Blocking: Most likely safe to block.
Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC
Validated, and reported as malicious by at least one credible research team. Includes everything on Confident. Run it in alert or log-only mode for a week or two, look at every hit, then switch to block.
4,178 indicators. Numbers in the Sources column link to the original reports.
| Indicator (defanged) | Type | Reported as | Block scope | First reported | List | Sources |
|---|---|---|---|---|---|---|
9460e150e1981d5c165043520c5c12fe | MD5 hash | Malware file | That file | 2026-08-14 | Blocking | Securelist [1] |
9717f005c5fb98e08d2ad983d88f94ee | MD5 hash | Malware file | That file | 2026-08-14 | Blocking | Securelist [1] |
eb79558b037669792652a816e2c669de | MD5 hash | Malware file | That file | 2026-08-14 | Blocking | Securelist [1] |
f518d8e5fe70d9090f6280c68a95998f | MD5 hash | Malware file | That file | 2026-08-14 | Blocking | Securelist [1] |
buffalomarket[.]com | Domain | Malware download | That exact host | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
cel-robox[.]com | Domain | Command and control | That exact host | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
chatboxn[.]com | Domain | Malware download | That exact host | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
colatv88xb[.]cc | Domain | Command and control | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
gvapi[.]cc | Domain | Malware download | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
healthymagination[.]com | Domain | Phishing | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
institutobancopalmas[.]org | Domain | Phishing | That exact host | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
jurasudfoot[.]com | Domain | Phishing | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
krogeralbertsons[.]com | Domain | Phishing | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
maxfactor-international[.]com | Domain | Phishing | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
rezilion[.]com | Domain | Phishing | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
samefacts[.]com | Domain | Phishing | That exact host | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
snsystems[.]com | Domain | Phishing | That exact host | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
xemlaibongda[.]net | Domain | Malware download | That exact host | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
xoilacxys[.]top | Domain | Phishing | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
advanceslibrary[.]com | Domain | Malware download | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
renpaste[.]top | Domain | Malware download | Domain and subdomains | 2026-08-13 | Blocking | Infoblox Threat Intel [1] |
managementapiservice[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-13 | Blocking | Securelist [1] |
screenserv[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-13 | Blocking | Securelist [1] |
service8date[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-13 | Blocking | Securelist [1] |
srwinservice[.]com | Domain | Command and control | Domain and subdomains | 2026-08-13 | Blocking | Securelist [1] |
tg4service[.]com | Domain | Command and control | Domain and subdomains | 2026-08-13 | Blocking | Securelist [1] |
updateservs[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-13 | Blocking | Securelist [1] |
windowserv[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-08-13 | Blocking | Securelist [1] |
17674b250d8b422a50a86c9ff207186d | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
2ca8adbab98ebe305eacf272cf48f5a0 | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
3ac41b097236a7723821848ae31ef141 | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
439255736797bc88bd19f282449e0436 | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
4bd7c352ae277b0e38d07beedd4dd507 | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
62801f6223e860a7cca271522e303b2d | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
68f0365d2fa8c828d012d8859e52a773 | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
c1d1ee16b92e6a138ffa048855f75d7d | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
d4bc09fb10ea2a5dc0bcbeeda5e5afdd | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | Securelist [1] |
b76dd9d7a576d3653b52d9c4df177a78 | MD5 hash | Malware file | That file | 2026-08-13 | Blocking | K7 Labs [1] |
414b9985f46714f44dd1bd63860d2a48dcfababcfe5c712a4b4f575378127a56 | SHA-256 hash | Malware file | That file | 2026-08-12 | Blocking | Huntress [1] |
e2356c742c74cce5c6b6100162d0071a3f71e2fed2ed895c2011061a95b3299a | SHA-256 hash | Malware file | That file | 2026-08-12 | Blocking | Huntress [1] |
11f9fb29f2cc142e81c804f53599ae36282c95b3 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
1371b2b2da10ed178d26a7aad191634553f865ae | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
193078cda795dc2f12983e9b66821f7e67c6495d | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
1eac0c636edf181eec0315ffe3b5b1e310b1a352 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
217ab41d543278d0ecce797a71ef38a6bc1493fe | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
22fa5c967b0775c3f3398dcf5dbb46ff80e1708b | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
294ecf0550308dff9df0eea86ca127c064b3bfb8 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
38ca1bc31ccdc1c650720abd76bcc619532c0166 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
39060c673aefa0902cb5fc787fa53364cad9ed6f | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
48d011117eacf57128c7e473bb5d4d69e3d41ef6 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
50cf07b97ef999e9fc5c7efae19d0e5f39db39fa | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
56b819cb285dbdbc307268b4fadbddaa61319bb8 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
65ca7e9363539282c2670dfab100b75c9bfb6253 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
67e2a1e8ab963086bb768b28307cf58dadb0acc7 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
6feeba25748996d3928f11ef774122e02b4b8850 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
82a35dd0ec20791bc3161a87fdb6caa68fd3d4a6 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
850680506df7892d43b3382f0f89a06ef18837c7 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
852322e063872a025b711d5adf08531eac36a265 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
8e665c12b7d8e80c72d86ed4425663ecd74e453c | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
