Skip to main content

ThreatFox IOCs for 2025-03-01

Medium
Published: Sat Mar 01 2025 (03/01/2025, 00:00:00 UTC)
Source: ThreatFox
Vendor/Project: type
Product: osint

Description

ThreatFox IOCs for 2025-03-01

AI-Powered Analysis

AILast updated: 06/19/2025, 16:05:06 UTC

Technical Analysis

The provided threat intelligence report titled "ThreatFox IOCs for 2025-03-01" relates to a malware category identified through open-source intelligence (OSINT) methods. The report originates from ThreatFox, a platform known for aggregating Indicators of Compromise (IOCs) and threat data. The threat is classified as medium severity and is tagged as 'type:osint' with a TLP (Traffic Light Protocol) designation of white, indicating that the information is publicly shareable without restriction. The technical details include a threat level of 2 (on an unspecified scale), an analysis rating of 1, and a distribution rating of 3, suggesting moderate dissemination or reach. However, there are no specific affected product versions, no known exploits in the wild, and no detailed technical indicators such as IOCs or CWEs provided. The absence of patch links and exploit data implies that this is either a newly identified malware or one that has not yet been widely exploited or analyzed in depth. The UUID and timestamp indicate the unique identification and timing of the report but do not provide additional technical insight. Overall, the report serves as a general alert about a malware threat identified through OSINT without detailed technical specifics or immediate exploit evidence.

Potential Impact

Given the limited technical details and absence of known exploits, the immediate impact of this malware threat on European organizations appears to be moderate but uncertain. The medium severity rating suggests potential risks to confidentiality, integrity, or availability if the malware were to be deployed effectively. European organizations relying on open-source intelligence tools or platforms similar to ThreatFox might be at risk if the malware targets such environments or if the IOCs relate to malware campaigns targeting sectors prevalent in Europe. The lack of specific affected products or versions limits the ability to pinpoint exact impact vectors. However, if the malware were to propagate, it could potentially disrupt operations, lead to data breaches, or facilitate further attacks. The distribution rating of 3 indicates some level of spread, which could translate to a broader attack surface within European networks. Organizations in critical infrastructure, finance, or government sectors could face heightened risks if targeted, especially given Europe's strategic importance in global cyber threat landscapes.

Mitigation Recommendations

To mitigate potential risks from this malware threat, European organizations should: 1) Enhance OSINT monitoring capabilities to detect emerging IOCs related to this threat promptly, leveraging ThreatFox and similar platforms for real-time updates. 2) Implement advanced endpoint detection and response (EDR) solutions capable of identifying anomalous behaviors consistent with unknown or emerging malware. 3) Conduct regular threat hunting exercises focusing on indicators associated with OSINT-derived malware to identify early signs of compromise. 4) Maintain up-to-date backups and ensure robust incident response plans are in place to minimize impact in case of infection. 5) Foster information sharing within European cybersecurity communities and sectors to rapidly disseminate any new findings or indicators related to this threat. 6) Given the lack of specific patches, prioritize network segmentation and least privilege access controls to limit malware propagation potential. 7) Educate staff on recognizing phishing or social engineering tactics that might be used to deliver such malware, as user interaction vectors are common in OSINT-related threats.

Need more detailed analysis?Get Pro

Technical Details

Threat Level
2
Analysis
1
Distribution
3
Uuid
dbe922b0-0528-469c-bc04-b367d8add791
Original Timestamp
1740873786

