListed by researchersDomain and subdomains2026-09-02BlockingHuntress [1]
api[.]onlinevrgame[.]comDomainListed by researchersThat exact host2026-09-02BlockingCheck Point Research [1]
br[.]team-c2[.]comDomainCommand and controlThat exact host2026-09-02BlockingCheck Point Research [1]
data[.]windows-update-cdn[.]comDomainListed by researchersThat exact host2026-09-02BlockingCheck Point Research [1]
file[.]ijjjst23m[.]comDomainListed by researchersThat exact host2026-09-02BlockingCheck Point Research [1]
gitlab[.]betDomainCommand and controlThat exact host2026-09-02BlockingCheck Point Research [1]
kerneltty[.]comDomainListed by researchersDomain and subdomains2026-09-02BlockingCheck Point Research [1]
microsoft-azure-loadbalance[.]comDomainListed by researchersDomain and subdomains2026-09-02BlockingCheck Point Research [1]
update[.]team-c2[.]comDomainCommand and controlThat exact host2026-09-02BlockingCheck Point Research [1]
02f5e07dd4c97a3de48cc886f46dad35443f1c221a352630e2c7787806ee21b6SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
0611c153bf8b8561ef53f2a5ba1413115bdc0e4554e0c22cf9641bd8845db03eSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
088d0742a667f1acfc83edb94671a10b951f6745badec6d5c754ef594dddf815SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
090e886e5605255ad5708e1f27aecc54319de835abd28853e54182981410707eSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
0963c0034a5e0665729d686d50c5375948c4a684c56770adb13d24ff5df8013dSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
0d4a28d5cf7b99f11ffe972abd0284d9e35b6858eeb288532a55633b3e29f9c7SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
0e7c96a22e3612c68866a8693cc583df95972d3444978ce163c024a45682133aSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
0f26e1ba39ddd1f0a7e6f72bd8c4e02a5f0140de72eeda9fe5ab56402821e31eSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
114824bccfafcbb42040f119fdcd3ec48f54eb154ffee6676d06986cba2b0af0SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
12af9d95c44e20a375148c25f8a2978a62ee95489134654c3537ccfb2d42120dSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
154c977a113ff4d94ff2f29f7b93a8d0bd6ad8e67a820c09505117f5d386fd40SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
16d35a725819142d2bd5bc0949dc518d344d6f63626a517e67fcba7322eb3844SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
1829efbf7946e1a958779a3e7f1e50ca63fe61c6a2ddc177c14a7b0c5e10020aSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
1eb40363a64e0cad15e340af476d106ccf57ebb6662c1389da1347429ee68c9cSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
2305ae23ea350e31b05b9f071d315ee60c5a88e96ce11be8ff9db16314a6197cSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
232ef6be134c2b7c14648aa193daf7e23e987477b8a40150dd77883947fdf017SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
24f7296ac5ce844678c5f7470eaf64b28e870108ca06851c8f66a27a52003f12SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
2567d6b42dac97a391217ad22ee375f504d541940d3fbb9436a3f5e9bb23ab91SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
263c14e84398339b25cd3e59da7e108340306fdbb8112bbe7dc0f07a71eb8a31SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
2949f0b16b83b35dc8a3dfa11815b9516403e3997e13100e7b86f3bb81f6c283SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
297c53d935c501864e15fe7abcfdafed83df9aafdf241094604ae405529c5eb7SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
2de964314a8aacc40897140f6fe21d268e24503a69f9821177e31bca7b1e4035SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
3537bfeaf2c18feafeaf773700a88118fd50979d97f2c42c7e34ba6c9aa62820SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
36cf87fe2e29cc8b0fd84fce91d70e62a4c4d2fc5f9650dc37440d629ae61b8fSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
3a8f464f1f2b5c38173e2a96f95a690af327d85c13c04d37cf0a91893d487bdbSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
3ad35ea116b2c0855c13459a04699318b3944762385e8a47144f1d03b48f0bb1SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
44373953431d7570d9585c91377dbe8b6527ccc00662d249f383b003b68b459fSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
45b9382d7e91a4178b47c908b9b5f6884de7c5a1ef849fbf01d6c23d06d81b88SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
52863d36a216a86b2f90914db2d9229cba7ea317ab5ee9a678cb229087f04611SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
582ecca146a6aef478706e4b2774d6115a9220a18d1db8f92ee54a5118ecebd9SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
5a11ed7931fb6358846e0f3c8d69921f43f8ccade5937fc41e5c262cc49f82e8SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
5af1bec4635e52da4909bf744ea4b7e4483ec944241218855212f4a9e3d48611SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
5f6d112637545a2e8c1a9f260c39698852c7a22e83db5ccfc99b99d9f6274710SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
612fe3a3ace706725aa5415a1cd1cf18548627b4b40636c5443cb770def30b4cSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
67ccc12c0a17dc31388a8c851d076edaaf1213e80398b01d46f5a29b8c7b8b9bSHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]
749784fb7846bb3b52dd8c2f660b53d95d5df30387b87b65b584ef9cc781ae52SHA-256 hashMalware fileThat file2026-09-02BlockingCheck Point Research [1]