91e66d640b2a570bd83b408b51ebbf21e95e7469 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
a1574476a616599a202cc731a6d5dbf9b3a635f0 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
a72089566a711ed0781d5a36e3c289de0de13e2d | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
bc2bce53d71533c2eb1ccc30ef252ea2774d0100 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
bce3d9b06a3fc2312fe5be213f3d98b9350c9b22 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
dfd19ee8b550f21b99d63ce87d039d1e8e1e111b | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
e05575afe5a01d150daa8b4bb935213cc0e538f6 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
e2e836d16a1b50d4d091f7ae507b82c0a8e05376 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
ea2be784b2c08cd6f116e14079d6583ba606c556 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
ec730da64f9feae4259ebc88113c5cebdf2b1ad7 | SHA-1 hash | Malware file | That file | 2026-08-12 | Blocking | Group-IB [1] |
4140f7e17e6f97f83aa3472473e01add | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Zscaler ThreatLabz [1] |
7bcf8d9f6834c44450eac145a967d2f2 | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Zscaler ThreatLabz [1] |
f92ee93a0af971a3966bfa8efa9c2625 | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Zscaler ThreatLabz [1] |
enveil[.]online | Domain | Command and control | Domain and subdomains | 2026-08-11 | Blocking | Check Point Research [1] |
envell[.]xyz | Domain | Command and control | Domain and subdomains | 2026-08-11 | Blocking | Check Point Research [1] |
uxtramine[.]org | Domain | Command and control | Domain and subdomains | 2026-08-11 | Blocking | Check Point Research [1] |
13d10bc99f7f7abe7ee0902be87920b73b2ea41bd9683dbfcad340dacbcdef79 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
1de949c71efcfb0ffc41f33d38833dbc4b082075b1a540fc68c18c535d7ad86c | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
21c3ad4838c4324bc5f081021da5fb2e9073d0c9304087811c21eb47c9e22762 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
231b1ef8b95bf77887d5377e2a60f649035e78f543af1b82877db36a5759d858 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
29e24c007549e51319ff3aee011da6f9f93568e8c85a5ad69c9e53bd3f4533a2 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
2b4987c07a3d9a9a5d1a9bf4efa3d1903e775090b611710edafdc92874265ca8 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
2db25ac41a66aa523c79e23e00443573530dd7bd82b8371bcc87bd7232e141eb | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
3601060c62edeeaa49def6a13be6e126e1024ce011faad4e2d9f585ccf6bd5a6 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
396192d92d17ace1a521f1351eeeba2825e60badd0d799cc5c338e4934b3c82c | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
3a02d0d798e8d35555776886d92b20ff38a101c9ef7e0eebc8ce5d259516525a | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
3b6378df8442e63a6ed7317075913e4720847a510d95022d4a8347b2637c245d | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
4c9b804d6155b29f1e27a9ffe531e10bc42a7bdab42f905b50146bf2026768d9 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
4dd792c9f672bbdcc8d363d745994efe90f4ffc5fdc2c059c8e379a48ad6a68a | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
4ebdce2f47c23ff8c9e8e80c8b5239c7a5764da31cd3ab8f0505926890adc105 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
4fd32432341dfcf54d0517a6bbc38e5d265be70933493e4183c2a340cdde9a2d | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
5278ee922838352f1480a73e971161017d643a80b7ec22bf725897dfd088696d | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
590fb6ae19480d694e08ee85859cad8066f2f87e7e5abba2960c6d115e1615d6 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
68d4fba7b1300a59cd6212c08910a260cd71b40cd9f51cac933030a68faac0bb | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
6da9b1e6f3315ceb77dd14a937a26cc3602bf6a7e2c2ecafb3c65ce5319837be | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
72dccae85e062f541fecad9ec7a18a3123e7ae5ac5d53c91709b53a46dbbd289 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
743172aab606974b054a64561534ae66baa3a840657f79d7c6fa18350e8d45d1 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
75b93a7103b0562f6497d30052c0c5cf7aa58c1bf0e9297022b74469a7f096f1 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
82268052f94df6f4870d02e57b18d4c54136cc7a8c8d80ad162631f99462c943 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
8ce6c29f92dc45b1474417cbdff4ed0c18e58fa63e3a071ee9f85aa9d2aac07c | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
92106b0c62a0a42678232f8273f030b2d3c8e92efce81b98b9eec70cfe98afa1 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
a0578a2b7821d7e2c573530648f26d7a0d98b373ab24fb7f0c792736761e542d | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
a45144d22cac70a45d71cf4dffa4efbc373658779a56cf1300d6ac863d6cc7e2 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
a673ae661593c0de9bbb815593b816a6853dad6d55ad5042d2ef1875cd13d6e7 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
a738059ce07c951c31ab2da3d93d8f69bff32f9b7d933dbf5943441b9cc99075 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
acb97cec84e08b89f41967a24e965d1fd2c51751cef158f7aa35bb4306b87b97 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
b4082d21070d9ddf53fde4ea22524d09e41ec9826ce63cef3c6235e458d21afb | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
ba96c603e44046de703c67b2c3b7e4ca974afef7b437a0244418bc4edc781bb7 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
c2aa28bb5e2a749c693712008276f311edd912f689371ef9e8a1ee5fb4167461 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
cc4e06aa378a190f71384c03023bb3d18a6d66e297d46701220e132963d2e222 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
d578c28c9afe7457a0d81f6701332ef8197e8f7468de654935fb29a50ea66459 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
db3d69b7eeda2e35e23006bf4b7e206281fce809584207214fc213f9bc30376d | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
ea7056f2bf36c66a61ff787ff5be975a85f534c3c5ca178791dac2504db2c619 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
f7e620134ca935067797ab957317b346ce0df84a4e9b9ca54a6acc9b75afda4d | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
fb3fc5626f68677fb1269a2fefbe70e719211b4065e836ab92e06a8210139a2d | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
fecf12088843801215898442bd1ff3e266f29d14e29a94780e857f69c4915d6b | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Check Point Research [1] |
43f435c3c437bc879a2d7d4634f43494 | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