Indicators of Compromise

File

ValueDescriptionCopy
file47.238.140.204
Cobalt Strike botnet C2 server (confidence level: 100%)
file47.100.180.123
Cobalt Strike botnet C2 server (confidence level: 100%)
file82.29.60.223
Cobalt Strike botnet C2 server (confidence level: 100%)
file35.231.55.62
Cobalt Strike botnet C2 server (confidence level: 100%)
file190.144.146.90
Remcos botnet C2 server (confidence level: 100%)
file45.158.8.193
Remcos botnet C2 server (confidence level: 100%)
file186.169.90.226
AsyncRAT botnet C2 server (confidence level: 100%)
file128.90.106.254
AsyncRAT botnet C2 server (confidence level: 100%)
file74.50.120.106
AsyncRAT botnet C2 server (confidence level: 100%)
file74.50.120.106
AsyncRAT botnet C2 server (confidence level: 100%)
file74.50.120.106
AsyncRAT botnet C2 server (confidence level: 100%)
file195.206.234.29
AsyncRAT botnet C2 server (confidence level: 100%)
file51.195.231.115
AsyncRAT botnet C2 server (confidence level: 100%)
file3.225.132.90
Unknown malware botnet C2 server (confidence level: 100%)
file45.8.114.228
Unknown malware botnet C2 server (confidence level: 100%)
file34.170.20.83
Unknown malware botnet C2 server (confidence level: 100%)
file170.64.169.87
Havoc botnet C2 server (confidence level: 100%)
file146.70.158.85
Havoc botnet C2 server (confidence level: 100%)
file16.171.114.30
Havoc botnet C2 server (confidence level: 100%)
file31.166.229.37
Venom RAT botnet C2 server (confidence level: 100%)
file157.20.182.57
Venom RAT botnet C2 server (confidence level: 100%)
file46.246.4.3
DCRat botnet C2 server (confidence level: 100%)
file89.223.123.31
Stealc botnet C2 server (confidence level: 100%)
file160.191.244.78
MooBot botnet C2 server (confidence level: 100%)
file142.93.251.139
BianLian botnet C2 server (confidence level: 100%)
file193.124.205.56
Quasar RAT botnet C2 server (confidence level: 100%)
file94.130.132.103
NetSupportManager RAT botnet C2 server (confidence level: 100%)
file105.100.228.127
NjRAT botnet C2 server (confidence level: 100%)
file47.76.197.205
ValleyRAT botnet C2 server (confidence level: 100%)
file62.60.226.86
SystemBC botnet C2 server (confidence level: 60%)
file110.42.111.128
Meterpreter botnet C2 server (confidence level: 100%)
file193.42.60.108
Cobalt Strike botnet C2 server (confidence level: 100%)
file103.242.15.140
Unknown malware botnet C2 server (confidence level: 100%)
file194.59.30.173
AsyncRAT botnet C2 server (confidence level: 100%)
file193.142.146.42
AsyncRAT botnet C2 server (confidence level: 100%)
file193.142.146.42
AsyncRAT botnet C2 server (confidence level: 100%)
file102.117.166.115
Unknown malware botnet C2 server (confidence level: 100%)
file196.251.83.134
Hook botnet C2 server (confidence level: 100%)
file201.27.179.219
Havoc botnet C2 server (confidence level: 100%)
file179.13.5.203
DCRat botnet C2 server (confidence level: 100%)
file176.65.137.225
ERMAC botnet C2 server (confidence level: 100%)
file196.251.88.97
MooBot botnet C2 server (confidence level: 100%)
file113.45.76.8
Cobalt Strike botnet C2 server (confidence level: 100%)
file196.251.85.45
AsyncRAT botnet C2 server (confidence level: 100%)
file128.90.113.43
AsyncRAT botnet C2 server (confidence level: 100%)
file196.251.66.190
Hook botnet C2 server (confidence level: 100%)
file209.145.47.90
Hook botnet C2 server (confidence level: 100%)
file110.10.98.18
DCRat botnet C2 server (confidence level: 100%)
file124.221.144.169
Unknown malware botnet C2 server (confidence level: 100%)
file176.126.103.125
Unknown malware botnet C2 server (confidence level: 100%)
file172.245.95.180
Unknown malware botnet C2 server (confidence level: 100%)
file13.209.160.170
Unknown malware botnet C2 server (confidence level: 100%)
file102.37.22.210
Unknown malware botnet C2 server (confidence level: 100%)
file54.36.191.194
Unknown malware botnet C2 server (confidence level: 100%)
file45.61.151.131
Unknown malware botnet C2 server (confidence level: 100%)
file117.50.188.208
Unknown malware botnet C2 server (confidence level: 100%)
file57.128.224.217
Unknown malware botnet C2 server (confidence level: 100%)
file13.233.174.158
Unknown malware botnet C2 server (confidence level: 100%)
file18.196.124.44
Unknown malware botnet C2 server (confidence level: 100%)
file167.235.72.107
Unknown malware botnet C2 server (confidence level: 100%)
file3.126.88.67
Unknown malware botnet C2 server (confidence level: 100%)
file3.126.88.67
Unknown malware botnet C2 server (confidence level: 100%)
file51.38.48.197
Unknown malware botnet C2 server (confidence level: 100%)
file51.178.28.213
Unknown malware botnet C2 server (confidence level: 100%)
file151.80.60.174
Unknown malware botnet C2 server (confidence level: 100%)
file64.227.71.55
Unknown malware botnet C2 server (confidence level: 100%)
file51.68.172.253
Unknown malware botnet C2 server (confidence level: 100%)
file49.12.76.86
Unknown malware botnet C2 server (confidence level: 100%)
file103.40.253.231
ValleyRAT botnet C2 server (confidence level: 100%)
file3.66.239.60
Cobalt Strike botnet C2 server (confidence level: 50%)
file103.41.207.178
Unknown malware botnet C2 server (confidence level: 50%)
file141.95.172.125
Sliver botnet C2 server (confidence level: 50%)
file121.40.44.117
Sliver botnet C2 server (confidence level: 50%)
file154.205.154.146
Unknown malware botnet C2 server (confidence level: 50%)
file118.122.8.221
Unknown malware botnet C2 server (confidence level: 50%)
file43.163.87.97
Cobalt Strike botnet C2 server (confidence level: 100%)
file131.226.2.137
Remcos botnet C2 server (confidence level: 100%)
file192.3.182.68
Sliver botnet C2 server (confidence level: 100%)
file24.137.215.168
Sliver botnet C2 server (confidence level: 100%)
file8.133.243.128
Sliver botnet C2 server (confidence level: 100%)
file158.23.168.103
Sliver botnet C2 server (confidence level: 100%)
file2.58.85.204
AsyncRAT botnet C2 server (confidence level: 100%)
file51.195.231.115
AsyncRAT botnet C2 server (confidence level: 100%)
file20.55.64.14
Unknown malware botnet C2 server (confidence level: 100%)
file171.249.230.216
Venom RAT botnet C2 server (confidence level: 100%)
file202.61.136.134
DCRat botnet C2 server (confidence level: 100%)
file154.29.138.51
DeimosC2 botnet C2 server (confidence level: 75%)
file195.35.120.151
DeimosC2 botnet C2 server (confidence level: 75%)
file8.133.252.165
Sliver botnet C2 server (confidence level: 75%)
file85.192.30.40
Havoc botnet C2 server (confidence level: 75%)
file81.19.136.61
Cobalt Strike botnet C2 server (confidence level: 100%)
file178.255.245.86
Cobalt Strike botnet C2 server (confidence level: 100%)
file156.245.28.115
Cobalt Strike botnet C2 server (confidence level: 100%)
file38.207.130.239
Cobalt Strike botnet C2 server (confidence level: 100%)
file86.104.72.130
Bashlite botnet C2 server (confidence level: 100%)
file103.35.190.176
Bashlite botnet C2 server (confidence level: 100%)
file94.131.118.79
Bashlite botnet C2 server (confidence level: 100%)
file91.194.11.162
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.30
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.41
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.64
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.42
Bashlite botnet C2 server (confidence level: 100%)
file86.104.72.130
Bashlite botnet C2 server (confidence level: 100%)
file103.35.190.176
Bashlite botnet C2 server (confidence level: 100%)
file94.131.118.79
Bashlite botnet C2 server (confidence level: 100%)
file91.194.11.162
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.30
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.41
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.64
Bashlite botnet C2 server (confidence level: 100%)
file5.230.227.42
Bashlite botnet C2 server (confidence level: 100%)
file212.193.26.220
Unknown malware botnet C2 server (confidence level: 100%)
file87.121.84.91
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.96
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.97
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.98
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.99