489f43be558b2679284ceabed7adc4f3 | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
4d27b4eb1c5dbb3d8160f29b8119523e | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
748c9f8cb1065000616204935f96207f | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
aee9642b45b099cb7f3053b9b680b425 | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
c3a2abe8756910f42582b04a44ea3514 | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
c5a460e4e68a088f6e51b2c6474642ec | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
dd1fd2b459b97b7d59375cb8383cd19a | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Securelist [1] |
api[.]studiotikva[.]com | Domain | Listed by researchers | That exact host | 2026-08-11 | Blocking | Securelist [1] |
ns1[.]studiotikva[.]com | Domain | Listed by researchers | That exact host | 2026-08-11 | Blocking | Securelist [1] |
ns2[.]studiotikva[.]com | Domain | Listed by researchers | That exact host | 2026-08-11 | Blocking | Securelist [1] |
ycz2[.]41414141303030[.]m[.]studiotikva[.]com | Domain | Command and control | That exact host | 2026-08-11 | Blocking | Securelist [1] |
hxxps://api[.]studiotikva[.]com/ac | URL | Command and control | That exact URL | 2026-08-11 | Blocking | Securelist [1] |
036bcb62be72c4663b9564955f93b05f | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
33faca1e0090f6b12eff703daf4606e4 | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
76554ad09897ac723a850eaf8c525efa | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
d759364844d78a728505fb0485c3adbc | MD5 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
2a1d96f1b066877812587ac94f45f82dfff5f5f9 | SHA-1 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
2ec2e85b0358e0c681cb5067489a9086ec97dbbf7e3c952dd9cd496b319d5af5 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
345222bca004595977f971d76900b0c65fd9bf9d91c50cd0c5bf5a93f1ad9e49 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
406647de09a0ffa279756b4ccb344b1b76a333320c5b50fd367901fa006cf0ff | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
951c94809aa6c7ab587125f9d4df30fa6a49ee0cbba76a4b7ceedaaa0e5dcd36 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
f07821e313c16cbbd82def45094a22c8d474164051bdbc7648d6869e012014b4 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
f3e8a55a2a3ea7c7b6676e90f4f49a2c55b13065b68ee50c51cc35fe2b5c3237 | SHA-256 hash | Malware file | That file | 2026-08-11 | Blocking | Unit 42 [1] |
cdnjsdelivr[.]beer | Domain | Command and control | Domain and subdomains | 2026-08-10 | Blocking | Unit 42 [1] |
1505eda3da68e2ff9919b55a31018bd30a991236f041aee835f3bc4e430ce505 | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Unit 42 [1] |
4e24bbd0fabac6c3efcec943046afbfd332b2c0108a13becfda23a0e26f9ff5f | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Unit 42 [1] |
5bfb25b8255b61e5ffdf6804451534bcfa9f1dfd225e6c8cdcefb5f50d846898 | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Unit 42 [1] |
81bb80d9c5a97dc41b65f6248c131963c91346eb4fb672836b3d53ae67564d9f | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Unit 42 [1] |
ea1b6ff3a0c1a749b9f09d66789973321d63d8896b48f7345193bdad512950a2 | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Unit 42 [1] |
f2a326cff405299e4ebdfaac955c52fc7e496544eaa0921ecad4816cb3ae3a27 | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Unit 42 [1] |
hxxp://sekirolegion[.]duckdns[.]org/api/endpoint[.]php | URL | Listed by researchers | That exact URL | 2026-08-10 | Blocking | Unit 42 [1] |
52b400c5be1557a8df146f62fde76d906e7e0a92ed76788717ef61c758f315aa | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Zscaler ThreatLabz [1] |
ca94d95413210a2a325155740eb8a5c58627ad5c4e704478621e7fc8165fe173 | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Zscaler ThreatLabz [1] |
a1fdf65020ce4a0f0940c793c6425baf8a0b994ec48b9baaf72788661a9d29f4 | SHA-256 hash | Malware file | That file | 2026-08-10 | Blocking | Microsoft Threat Intelligence [1] |
lhr[.]life | Domain | Malware download | That exact host | 2026-08-07 | Blocking | Elastic Security Labs [1] |
hxxp://awqhnjewqjkl[.]icu/cdn-cgi/rum? | URL | Command and control | That exact URL | 2026-08-06 | Blocking | Unit 42 [1] |
activatemypasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
activatepasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
activatepasskeyportal[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
add-passkey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
addmypasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
addoktapasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
addpasskey2fa[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
addyourpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
assignpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
checkpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
createmfa[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
createmypasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
createpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
createssopasskey[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
deploypasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
enablepasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
enablepasskey2fa[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
enrollpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
hubpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
idokta[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
keyokta[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
keysyncos[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
makepasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
mspasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
myaccountsecurity[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
myconnectkey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
mynewpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
myoktasso[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
mypasskeyid[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
mypasskeysso[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
mysecurepasskey[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
myssopasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
newpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
oktaenroll[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
oktaportalsso[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
oskeyconnect[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
oskeysync[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
passkey-check[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkey-connect[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkey-enable[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkey-portal[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkey-setup[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyactivation[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyadd[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeycenter[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeycreate[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeycreator[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeydeploy[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyenable[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyenroll[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyhelpdesk[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
passkeymfa[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyms[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyokta[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyportal[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyportalsetup[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyregister[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyregistration[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyrollout[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeyset[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeystatus[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
passkeysupport[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
portalsetuphub[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
registerpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
secure-passkey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
secureauthpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
setpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
setupsso[.]com | Domain | Phishing | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
setupssopasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
sqfepjvmrd[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
ssopasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
startpasskey[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
startpasskeysetup[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Google Threat Intelligence / Mandiant [1] |
5bad988affc1094f12b8b8bed659ef55b20e2988eb25441e1c1b34dd03b3eb52 | SHA-256 hash | Malware file | That file | 2026-08-06 | Blocking | Huntress [1] |
619a99ba4ee9d7f33db8045c7e03c4265424977993fe8a53b0f45157c5abd3e5 | SHA-256 hash | Malware file | That file | 2026-08-06 | Blocking | Huntress [1] |
b43a909a01e954d6549558f2f7e9bb58e34959a0ae229f340d61091ab726bbd3 | SHA-256 hash | Malware file | That file | 2026-08-06 | Blocking | Huntress [1] |
f0062f7e70e61493684a2f60748a475168e155bc2502163c844c42e87692abd0 | SHA-256 hash | Malware file | That file | 2026-08-06 | Blocking | Huntress [1] |
abb1[.]life | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Unit 42 [1] |
amutes[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-06 | Blocking | Unit 42 [1] |
awqhnjewqjkl[.]icu | Domain | Command and control | Domain and subdomains | 2026-08-06 | Confident | Elastic Security Labs, Unit 42, Zscaler ThreatLabz [1] [2] [3] |
applefilevault[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
apricotfilepoint[.]com | Domain | Malware download | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
bananafastfile[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
cloudfilebridge[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
cloudsendhub[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
filecedarwallet[.]online | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
filecopperbasket[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
filecrimsonsignal[.]online | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
filemarblegarden[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
fileoceanhammer[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
filerubyfolder[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
filevelvettractor[.]sbs | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
lemonfilewave[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
limefilescope[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
mangocloudfile[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
orangesmartfile[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
syncdatavault[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-05 | Blocking | Microsoft Threat Intelligence [1] |
592b1a954d1d5e4063f74b01f6e79e4c8b5b3be2 | SHA-1 hash | Malware file | That file | 2026-08-05 | Blocking | ReversingLabs [1] |
js-mirror[.]com | Domain | Command and control | Domain and subdomains | 2026-08-04 | Confident | Microsoft Threat Intelligence, Unit 42 [1] [2] |
npm-cache[.]com | Domain | Command and control | Domain and subdomains | 2026-08-04 | Confident | Elastic Security Labs, Microsoft Threat Intelligence, Unit 42 +1 [1] [2] [3] [4] |
pypi-get[.]com | Domain | Command and control | Domain and subdomains | 2026-08-04 | Confident | Microsoft Threat Intelligence, Unit 42 [1] [2] |
54dc7ea54a1317cca0e890a2770630cf7fa6c97813e0cb9d2caa93012b350668 | SHA-256 hash | Malware file | That file | 2026-08-04 | Confident | Elastic Security Labs, Microsoft Threat Intelligence, Unit 42 [1] [2] [3] |
9fc2570b7cef51c1b8df116d144d11ff4096357be7d2c4c6367cfc2509cf1bcc | SHA-256 hash | Malware file | That file | 2026-08-04 | Confident | Elastic Security Labs, Microsoft Threat Intelligence, Unit 42 [1] [2] [3] |
fd3ca4007b225fdf8de7af4345a19179d5efa8c4bb9205f88cda806e5684b1eb | SHA-256 hash | Malware file | That file | 2026-08-04 | Confident | Elastic Security Labs, Microsoft Threat Intelligence, Unit 42 [1] [2] [3] |
hxxps://npm-cache[.]com:443/router | URL | Command and control | That exact URL | 2026-08-04 | Confident | Microsoft Threat Intelligence, Unit 42, Zscaler ThreatLabz [1] [2] [3] |
kleinschnitg[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-04 | Blocking | Huntress [1] |
sectioncompil[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-08-04 | Blocking | Huntress [1] |
www[.]google-apis[.]net | Domain | Listed by researchers | That exact host | 2026-08-04 | Blocking | Fortinet Threat Research [1] |
www[.]techcheck1[.]com | Domain | Listed by researchers | That exact host | 2026-08-04 | Blocking | Fortinet Threat Research [1] |