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.100
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.101
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.102
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.103
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.104
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.105
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.106
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.107
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.108
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.109
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.110
Mirai botnet C2 server (confidence level: 100%)
file87.121.84.111
Mirai botnet C2 server (confidence level: 100%)
file85.17.31.82
Revenge RAT botnet C2 server (confidence level: 100%)
file5.79.71.225
Revenge RAT botnet C2 server (confidence level: 100%)
file5.79.71.205
Revenge RAT botnet C2 server (confidence level: 100%)
file185.183.98.251
Mirai botnet C2 server (confidence level: 100%)
file23.157.176.170
Bashlite botnet C2 server (confidence level: 100%)
file23.157.176.170
Bashlite botnet C2 server (confidence level: 100%)
file103.98.152.120
MooBot botnet C2 server (confidence level: 100%)
file185.95.159.125
Mirai botnet C2 server (confidence level: 100%)
file57.128.134.229
Quasar RAT botnet C2 server (confidence level: 100%)
file172.137.39.15
Quasar RAT botnet C2 server (confidence level: 100%)
file95.163.84.250
Quasar RAT botnet C2 server (confidence level: 100%)
file45.145.41.216
Quasar RAT botnet C2 server (confidence level: 100%)
file172.221.202.55
Quasar RAT botnet C2 server (confidence level: 100%)
file91.51.45.139
Quasar RAT botnet C2 server (confidence level: 100%)
file174.26.204.152
AsyncRAT botnet C2 server (confidence level: 100%)
file174.26.204.152
AsyncRAT botnet C2 server (confidence level: 100%)
file174.26.204.152
AsyncRAT botnet C2 server (confidence level: 100%)
file174.26.204.152
AsyncRAT botnet C2 server (confidence level: 100%)
file45.144.212.242
XWorm botnet C2 server (confidence level: 100%)
file20.39.39.235
XWorm botnet C2 server (confidence level: 100%)
file209.50.250.24
XWorm botnet C2 server (confidence level: 100%)
file162.244.210.204
XWorm botnet C2 server (confidence level: 100%)
file94.156.227.37
XWorm botnet C2 server (confidence level: 100%)
file23.94.126.41
XWorm botnet C2 server (confidence level: 100%)
file80.76.49.15
XWorm botnet C2 server (confidence level: 100%)
file176.96.137.181
XWorm botnet C2 server (confidence level: 100%)
file147.185.221.26
XWorm botnet C2 server (confidence level: 100%)
file5.206.224.92
XWorm botnet C2 server (confidence level: 100%)
file38.68.49.150
XWorm botnet C2 server (confidence level: 100%)
file192.227.246.70
Remcos botnet C2 server (confidence level: 100%)
file194.59.31.211
Remcos botnet C2 server (confidence level: 100%)
file176.65.139.107
Remcos botnet C2 server (confidence level: 100%)
file195.211.191.157
Remcos botnet C2 server (confidence level: 100%)
file130.0.33.93
Remcos botnet C2 server (confidence level: 100%)
file103.198.26.222
Remcos botnet C2 server (confidence level: 100%)
file108.231.94.28
NjRAT botnet C2 server (confidence level: 100%)
file64.65.123.187
NjRAT botnet C2 server (confidence level: 100%)
file147.185.221.26
NjRAT botnet C2 server (confidence level: 100%)
file5.230.29.46
Mirai botnet C2 server (confidence level: 100%)
file31.13.248.173
Mirai botnet C2 server (confidence level: 100%)
file38.135.54.193
Mirai botnet C2 server (confidence level: 100%)
file45.61.169.138
Mirai botnet C2 server (confidence level: 100%)
file45.123.188.143
Mirai botnet C2 server (confidence level: 100%)
file45.129.199.194
Mirai botnet C2 server (confidence level: 100%)
file62.60.232.98
Mirai botnet C2 server (confidence level: 100%)
file87.121.61.24
Mirai botnet C2 server (confidence level: 100%)
file88.151.195.221
Mirai botnet C2 server (confidence level: 100%)
file91.188.254.129
Mirai botnet C2 server (confidence level: 100%)
file91.244.197.12
Mirai botnet C2 server (confidence level: 100%)
file91.244.197.150
Mirai botnet C2 server (confidence level: 100%)
file93.95.115.185
Mirai botnet C2 server (confidence level: 100%)
file103.214.71.65
Mirai botnet C2 server (confidence level: 100%)
file103.214.71.66
Mirai botnet C2 server (confidence level: 100%)
file103.214.71.67
Mirai botnet C2 server (confidence level: 100%)
file103.214.71.72
Mirai botnet C2 server (confidence level: 100%)
file109.104.153.181
Mirai botnet C2 server (confidence level: 100%)
file128.254.207.40
Mirai botnet C2 server (confidence level: 100%)
file154.213.200.12
Mirai botnet C2 server (confidence level: 100%)
file158.69.175.235
Mirai botnet C2 server (confidence level: 100%)
file185.121.15.44
Mirai botnet C2 server (confidence level: 100%)
file185.121.15.49
Mirai botnet C2 server (confidence level: 100%)
file185.198.58.166
Mirai botnet C2 server (confidence level: 100%)
file193.17.183.20
Mirai botnet C2 server (confidence level: 100%)
file194.87.47.34
Mirai botnet C2 server (confidence level: 100%)
file194.87.198.253
Mirai botnet C2 server (confidence level: 100%)
file198.98.50.251
Mirai botnet C2 server (confidence level: 100%)
file199.195.248.181
Mirai botnet C2 server (confidence level: 100%)
file204.76.203.173
Mirai botnet C2 server (confidence level: 100%)
file204.76.203.175
Mirai botnet C2 server (confidence level: 100%)
file204.76.203.188
Mirai botnet C2 server (confidence level: 100%)
file212.192.12.51
Mirai botnet C2 server (confidence level: 100%)
file216.73.158.27
Mirai botnet C2 server (confidence level: 100%)
file216.146.25.49
Mirai botnet C2 server (confidence level: 100%)
file217.195.153.175
Mirai botnet C2 server (confidence level: 100%)
file45.138.16.189
AsyncRAT botnet C2 server (confidence level: 100%)
file104.161.43.108
AsyncRAT botnet C2 server (confidence level: 100%)
file160.191.244.220
Venom RAT botnet C2 server (confidence level: 100%)
file171.249.230.216
Venom RAT botnet C2 server (confidence level: 100%)
file46.173.214.32
FAKEUPDATES payload delivery server (confidence level: 100%)
file18.218.6.158
Cobalt Strike botnet C2 server (confidence level: 75%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file103.20.235.209
Remcos botnet C2 server (confidence level: 75%)
file140.82.4.20
FAKEUPDATES botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file185.156.72.58
Tofsee botnet C2 server (confidence level: 100%)
file124.71.70.169
Cobalt Strike botnet C2 server (confidence level: 100%)
file185.196.11.64
Cobalt Strike botnet C2 server (confidence level: 100%)
file47.83.127.113
Cobalt Strike botnet C2 server (confidence level: 100%)
file185.100.157.87
Hook botnet C2 server (confidence level: 100%)
file196.251.66.190
Hook botnet C2 server (confidence level: 100%)
file86.252.134.168
Quasar RAT botnet C2 server (confidence level: 100%)
file47.129.124.98
NetSupportManager RAT botnet C2 server (confidence level: 100%)
file195.177.95.106
Quasar RAT botnet C2 server (confidence level: 100%)
file185.196.11.64
Cobalt Strike botnet C2 server (confidence level: 100%)
file43.134.89.216
Cobalt Strike botnet C2 server (confidence level: 100%)
file45.74.46.37
Remcos botnet C2 server (confidence level: 100%)
file74.50.94.137
Remcos botnet C2 server (confidence level: 100%)
file158.23.168.103
Sliver botnet C2 server (confidence level: 100%)
file175.27.162.38
Unknown malware botnet C2 server (confidence level: 100%)
file51.38.109.145
AsyncRAT botnet C2 server (confidence level: 100%)
file179.13.5.203
AsyncRAT botnet C2 server (confidence level: 100%)
file207.231.111.146
AsyncRAT botnet C2 server (confidence level: 100%)
file171.249.230.216
Venom RAT botnet C2 server (confidence level: 100%)
file201.202.66.215
QakBot botnet C2 server (confidence level: 75%)
file38.55.129.48
Unknown malware botnet C2 server (confidence level: 75%)
file47.94.199.241
Unknown malware botnet C2 server (confidence level: 75%)
file58.218.215.231
DeimosC2 botnet C2 server (confidence level: 75%)
file86.126.204.169
QakBot botnet C2 server (confidence level: 75%)
file47.129.171.26
Cobalt Strike botnet C2 server (confidence level: 75%)