www[.]wangmeng[.]xyz | Domain | Listed by researchers | That exact host | 2026-08-04 | Blocking | Fortinet Threat Research [1] |
www[.]wangmeng66[.]top | Domain | Listed by researchers | That exact host | 2026-08-04 | Blocking | Fortinet Threat Research [1] |
www[.]wangmengsb[.]com | Domain | Listed by researchers | That exact host | 2026-08-04 | Blocking | Fortinet Threat Research [1] |
2b6cdafdfe427a3de1a94a8a2ca1f09fc4c8f90e4f59089fd9b35b73185ed01c | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Fortinet Threat Research [1] |
3e404e542ae99eeb8827fa72e74dafeacc9b2a8af463a8e0789d7efb0a2dbfb8 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Huntress [1] |
6d1dae4794a80caac5eee48b6189e49c4146eac123bcb03d585194bf2b2a3f10 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Huntress [1] |
795594ad5e6f2868cc4d8ed12dabf4f3999a1477c6b250527c5ede9a98528fb9 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Fortinet Threat Research [1] |
bd987f9f493a234a74580eba1ab95d2178dd38d06bde7a67b991064e09cdc0ee | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Huntress [1] |
d0913e83d10cadae7af2d737b6c5172638680dfe87d04fa67b509b9c41c0f4bf | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Huntress [1] |
ed9f4c15d2857260ce635aad8024b8abaaa010eb13bb0ac77f3a8c296a3c66f2 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Huntress [1] |
f580d528759829f62cba577c9126efe6478529f91609451c3a11e483b239e8a4 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Huntress [1] |
hxxps://cdn[.]uploadtourl[.]com/3b154d8e-61be-4521-b3c3-75efb845a2e2_msi_base64[.]txt | URL | Listed by researchers | That exact URL | 2026-08-04 | Blocking | Huntress [1] |
hxxps://kleinschnitg[.]com/F3bebOag/?id=email | URL | Listed by researchers | That exact URL | 2026-08-04 | Blocking | Huntress [1] |
hxxps://sectioncompil[.]com/wkudpl/main[.]php | URL | Listed by researchers | That exact URL | 2026-08-04 | Blocking | Huntress [1] |
hxxps://sectioncompil[.]com/wkudpl/notarize[.]php | URL | Listed by researchers | That exact URL | 2026-08-04 | Blocking | Huntress [1] |
hxxps://sectioncompil[.]com/wkudpl/windows/download/AccountGuardSetup[.]zip | URL | Malware download | That exact URL | 2026-08-04 | Blocking | Huntress [1] |
hxxps://sectioncompil[.]com/wkudpl/windows/manage[.]html | URL | Listed by researchers | That exact URL | 2026-08-04 | Blocking | Huntress [1] |
01a96eeafb72042b3f69afd21b4c9155dbfe7f97ab3dca392972ad531a075ac2 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Unit 42 [1] |
9639f7ebc6a6d69d7bf5b8bc869e7783a1406088f192868624ad8919e9bfd1d4 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Unit 42 [1] |
bf24277400cc453d530e4277d3bd24e96c5e409adef6970518bdc59205aa0241 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Unit 42 [1] |
cc43cdbe8eb9874f55fffbe23b560b673eb9f31fb9a953926bba29464fd2dd07 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Unit 42 [1] |
e310476c41ae4f6e3c4ed9bb88303ee6e5e1455bd7afe51cf48965ea7599e6e5 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Unit 42 [1] |
e3513922666c202c1ae5c06eea277ba10477868d6d89ce2819f4f8ff9070bc85 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Unit 42 [1] |
e5715e6611ef6bcb233f5d2098510dab3db408abbb728b00e1821bb255829373 | SHA-256 hash | Malware file | That file | 2026-08-04 | Blocking | Unit 42 [1] |
hxxp://178[.]16[.]54[.]109/st[.]exe | URL | Malware download | That exact URL | 2026-08-04 | Blocking | Unit 42 [1] |
ftabnews[.]com | Domain | Command and control | That exact host | 2026-08-03 | Blocking | Zscaler ThreatLabz [1] |
0aadd62b535e683a5a2fe31fde546d07 | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
0d03faf1764297c908158da77c8ffcae | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
163c8d117ef5a4e4e9c3e92a726af0eb | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
1a462c76efc4e73725b9e95c4a00fddb | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
26a94168fa25af0bcb46a18ede50af86 | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
2ead73ed62f1c2beb9043ce92e774e0b | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
4bdaf7792e908f163ebef137854c571d | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
7b96170259a376ea79411c5713beb396 | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
9699bd6a448d0662a1e9e353223263b6 | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
9930036e8f787674db39094e21413e77 | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
d123dbb5c5980bfeb22586197d2cc403 | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | Bitdefender Labs [1] |
hxxps://solthere[.]net/api/v1/redeem | URL | Malware download | That exact URL | 2026-08-03 | Blocking | Bitdefender Labs [1] |
hxxps://solthere[.]net/justacoolkat10 | URL | Command and control | That exact URL | 2026-08-03 | Blocking | Bitdefender Labs [1] |
58330aaf1f533e9fe03b6355c60347b4 | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | K7 Labs [1] |
9694294addbe58be93ddbb6cabc499ce | MD5 hash | Malware file | That file | 2026-08-03 | Blocking | K7 Labs [1] |
hxxps://download[.]alertbh[.]info/BH-Alert[.]apk | URL | Phishing | That exact URL | 2026-08-03 | Blocking | K7 Labs [1] |
cdn-gstat[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-31 | Blocking | Microsoft Threat Intelligence [1] |
m365-owa[.]com | Domain | Phishing | Domain and subdomains | 2026-07-31 | Blocking | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
ms365-device[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-31 | Blocking | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
ms365-live[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-31 | Blocking | Microsoft Threat Intelligence [1] |
network-privacy[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-31 | Blocking | Microsoft Threat Intelligence [1] |
owa-ms365[.]com | Domain | Phishing | Domain and subdomains | 2026-07-31 | Blocking | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence [1] [2] |
sslcdnhost[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-31 | Blocking | Microsoft Threat Intelligence [1] |
918fa52ae45ed60ba7cc8bdc99c3cbe9ab92e0375ec31fc05d0d4513be11c593 | SHA-256 hash | Malware file | That file | 2026-07-31 | Confident | Microsoft Threat Intelligence, Zscaler ThreatLabz [1] [2] |
be99857449d2856dd5a84e21c8a3d5e0e01456adb44062ddec5a6b4970d8d42c | SHA-256 hash | Malware file | That file | 2026-07-31 | Confident | Google Threat Intelligence / Mandiant, Microsoft Threat Intelligence, Zscaler ThreatLabz [1] [2] [3] |
dcgfun[.]top | Domain | Malware download | Domain and subdomains | 2026-07-31 | Blocking | Censys [1] |