Hash

ValueDescriptionCopy
hash53
Cobalt Strike botnet C2 server (confidence level: 100%)
hash30035
Cobalt Strike botnet C2 server (confidence level: 100%)
hash80
Cobalt Strike botnet C2 server (confidence level: 100%)
hash443
Cobalt Strike botnet C2 server (confidence level: 100%)
hash4020
Remcos botnet C2 server (confidence level: 100%)
hash2404
Remcos botnet C2 server (confidence level: 100%)
hash3030
AsyncRAT botnet C2 server (confidence level: 100%)
hash2000
AsyncRAT botnet C2 server (confidence level: 100%)
hash5000
AsyncRAT botnet C2 server (confidence level: 100%)
hash8888
AsyncRAT botnet C2 server (confidence level: 100%)
hash2000
AsyncRAT botnet C2 server (confidence level: 100%)
hash8808
AsyncRAT botnet C2 server (confidence level: 100%)
hash8808
AsyncRAT botnet C2 server (confidence level: 100%)
hash7443
Unknown malware botnet C2 server (confidence level: 100%)
hash7443
Unknown malware botnet C2 server (confidence level: 100%)
hash80
Unknown malware botnet C2 server (confidence level: 100%)
hash81
Havoc botnet C2 server (confidence level: 100%)
hash15443
Havoc botnet C2 server (confidence level: 100%)
hash443
Havoc botnet C2 server (confidence level: 100%)
hash25565
Venom RAT botnet C2 server (confidence level: 100%)
hash80
Venom RAT botnet C2 server (confidence level: 100%)
hash8080
DCRat botnet C2 server (confidence level: 100%)
hash80
Stealc botnet C2 server (confidence level: 100%)
hash80
MooBot botnet C2 server (confidence level: 100%)
hash4188
BianLian botnet C2 server (confidence level: 100%)
hash350
Quasar RAT botnet C2 server (confidence level: 100%)
hash4fa11681457c9753a8e32fba9874b69a0fe6ef55157bcc21b3bf4063cfdb14f7
NetSupportManager RAT payload (confidence level: 100%)
hashbee87b367430d764819e0763d8cd7dc6172d0652ff8d4589b72bf06010456b77
NetSupportManager RAT payload (confidence level: 100%)
hash5555
NetSupportManager RAT botnet C2 server (confidence level: 100%)
hash2
NjRAT botnet C2 server (confidence level: 100%)
hash4433
ValleyRAT botnet C2 server (confidence level: 100%)
hash80
SystemBC botnet C2 server (confidence level: 60%)
hash62443
Meterpreter botnet C2 server (confidence level: 100%)
hash443
Cobalt Strike botnet C2 server (confidence level: 100%)
hash8888
Unknown malware botnet C2 server (confidence level: 100%)
hash8808
AsyncRAT botnet C2 server (confidence level: 100%)
hash6606
AsyncRAT botnet C2 server (confidence level: 100%)
hash7707
AsyncRAT botnet C2 server (confidence level: 100%)
hash7443
Unknown malware botnet C2 server (confidence level: 100%)
hash80
Hook botnet C2 server (confidence level: 100%)
hash8081
Havoc botnet C2 server (confidence level: 100%)
hash8010
DCRat botnet C2 server (confidence level: 100%)
hash80
ERMAC botnet C2 server (confidence level: 100%)
hash80
MooBot botnet C2 server (confidence level: 100%)
hash80
Cobalt Strike botnet C2 server (confidence level: 100%)
hash7777
AsyncRAT botnet C2 server (confidence level: 100%)
hash5000
AsyncRAT botnet C2 server (confidence level: 100%)
hash8082
Hook botnet C2 server (confidence level: 100%)
hash8089
Hook botnet C2 server (confidence level: 100%)
hash8848
DCRat botnet C2 server (confidence level: 100%)
hash60000
Unknown malware botnet C2 server (confidence level: 100%)
hash4000
Unknown malware botnet C2 server (confidence level: 100%)
hash18080
Unknown malware botnet C2 server (confidence level: 100%)
hash80
Unknown malware botnet C2 server (confidence level: 100%)
hash3333
Unknown malware botnet C2 server (confidence level: 100%)
hash3333
Unknown malware botnet C2 server (confidence level: 100%)
hash80
Unknown malware botnet C2 server (confidence level: 100%)
hash3333
Unknown malware botnet C2 server (confidence level: 100%)
hash443
Unknown malware botnet C2 server (confidence level: 100%)
hash3333
Unknown malware botnet C2 server (confidence level: 100%)
hash80
Unknown malware botnet C2 server (confidence level: 100%)
hash443
Unknown malware botnet C2 server (confidence level: 100%)
hash443
Unknown malware botnet C2 server (confidence level: 100%)
hash80
Unknown malware botnet C2 server (confidence level: 100%)
hash4444
Unknown malware botnet C2 server (confidence level: 100%)
hash8080
Unknown malware botnet C2 server (confidence level: 100%)
hash443
Unknown malware botnet C2 server (confidence level: 100%)
hash3333
Unknown malware botnet C2 server (confidence level: 100%)
hash3333
Unknown malware botnet C2 server (confidence level: 100%)
hash3333
Unknown malware botnet C2 server (confidence level: 100%)
hash2435
ValleyRAT botnet C2 server (confidence level: 100%)
hash443
Cobalt Strike botnet C2 server (confidence level: 50%)
hash3333
Unknown malware botnet C2 server (confidence level: 50%)
hash31337
Sliver botnet C2 server (confidence level: 50%)
hash31337
Sliver botnet C2 server (confidence level: 50%)
hash7443
Unknown malware botnet C2 server (confidence level: 50%)
hash2067
Unknown malware botnet C2 server (confidence level: 50%)
hash8081
Cobalt Strike botnet C2 server (confidence level: 100%)
hash2404
Remcos botnet C2 server (confidence level: 100%)
hash443
Sliver botnet C2 server (confidence level: 100%)
hash443
Sliver botnet C2 server (confidence level: 100%)
hash8443
Sliver botnet C2 server (confidence level: 100%)
hash80
Sliver botnet C2 server (confidence level: 100%)
hash8808
AsyncRAT botnet C2 server (confidence level: 100%)
hash2222
AsyncRAT botnet C2 server (confidence level: 100%)
hash7443
Unknown malware botnet C2 server (confidence level: 100%)
hash6001
Venom RAT botnet C2 server (confidence level: 100%)
hash443
DCRat botnet C2 server (confidence level: 100%)
hash443
DeimosC2 botnet C2 server (confidence level: 75%)
hash443
DeimosC2 botnet C2 server (confidence level: 75%)
hash8443
Sliver botnet C2 server (confidence level: 75%)
hash443
Havoc botnet C2 server (confidence level: 75%)
hash8000
Cobalt Strike botnet C2 server (confidence level: 100%)
hash80
Cobalt Strike botnet C2 server (confidence level: 100%)
hash80
Cobalt Strike botnet C2 server (confidence level: 100%)
hash80
Cobalt Strike botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash1935
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash27050
Bashlite botnet C2 server (confidence level: 100%)
hash1337
Unknown malware botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash8888
Revenge RAT botnet C2 server (confidence level: 100%)
hash8888
Revenge RAT botnet C2 server (confidence level: 100%)
hash8888
Revenge RAT botnet C2 server (confidence level: 100%)
hash5555
Mirai botnet C2 server (confidence level: 100%)
hash4258
Bashlite botnet C2 server (confidence level: 100%)
hash22
Bashlite botnet C2 server (confidence level: 100%)
hash101
MooBot botnet C2 server (confidence level: 100%)
hash5000
Mirai botnet C2 server (confidence level: 100%)
hash4782
Quasar RAT botnet C2 server (confidence level: 100%)
hash4782
Quasar RAT botnet C2 server (confidence level: 100%)
hash8080
Quasar RAT botnet C2 server (confidence level: 100%)
hash4782
Quasar RAT botnet C2 server (confidence level: 100%)
hash6672
Quasar RAT botnet C2 server (confidence level: 100%)
hash4782
Quasar RAT botnet C2 server (confidence level: 100%)
hash6606
AsyncRAT botnet C2 server (confidence level: 100%)
hash4545
AsyncRAT botnet C2 server (confidence level: 100%)
hash7707
AsyncRAT botnet C2 server (confidence level: 100%)
hash8808
AsyncRAT botnet C2 server (confidence level: 100%)
hash7000
XWorm botnet C2 server (confidence level: 100%)
hash7000
XWorm botnet C2 server (confidence level: 100%)
hash4562
XWorm botnet C2 server (confidence level: 100%)
hash8888
XWorm botnet C2 server (confidence level: 100%)
hash1888
XWorm botnet C2 server (confidence level: 100%)
hash8888
XWorm botnet C2 server (confidence level: 100%)
hash7000
XWorm botnet C2 server (confidence level: 100%)
hash2222
XWorm botnet C2 server (confidence level: 100%)
hash31531
XWorm botnet C2 server (confidence level: 100%)
hash8888
XWorm botnet C2 server (confidence level: 100%)
hash7777
XWorm botnet C2 server (confidence level: 100%)
hash1988
Remcos botnet C2 server (confidence level: 100%)
hash1818
Remcos botnet C2 server (confidence level: 100%)
hash1313
Remcos botnet C2 server (confidence level: 100%)
hash1987
Remcos botnet C2 server (confidence level: 100%)
hash21280
Remcos botnet C2 server (confidence level: 100%)
hash9373
Remcos botnet C2 server (confidence level: 100%)
hash6522
NjRAT botnet C2 server (confidence level: 100%)
hash8953
NjRAT botnet C2 server (confidence level: 100%)
hash26948
NjRAT botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash1337
Mirai botnet C2 server (confidence level: 100%)
hash7707
AsyncRAT botnet C2 server (confidence level: 100%)
hash7707
AsyncRAT botnet C2 server (confidence level: 100%)
hash7000
Venom RAT botnet C2 server (confidence level: 100%)
hash8000
Venom RAT botnet C2 server (confidence level: 100%)
hash443
FAKEUPDATES payload delivery server (confidence level: 100%)
hash443
Cobalt Strike botnet C2 server (confidence level: 75%)
hash417
Tofsee botnet C2 server (confidence level: 100%)
hash429
Tofsee botnet C2 server (confidence level: 100%)
hash420
Tofsee botnet C2 server (confidence level: 100%)
hash425
Tofsee botnet C2 server (confidence level: 100%)
hash431
Tofsee botnet C2 server (confidence level: 100%)
hash2401
Remcos botnet C2 server (confidence level: 75%)
hash443
FAKEUPDATES botnet C2 server (confidence level: 100%)
hash423
Tofsee botnet C2 server (confidence level: 100%)
hash430
Tofsee botnet C2 server (confidence level: 100%)
hash424
Tofsee botnet C2 server (confidence level: 100%)
hash421
Tofsee botnet C2 server (confidence level: 100%)
hash426
Tofsee botnet C2 server (confidence level: 100%)
hash427
Tofsee botnet C2 server (confidence level: 100%)
hash80
Cobalt Strike botnet C2 server (confidence level: 100%)
hash443
Cobalt Strike botnet C2 server (confidence level: 100%)
hash8888
Cobalt Strike botnet C2 server (confidence level: 100%)
hash8082
Hook botnet C2 server (confidence level: 100%)
hash80
Hook botnet C2 server (confidence level: 100%)
hash4782
Quasar RAT botnet C2 server (confidence level: 100%)
hash1629
NetSupportManager RAT botnet C2 server (confidence level: 100%)
hash01a692df9deb5e8db620e4fb7e687836
Unknown malware payload (confidence level: 100%)
hash2d6d91c5988dcab2eb4dab1ec55cfbb9
Unknown malware payload (confidence level: 100%)
hash30da72fda6d0f5e3972272332d7fc47b
Unknown malware payload (confidence level: 100%)
hash456e14aa644bd31d85e0fe6f78d8fc15
Unknown malware payload (confidence level: 100%)
hash53493b07fe423b1dbdc789803cbac7c1
Unknown malware payload (confidence level: 100%)
hash9e116f9ad2ff072f02aa2ebd671582a5
Unknown malware payload (confidence level: 100%)
hashb447aaf52c1efad388612f8220969c35
Unknown malware payload (confidence level: 100%)
hashde8f69efdb29cdf5fd12dd7b74584696
Unknown malware payload (confidence level: 100%)
hashfc7dc3c5306d6a508023160953168a16
Unknown malware payload (confidence level: 100%)
hash2689
Quasar RAT botnet C2 server (confidence level: 100%)
hash80
Cobalt Strike botnet C2 server (confidence level: 100%)
hash3000
Cobalt Strike botnet C2 server (confidence level: 100%)
hash2404
Remcos botnet C2 server (confidence level: 100%)
hash5938
Remcos botnet C2 server (confidence level: 100%)
hash31337
Sliver botnet C2 server (confidence level: 100%)
hash8888
Unknown malware botnet C2 server (confidence level: 100%)
hash8808
AsyncRAT botnet C2 server (confidence level: 100%)
hash8020
AsyncRAT botnet C2 server (confidence level: 100%)
hash6606
AsyncRAT botnet C2 server (confidence level: 100%)
hash5000
Venom RAT botnet C2 server (confidence level: 100%)
hash443
QakBot botnet C2 server (confidence level: 75%)
hash60000
Unknown malware botnet C2 server (confidence level: 75%)
hash60000
Unknown malware botnet C2 server (confidence level: 75%)
hash4506
DeimosC2 botnet C2 server (confidence level: 75%)
hash443
QakBot botnet C2 server (confidence level: 75%)
hash53
Cobalt Strike botnet C2 server (confidence level: 75%)