df45gdf48g[.]com | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Censys [1] |
myymk[.]cc | Domain | Malware download | Domain and subdomains | 2026-07-31 | Blocking | Censys [1] |
ng28jt[.]xyz | Domain | Phishing | Domain and subdomains | 2026-07-31 | Blocking | Censys [1] [2] |
se006[.]vip | Domain | Listed by researchers | Domain and subdomains | 2026-07-31 | Blocking | Censys [1] |
ytl99[.]vip | Domain | Malware download | Domain and subdomains | 2026-07-31 | Blocking | Censys [1] |
0a60f8ba0c0fa86f469c973cccc853f5d71a7ae8f2a9e057d6c7735d2c28070a | SHA-256 hash | Malware file | That file | 2026-07-31 | Blocking | Censys [1] |
273df85db2d449bbf32a44848877b07b417667eb96481ce37e46bf04dd6cc222 | SHA-256 hash | Malware file | That file | 2026-07-31 | Blocking | Censys [1] |
3c37835766ca615f5eb0e766b4000b43e896a420d575f02e1e160be5711e0782 | SHA-256 hash | Malware file | That file | 2026-07-31 | Blocking | Censys [1] |
46a0bd09f145ab909e5bf45fafe906f452f06971bd227653f0c52af8e22da89e | SHA-256 hash | Malware file | That file | 2026-07-31 | Blocking | Censys [1] |
50582f8d52e49f549615ec7cd68629b9f939a0cfc5c5408f324b2f1cff070e99 | SHA-256 hash | Malware file | That file | 2026-07-31 | Blocking | Censys [1] [2] |
adsmorein[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
adsmoreme[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
amzndev[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
amznprod[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
appletime[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
cdnamz[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
cdnapple[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
figmanets[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
legalads[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
littleads[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
netcdnads[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
netcdndev[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
netsprot[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
netsproto[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
networkads[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
rigacdn[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
rigmajoys[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
rigmanets[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
sahusuzuki[.]in | Domain | Command and control | That exact host | 2026-07-31 | Blocking | Unit 42 [1] |
stuffdns[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
timewebnet[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
whitead[.]in | Domain | Command and control | Domain and subdomains | 2026-07-31 | Blocking | Unit 42 [1] |
hxxps://amzndev[.]in/d/zw_sfp64 | URL | Command and control | That exact URL | 2026-07-31 | Blocking | Unit 42 [1] |
hxxps://netcdndev[.]in/d/zw_sfp64 | URL | Command and control | That exact URL | 2026-07-31 | Blocking | Unit 42 [1] |
hxxps://whitead[.]in/d/zw_sfp64 | URL | Command and control | That exact URL | 2026-07-31 | Blocking | Unit 42 [1] |
about[.]blsouqs[.]com | Domain | Command and control | That exact host | 2026-07-30 | Blocking | Securelist, Zscaler ThreatLabz [1] [2] |
api2[.]annoyingremote[.]com | Domain | Command and control | That exact host | 2026-07-30 | Blocking | Securelist [1] |
confbase[.]mdpsupport[.]net | Domain | Command and control | That exact host | 2026-07-30 | Blocking | Securelist [1] |
digital[.]leroymerling[.]com | Domain | Command and control | That exact host | 2026-07-30 | Blocking | Securelist [1] |
dns[.]ssentialserv[.]xyz | Domain | Command and control | That exact host | 2026-07-30 | Blocking | Securelist [1] |
fm01[.]clouddevicemetrics[.]com | Domain | Command and control | That exact host | 2026-07-30 | Blocking | Securelist [1] |
tj[.]tajikistandip[.]com | Domain | Command and control | That exact host | 2026-07-30 | Blocking | Securelist [1] |
082d49ef9f14e6811d68c7e0e82e5069 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
2f18472866f38c1e1c2c5c14b9a6ab56 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
32a5985543433a4f60da2fafd873b927 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
37dc84e4bcad92fa28f1e7778d088283 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
3c9a1ba8e0c7475706adc6376e9d7b7c | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
45cf5916fab4272a1313c26e67aa9220 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
4e6d5c4770d5a822d7fcce6a74f7ad73 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
6ecf84fb18f6747ed08d7598364d853a | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
7c2f64461bb519c6cbf1fc687675514c | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
b874123a80fc4f40e06872b9cb54ebc6 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
be4731c09734da2e8eb6814a9c82f266 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
cf903e4a1629aa0582fd0363b5786676 | MD5 hash | Malware file | That file | 2026-07-30 | Confident | CISA Cybersecurity Advisories, Securelist [1] [2] |
ef59aad625eebda8650aec5820d6ce69 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
f4578e869a735cfad691f927bae3e638 | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
code[.]newcli[.]com | Domain | Malware download | That exact host | 2026-07-30 | Blocking | Unit 42 [1] |
5d62c1349b8981c396c9a23f4f8f053c | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
9201e35e2993612612919a3c71302cab | MD5 hash | Malware file | That file | 2026-07-30 | Blocking | Securelist [1] |
unable[.]download | Domain | Malware download | That exact host | 2026-07-30 | Blocking | Group-IB [1] |
agenticsora[.]com | Domain | Malware download | Domain and subdomains | 2026-07-29 | Blocking | Huntress [1] |
main[.]sdhomeinspectors[.]com | Domain | Malware download | That exact host | 2026-07-29 | Blocking | Huntress [1] |
main[.]southcarolinacounselor[.]com | Domain | Phishing | That exact host | 2026-07-29 | Blocking | Huntress [1] |
sdhomeinspectors[.]com | Domain | Malware download | Domain and subdomains | 2026-07-29 | Blocking | Huntress [1] |
southcarolinacounselor[.]com | Domain | Malware download | Domain and subdomains | 2026-07-29 | Blocking | Huntress [1] |
hxxp://agenticsora[.]com/curl/ | URL | Malware download | That exact URL | 2026-07-29 | Blocking | Huntress [1] |
hxxp://agenticsora[.]com/dynamic?txd= | URL | Command and control | That exact URL | 2026-07-29 | Blocking | Huntress [1] |
hxxps://agenticsora[.]com/loader/agent/ | URL | Malware download | That exact URL | 2026-07-29 | Blocking | Huntress [1] |
hxxps://agenticsora[.]com/loader/capture-agent/ | URL | Malware download | That exact URL | 2026-07-29 | Blocking | Huntress [1] |
hxxps://main[.]sdhomeinspectors[.]com/modules/wallets | URL | Malware download | That exact URL | 2026-07-29 | Blocking | Huntress [1] |
aecert[.]org | Domain | Command and control | Domain and subdomains | 2026-07-28 | Blocking | Group-IB, Securelist [1] [2] |
neexportfolio[.]azurewebsites[.]net | Domain | Listed by researchers | Domain and subdomains | 2026-07-28 | Blocking | Group-IB, Securelist [1] [2] |
neexportfolio[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-28 | Blocking | Group-IB, Securelist [1] [2] |
realhealthshop[.]com | Domain | Command and control | Domain and subdomains | 2026-07-28 | Blocking | Securelist [1] |
tjconsultingservices[.]com | Domain | Command and control | Domain and subdomains | 2026-07-28 | Blocking | Securelist [1] |
a239e655709a2518dd0b7bdbed163679 | MD5 hash | Malware file | That file | 2026-07-28 | Blocking | Securelist [1] |
c832ecd135781b11f59e3fffb3d2b6ac | MD5 hash | Malware file | That file | 2026-07-28 | Blocking | Securelist [1] |
re2[.]filesdwnload[.]top | Domain | Listed by researchers | That exact host | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
re8[.]dowlfles[.]online | Domain | Listed by researchers | That exact host | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
scansec-upd[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
update19[.]upldf[.]online | Domain | Listed by researchers | That exact host | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
35ea50f16bd5c080c91dbaa3dd4937408ed9563c1d9aa1cd0c751ae58db0eedc | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
41748648b71a70431123ec48e38868ff8aad3a7a06f5d781c2d2a4f718e7fd91 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
51edd14233483bcf36e0b0f31451f28eac681fe3f2036f76c02b7ec1bb17ce33 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
5d53246b0e6b681bc624739a7bead39a61fb07c0f4474b8170112e829c053f85 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
65af5c3ba2d00967b25b9165d2d3171fa81f209ee0790299805bb907d492a670 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
66b2b22397cea219266afb8cbbb28fe93997c1444f642a183ac8fc9ca1fabed5 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
759287052b8cc4f4ce16065857cbc9dba72aab218e709d3419483a95092c6f96 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
7dcabb6d07d52b92bbf8d659d1ed373fa780e7839fd3d744826a56fc1cd2372f | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
9136ffb749c6cec13b826cd4f25ffdcf170375889feba9fee28dd74c32578f52 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
f36bfccf944b5d1e5e306958c1a728e38786c042ee4e536cc44c9d43940b1121 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
f85960dee17ba587b712cd8cdf89042bcd6ba711c3d5d548bef7c7f0988413f5 | SHA-256 hash | Malware file | That file | 2026-07-27 | Blocking | Zscaler ThreatLabz [1] |
golinked[.]net | Domain | Phishing | Domain and subdomains | 2026-07-23 | Blocking | Red Canary [1] |
indeed-jobs[.]net | Domain | Phishing | Domain and subdomains | 2026-07-23 | Blocking | Red Canary [1] |
linkedall[.]org | Domain | Phishing | Domain and subdomains | 2026-07-23 | Blocking | Red Canary [1] |
9i6pokerdepot[.]com | Domain | Phishing | Domain and subdomains | 2026-07-23 | Blocking | Microsoft Threat Intelligence [1] |
1517b3caa495f6c4e832df9c75fc94667e3c233773f7fa4e056d5e30e5ead760 | SHA-256 hash | Malware file | That file | 2026-07-23 | Blocking | Proofpoint Threat Insight [1] |
60db9abae75cd8ccc49dd7ea5feb41677566dcd442f12ebc5745ffd2810fb874 | SHA-256 hash | Malware file | That file | 2026-07-23 | Blocking | Proofpoint Threat Insight [1] |
98df604ecc57f884a2e6ce3266a0013ad64455cac48442c2312cfa4765007aaf | SHA-256 hash | Malware file | That file | 2026-07-23 | Blocking | Proofpoint Threat Insight [1] |
b1f5beb1175fc5c7d1806a2f0d900eb124c54f0286c5c52b66eea7a6633adb1d | SHA-256 hash | Malware file | That file | 2026-07-23 | Blocking | Proofpoint Threat Insight [1] |
claude-pro[.]com | Domain | Phishing | Domain and subdomains | 2026-07-23 | Blocking | Group-IB [1] |
gouvvbo[.]top | Domain | Command and control | Domain and subdomains | 2026-07-23 | Blocking | Group-IB [1] |
license[.]claude-pro[.]com | Domain | Malware download | That exact host | 2026-07-23 | Blocking | Group-IB [1] |
sylverixstrategy[.]com | Domain | Command and control | Domain and subdomains | 2026-07-23 | Blocking | Group-IB [1] |
update-crowdstrike[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-23 | Blocking | Group-IB [1] |
update-sentinelone[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-23 | Blocking | Group-IB [1] |
update-trellix[.]com | Domain | Command and control | Domain and subdomains | 2026-07-23 | Blocking | Group-IB [1] |
vertextrust-advisors[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-07-23 | Blocking | Group-IB [1] |
0482d6053f96e6bde0a92af25497f3c0 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
0e6d22c2a81d29b1f9d8395d44e19e53 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
35cdbf8a16da1245d574a0365cb87287 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
38e317af0fc0efcc88265f243a264542 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
39d4012e49f58092ec5cefed13dbbcfd | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
3b3dd8f3a5e1ff85c63f2453ad270415 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
3fe9c84025f4401f8cd661675642c526 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
4faf4fd91d28e014b4f2362d6a7bb8ac | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
5222a31cf24f9f57ae3d1831f264a983 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
5b75b00a4b4c32b6e213514e80500a65 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
7840f30b395fac347f85b38633c2d08d | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
796f82a4833be330b1e35af63e55b597 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
7c84e75817349adcdea9925b86f67670 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
8002ab4d0cf7e1888ee72de0b9f4282c | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
88ac1c5fc9ee89491c70ea16131e264a | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
9e01bf0e28c86435cfb1afaef44238e9 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
a4cdecc57a215243d279cdb065863308 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
aedd185b76ccda8d65dbd26204cc0e9a | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
b8053bcd04ce9d7d19c7f36830a9f26b | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