Domain

ValueDescriptionCopy
domainwww.trinity-group.com
ClearFake payload delivery domain (confidence level: 75%)
domaintecnicasandinas.com
ClearFake payload delivery domain (confidence level: 75%)
domainacskompozit.com
ClearFake payload delivery domain (confidence level: 75%)
domainwww.sivalencia.org
ClearFake payload delivery domain (confidence level: 75%)
domainwww.telcoinfinity.com
ClearFake payload delivery domain (confidence level: 75%)
domainwww.t3r.sg
ClearFake payload delivery domain (confidence level: 75%)
domain1fin.uz
Unknown malware botnet C2 domain (confidence level: 90%)
domainabret.org
FAKEUPDATES payload delivery domain (confidence level: 80%)
domainpackaging.k-way.com
FAKEUPDATES payload delivery domain (confidence level: 80%)
domainvaultcord.net
Unknown malware botnet C2 domain (confidence level: 90%)
domainwebmail.textcentrzdmnewz.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.mtpolice077.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.digitalbusineszclub.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.8761gamesofarts.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.homeimprovementbloopers.website
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.bestonlinegamez.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.bestpotworldzhb.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.onebusinessportal.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.bsttoolswx.website
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.totopolice031.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.ufatopgames.website
Havoc botnet C2 domain (confidence level: 100%)
domainwebdisk.textagenai.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebdisk.toplavishnewz43.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebdisk.enjoyufabet.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpcalendars.magzineviralzhubz.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.teamofufabetgames.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.police-mt077.website
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.businessportal.website
Havoc botnet C2 domain (confidence level: 100%)
domaincheck.pojon.icu
ClearFake payload delivery domain (confidence level: 100%)
domainlordfox11.net
NetSupportManager RAT botnet C2 domain (confidence level: 100%)
domainhighway-loads.com
NetSupportManager RAT payload delivery domain (confidence level: 100%)
domainwebdisk.8761gamesofarts.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.topdigihub.com
Havoc botnet C2 domain (confidence level: 100%)
domainwebdisk.tectotechnologynewzz.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpcalendars.gamesfunzartsz.com
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.newzwireread.com
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.toplavishnewz.com
Havoc botnet C2 domain (confidence level: 100%)
domainsmgroup-kundendienst.de
ClearFake payload delivery domain (confidence level: 75%)
domainwww.nurses.my
ClearFake payload delivery domain (confidence level: 75%)
domainschultzauctioneerslandmarkrealty.com
ClearFake payload delivery domain (confidence level: 75%)
domainxn--tff-sna.no
FAKEUPDATES payload delivery domain (confidence level: 80%)
domainjd20.qxml.ltd
Cobalt Strike botnet C2 domain (confidence level: 100%)
domain31.45.60.34.bc.googleusercontent.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainmyhaani.ddns.net
NjRAT botnet C2 domain (confidence level: 50%)
domainoxx.hopto.org
Quasar RAT botnet C2 domain (confidence level: 50%)
domainoz.waw.pl
Quasar RAT botnet C2 domain (confidence level: 50%)
domainkerevif648-40446.portmap.host
XWorm botnet C2 domain (confidence level: 50%)
domainoperates-rna.with.playit.plus
XWorm botnet C2 domain (confidence level: 50%)
domaincommunicationfell.icu
Lumma Stealer botnet C2 domain (confidence level: 50%)
domainfaminuarfas.digital
Lumma Stealer botnet C2 domain (confidence level: 50%)
domaingmoldenhours.tech
Lumma Stealer botnet C2 domain (confidence level: 50%)
domainhalfambitie.space
Lumma Stealer botnet C2 domain (confidence level: 50%)
domainsolarnatgure.run
Lumma Stealer botnet C2 domain (confidence level: 50%)
domaincheck.vudih.icu
ClearFake payload delivery domain (confidence level: 100%)
domaingadgethgfub.icu
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaintechmindzs.live
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaintechspherxe.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaincpcontacts.ipmnewsworld.com
Havoc botnet C2 domain (confidence level: 100%)
domain952cd7f5-55c2-472f-bc9d-08487ef75661.random.fithiphealthy.com
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.ranknewzmedia.com
Havoc botnet C2 domain (confidence level: 100%)
domainidrispatagonia.com
ClearFake payload delivery domain (confidence level: 75%)
domainnglpavers.com
ClearFake payload delivery domain (confidence level: 75%)
domainmessaggidifilomagia.net
ClearFake payload delivery domain (confidence level: 75%)
domaincheck.cuzon.icu
ClearFake payload delivery domain (confidence level: 100%)
domainbsdw.pages.dev
ClearFake payload delivery domain (confidence level: 100%)
domainrengular11.today
ClearFake payload delivery domain (confidence level: 100%)
domaincheck.zixeq.icu
ClearFake payload delivery domain (confidence level: 100%)
domaincpanel.lawyersfederalcourt.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaincheck.pidal.icu
ClearFake payload delivery domain (confidence level: 100%)
domaincheck.danob.icu
ClearFake payload delivery domain (confidence level: 100%)
domaincheck.gytec.icu
ClearFake payload delivery domain (confidence level: 100%)
domainstains-38249.portmap.host
Quasar RAT botnet C2 domain (confidence level: 100%)
domainwindwosenjoyer12-23053.portmap.host
Quasar RAT botnet C2 domain (confidence level: 100%)
domainvamshin-44474.portmap.host
Quasar RAT botnet C2 domain (confidence level: 100%)
domainage-showcase.gl.at.ply.gg
Quasar RAT botnet C2 domain (confidence level: 100%)
domainstains-57509.portmap.host
Quasar RAT botnet C2 domain (confidence level: 100%)
domainfigure-bobby.gl.at.ply.gg
Quasar RAT botnet C2 domain (confidence level: 100%)
domainlast-forces.gl.at.ply.gg
Quasar RAT botnet C2 domain (confidence level: 100%)
domainbendecido3.ydns.eu
AsyncRAT botnet C2 domain (confidence level: 100%)
domainmaryvenom19.duckdns.org
AsyncRAT botnet C2 domain (confidence level: 100%)
domainaliweq.ddnsgeek.com
AsyncRAT botnet C2 domain (confidence level: 100%)
domaingz-sakura.xyz
AsyncRAT botnet C2 domain (confidence level: 100%)
domainwent-startup.gl.at.ply.gg
AsyncRAT botnet C2 domain (confidence level: 100%)
domainmhmad1.work.gd
AsyncRAT botnet C2 domain (confidence level: 100%)
domainkenanachy.duckdns.org
AsyncRAT botnet C2 domain (confidence level: 100%)
domainashleyasync.duckdns.org
AsyncRAT botnet C2 domain (confidence level: 100%)
domainbendecido2.ydns.eu
AsyncRAT botnet C2 domain (confidence level: 100%)
domainmhmad1.accesscam.org
AsyncRAT botnet C2 domain (confidence level: 100%)
domainall-te.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainxinclas.vmcentra.top
XWorm botnet C2 domain (confidence level: 100%)
domainprices-loved.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainbxwrmjames.duckdns.org
XWorm botnet C2 domain (confidence level: 100%)
domainfuckscammers.accesscam.org
XWorm botnet C2 domain (confidence level: 100%)