bb5c88de9e04e6306260b9f3a4498933 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
bef0b8599d18acf1c74192ae9f198f85 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
c1f45a0609c5c1bd2c21cad20703f126 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
c512adfa8743c3b3c776d4452f00c6c0 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
c64eda499e2a21ad158841b9dbc7adc9 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
d99392248bdd7e351e63ead6733638ba | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
df1f03a2534480a4838f62339bcb90d8 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
ee5a2cdd4ce6ccb2e9279c9e13e8bd15 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
efac43473d7e87ede5176fe01a114abb | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
f2ce6fe8b52dfbacfee482a48f4ae972 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
f360afe51b499a036c7be8c0ecc4dc89 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
fef1d3cb35129ad25d95e279565b9001 | MD5 hash | Malware file | That file | 2026-07-23 | Blocking | Group-IB [1] |
1cd58cfba596da296ab1878d74023e00c399345a1b6c2a0e5446c53563f4e3bb | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Huntress [1] |
1fe3646d27d286db8123297e06ae7badf3e26f352a04f91b6d82c28869a91664 | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Huntress [1] |
26bae4d7012bf59847ab4036a065419c3d4ca47e020479f55b3b2c6d0d21394a | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Huntress [1] |
f8acb8f5cf88b77a4c27d7fd6856aa299bb178e85f9963c2fbd447d818da3ed0 | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Huntress [1] |
fd826215add30c1319eefa291b6eaf8ddfa7720cfe816c49aef6fe8a88de7939 | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Huntress [1] |
105f652e6b8f31c371f2385877e43b6772aff5d3168d5d4635f8a1fcbb321421 | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Fortinet Threat Research [1] |
33c331ededbf8ee9829895424423ce3fd17e359d2e784fcbce396aacff458cf5 | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Fortinet Threat Research [1] |
3b19a82e1354ac14a3da7c840cbdd0ce50db38432d78e767b36f08e45024c23d | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Fortinet Threat Research [1] |
6c677eb2b3ffd288083c59a13d7bb712d4754af61a5563873f76c440962346f4 | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Fortinet Threat Research [1] |
bf80245ba792992fbfe24abac33f8fd66f24cdeb5f0f21cfdf45a29d107c8d3b | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Fortinet Threat Research [1] |
df527a5c2fbde43816cd02f4cd49eee4bb82fb4a3c7045021360888c7d504c98 | SHA-256 hash | Malware file | That file | 2026-07-22 | Blocking | Fortinet Threat Research [1] |
34bfa888695b9aaa41bd575245972043 | MD5 hash | Malware file | That file | 2026-07-22 | Blocking | Seqrite [1] |
5f238710a5ef4f6ddbbe7a118c822705 | MD5 hash | Malware file | That file | 2026-07-22 | Blocking | Seqrite [1] |
6bbfc88534d5d515dddb0ec9bb618530 | MD5 hash | Malware file | That file | 2026-07-22 | Blocking | Seqrite [1] |
8a620e451e64f418bc21fd458e952f2e | MD5 hash | Malware file | That file | 2026-07-22 | Blocking | Seqrite [1] |
a30b628d0c087f305b35be3e3f5281b3 | MD5 hash | Malware file | That file | 2026-07-22 | Blocking | Seqrite [1] |
barifurniture[.]net | Domain | Malware download | That exact host | 2026-07-21 | Blocking | Infoblox Threat Intel [1] |
0d289ae3837acc7d076b770b6cec2a1d8b0fabf0 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
139ec3c1b4fae48fc5d6e0d4957516f0c20633f3 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
177122bdcc5dc1ddd38a01c68b4b7c627c7a50b0 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
2b081fb89d88c93ee5339d33eb3200b69d5f3b8b | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
2b48a6c9cfb3932021c7c4b567199f57802ad018 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
31652250f9e4f67579a3e187806ba2cfad1792db | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
3734b0314f01293b36efb9fbff133a332ab9d6b0 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
5fa626b691613abbcc0eed2d143c3a485853d8d9 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
771151e26a5e7d3198d3b28a919e802965482d39 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
7d4daac63543a754ee43cfc4e812040e6ed32ac9 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
806d8283de91c116f2c56ad0aa4c7ae0b33de626 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
955dbf23d53832f5f1c514b116a5cc04ccc635ec | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
97f5bfb2f8c2aa240d52345c54ef2e99b760c16e | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
997ca1f4d9e94293ddaed0a63968fd25c19e8a6c | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
bf978f20fd2320645bda61a78ef7d652130394a1 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
c5329cfae6d94b2ba9dddaa20b1725a51104581c | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
cb53af4fbf24936590f5092f717661d3579d50de | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
d632cad92dd560374eef427930cbef562b309067 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
d9e4ae7bf23b5c6691156a6fa7fb128ea6890584 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
df9582a020b87af2ab67aeeb9cd48e63a1c7fa3e | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
e01739c067950beb1a877b54401ae2a47962b61c | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
eec21fc0c0163117039b1cc2a9209ade788f4d64 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
effcc8433a07fb9e1b1cc2efa621487d62315177 | SHA-1 hash | Malware file | That file | 2026-07-21 | Blocking | ReversingLabs [1] |
hxxp://172[.]86[.]126[.]195/active_desktop_launcher[.]exe | URL | Malware download | That exact URL | 2026-07-21 | Blocking | Censys [1] |
hxxp://172[.]86[.]126[.]195/active_desktop_render_x64[.]dll | URL | Malware download | That exact URL | 2026-07-21 | Blocking | Censys [1] |
cloudlanecdn[.]com | Domain | Command and control | Domain and subdomains | 2026-07-21 | Blocking | Securelist [1] |
ns1[.]cloudlanecdn[.]com | Domain | Listed by researchers | That exact host | 2026-07-21 | Blocking | Securelist [1] |
ns2[.]cloudlanecdn[.]com | Domain | Listed by researchers | That exact host | 2026-07-21 | Blocking | Securelist [1] |
ns3[.]cloudlanecdn[.]com | Domain | Listed by researchers | That exact host | 2026-07-21 | Blocking | Securelist [1] |
ns4[.]cloudlanecdn[.]com | Domain | Listed by researchers | That exact host | 2026-07-21 | Blocking | Securelist [1] |
bluefoodtruths[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-07-21 | Blocking | ANY.RUN [1] |