domainassociates-reef.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainmarch-occasion.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainnavigation-salaries.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainregistered-spectacular.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainexpresswealthz.duckdns.org
XWorm botnet C2 domain (confidence level: 100%)
domainesetnode32-antiviru.ydns.eu
XWorm botnet C2 domain (confidence level: 100%)
domainwinter-pennsylvania.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainway-eyes.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainmalware.hopto.org
XWorm botnet C2 domain (confidence level: 100%)
domaingeneral-affiliates.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainthanks-viewers.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainrequired-mold.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainboards-baltimore.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainreply-noted.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainpoints-challenges.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domaintrying-fails.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 100%)
domainilovesteppers-38473.portmap.host
XWorm botnet C2 domain (confidence level: 100%)
domainfrontofficefax20.home-webserver.de
Remcos botnet C2 domain (confidence level: 100%)
domainkaher.no-ip.biz
NjRAT botnet C2 domain (confidence level: 100%)
domain232222222223-43449.portmap.host
NjRAT botnet C2 domain (confidence level: 100%)
domainpeterpanjack.no-ip.org
NjRAT botnet C2 domain (confidence level: 100%)
domainrundll32.hopto.org
NjRAT botnet C2 domain (confidence level: 100%)
domainquiet-cloud-77052.pktriot.net
NjRAT botnet C2 domain (confidence level: 100%)
domainwww.185-38-142-181.cprapid.com
Remcos botnet C2 domain (confidence level: 100%)
domaincpcontacts.onlinebesttotogames.com
Havoc botnet C2 domain (confidence level: 100%)
domainnn.retroki.ink
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.topthounds.com
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.sportsdhub.com
Havoc botnet C2 domain (confidence level: 100%)
domainipv6.104-168-101-23.cprapid.com
Bashlite botnet C2 domain (confidence level: 100%)
domainportal.onlineauth2-client4765445b-32c6-49b0-83e6-1d93765276.com
XWorm botnet C2 domain (confidence level: 100%)
domainaadcdn.onlineauth2-client4765445b-32c6-49b0-83e6-1d93765276.com
XWorm botnet C2 domain (confidence level: 100%)
domainprovidencehospitalsouthfield.com
ClearFake payload delivery domain (confidence level: 75%)
domainprotech.al
ClearFake payload delivery domain (confidence level: 75%)
domainleoclubhammamet.com
ClearFake payload delivery domain (confidence level: 75%)
domainpcriver.com
ClearFake payload delivery domain (confidence level: 75%)
domainranchhandweekend.com
ClearFake payload delivery domain (confidence level: 75%)
domainims-servis.ba
ClearFake payload delivery domain (confidence level: 75%)
domainwww.protectedsound.digital
Unknown malware botnet C2 domain (confidence level: 90%)
domaincheck.gejop.icu
ClearFake payload delivery domain (confidence level: 100%)
domaintowerymodest.top
Lumma Stealer payload delivery domain (confidence level: 100%)
domaincheck.wowuk.icu
ClearFake payload delivery domain (confidence level: 100%)
domaincybgerlaunch.digital
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainjkcommco.oasijnaasoculto.it.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainwhcms.greendreamcannabis.com
FAKEUPDATES botnet C2 domain (confidence level: 100%)
domaincheck.vykud.icu
ClearFake payload delivery domain (confidence level: 100%)
domaincpcalendars.shalownewssab.com
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.top10gamesofoto.com
Havoc botnet C2 domain (confidence level: 100%)
domainwebdisk.magazinebookline.com
Havoc botnet C2 domain (confidence level: 100%)
domainwebdisk.techdeepart.com
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.bestonenewznet.com
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.gamesofart.com
Havoc botnet C2 domain (confidence level: 100%)
domainip-157-20-182-57.hosted-by-hosterdaddy.com
Venom RAT botnet C2 domain (confidence level: 100%)
domaintekdag.com.tr
ClearFake payload delivery domain (confidence level: 75%)
domainwww.carniceriajuanjo.es
ClearFake payload delivery domain (confidence level: 75%)
domainobjectstorage.ap-singapore-2.oraclecloud.com
Unknown malware botnet C2 domain (confidence level: 90%)
domaintewchjourney.icu
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaindatadynnamics.today
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainiznnovativelabs.today
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainsmartnbetwork.today
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainviretualmatrix.today
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaincreative-ideas.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaindesign-inspiration7.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaindigital-world24.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaindigitalcrdjafters.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaineco-solutions360.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainfuture-tech2024.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainrobotticsrealm.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainsmart-living365.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainsoftwavxrereactor.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaintech-expert101.top
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainapwporchestrator.shop
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaingadgsetflow.shop
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaininnojvatech.shop
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaintqechtrends.shop
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaindevspihral.digital
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainnovapherex.digital
Lumma Stealer botnet C2 domain (confidence level: 100%)
domainqquantumcoding.digital
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaintecwhroots.digital
Lumma Stealer botnet C2 domain (confidence level: 100%)
domaincatmore23.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaincsok997.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainconannt.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainssl8rrs2.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainttekf42.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainttss442.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainworks883.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaincsskkjw.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainsynntre.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainqocoll.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainhaveits.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainremoredo.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaincatmos99.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainworks883.xyz
Unknown malware botnet C2 domain (confidence level: 100%)
domaincatmore88.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainssl87362.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainwowokeys.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaindcsdk.100ulife.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaindcsdkos.dc16888888.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaingmslb.net
Unknown malware botnet C2 domain (confidence level: 100%)
domainphonemesh.org
Unknown malware botnet C2 domain (confidence level: 100%)
domainlinkmob.org
Unknown malware botnet C2 domain (confidence level: 100%)
domainpeercon.org
Unknown malware botnet C2 domain (confidence level: 100%)
domainphonegrid.org
Unknown malware botnet C2 domain (confidence level: 100%)
domainsafernetwork.io
Unknown malware botnet C2 domain (confidence level: 100%)
domainlbk-sol.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainsklstech.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainkyc-holdings.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainjaguar-distributor.syslogcollector.com
Unknown malware botnet C2 domain (confidence level: 100%)
domaing.sxim.me
Unknown malware botnet C2 domain (confidence level: 100%)
domainreg.sxim.me
Unknown malware botnet C2 domain (confidence level: 100%)
domainref.sxim.me
Unknown malware botnet C2 domain (confidence level: 100%)
domaintask.mymoyu.shop
Unknown malware botnet C2 domain (confidence level: 100%)
domaintask.moyu88.xyz
Unknown malware botnet C2 domain (confidence level: 100%)
domaintask1.ziyemy.shop
Unknown malware botnet C2 domain (confidence level: 100%)
domaintask2.ziyemy.shop
Unknown malware botnet C2 domain (confidence level: 100%)
domainadstat.moyu88.xyz
Unknown malware botnet C2 domain (confidence level: 100%)
domainadstat.ziyemy.shop
Unknown malware botnet C2 domain (confidence level: 100%)
domainadstat.ad3g.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainadstat2.ziyemy.shop
Unknown malware botnet C2 domain (confidence level: 100%)
domainupdate.ad3g.com
Unknown malware botnet C2 domain (confidence level: 100%)
domainspiritlib.cyou
Unknown malware botnet C2 domain (confidence level: 100%)
domaincheck.bifuh.icu
ClearFake payload delivery domain (confidence level: 100%)
domainwww.0u47m9.top
Formbook botnet C2 domain (confidence level: 50%)
domainwww.2711cuvisoe6.pro
Formbook botnet C2 domain (confidence level: 50%)
domainwww.75660.mobi
Formbook botnet C2 domain (confidence level: 50%)
domainwww.8788899.vip
Formbook botnet C2 domain (confidence level: 50%)
domainwww.ambyr.green
Formbook botnet C2 domain (confidence level: 50%)
domainwww.bedcapbegaudybegrim.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.belly-fat-removal-de-3215.today
Formbook botnet C2 domain (confidence level: 50%)
domainwww.brfiyzpa.tokyo
Formbook botnet C2 domain (confidence level: 50%)
domainwww.casinogoldis.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.christmas-decoration-80176.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.cinematech.today
Formbook botnet C2 domain (confidence level: 50%)
domainwww.cnzdp.autos
Formbook botnet C2 domain (confidence level: 50%)
domainwww.dahqxo.info
Formbook botnet C2 domain (confidence level: 50%)
domainwww.dance-classes-65797.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.danceglobal.store
Formbook botnet C2 domain (confidence level: 50%)
domainwww.disnestdustbineelboat.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.dreamverse.page
Formbook botnet C2 domain (confidence level: 50%)
domainwww.duoqia.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.enior-apartments-81739.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.ezapp.net
Formbook botnet C2 domain (confidence level: 50%)
domainwww.fbvfgb.lol
Formbook botnet C2 domain (confidence level: 50%)
domainwww.flatterfoetusfreezer.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.food-packing-job-11697.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.foreveralive.store
Formbook botnet C2 domain (confidence level: 50%)
domainwww.frca02620.live
Formbook botnet C2 domain (confidence level: 50%)
domainwww.fterledger.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.gassitgawkygigues.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.georgeglutosegravers.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.gg01j7y.pro
Formbook botnet C2 domain (confidence level: 50%)
domainwww.hahcaa.bid
Formbook botnet C2 domain (confidence level: 50%)
domainwww.heyfriend.design
Formbook botnet C2 domain (confidence level: 50%)
domainwww.hh888.cfd
Formbook botnet C2 domain (confidence level: 50%)
domainwww.ighthold.pro
Formbook botnet C2 domain (confidence level: 50%)
domainwww.ilostmydogbarter.shop
Formbook botnet C2 domain (confidence level: 50%)
domainwww.investment-management-kff.today
Formbook botnet C2 domain (confidence level: 50%)
domainwww.jngck.autos
Formbook botnet C2 domain (confidence level: 50%)
domainwww.job-offer-72029.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.kingmojok.sbs
Formbook botnet C2 domain (confidence level: 50%)
domainwww.kinneykoorhmnkranach.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.nodcolnplay.today
Formbook botnet C2 domain (confidence level: 50%)
domainwww.nursetoy.net
Formbook botnet C2 domain (confidence level: 50%)
domainwww.online-advertising-17957.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.optime-otech.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.personalbunker.info
Formbook botnet C2 domain (confidence level: 50%)
domainwww.power-banks-44377.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.primemotors.store
Formbook botnet C2 domain (confidence level: 50%)
domainwww.pulgadas.net
Formbook botnet C2 domain (confidence level: 50%)
domainwww.pureay.life
Formbook botnet C2 domain (confidence level: 50%)
domainwww.qicoxfxv.cyou
Formbook botnet C2 domain (confidence level: 50%)
domainwww.rehat.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.rinarabu.info
Formbook botnet C2 domain (confidence level: 50%)
domainwww.satoshigamefi.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.security-service-50960.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.softwaresignal.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.sport-news-66076.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.sport-news-73209.bond
Formbook botnet C2 domain (confidence level: 50%)
domainwww.suatcelikelgk.fun
Formbook botnet C2 domain (confidence level: 50%)
domainwww.swissdigitalhotelspass.cloud
Formbook botnet C2 domain (confidence level: 50%)
domainwww.tirangaa11.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.treatments-dental-find01.today
Formbook botnet C2 domain (confidence level: 50%)
domainwww.walkethereum.xyz
Formbook botnet C2 domain (confidence level: 50%)
domainwww.watershipdown.net
Formbook botnet C2 domain (confidence level: 50%)
domainwww.wzdry.autos
Formbook botnet C2 domain (confidence level: 50%)
domainwww.xbvfbdgdzgxcxfgdgbjlk.website
Formbook botnet C2 domain (confidence level: 50%)
domainwww.yent.biz
Formbook botnet C2 domain (confidence level: 50%)
domaindesigned-circuit.gl.at.ply.gg
NjRAT botnet C2 domain (confidence level: 50%)
domainabobustsb-31029.portmap.host
XWorm botnet C2 domain (confidence level: 50%)
domainall-advocacy.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domainanti-dude.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domainaround-four.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domaincasino-offline.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domaindatabase-victoria.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domainla-judgment.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domainnovember-cope.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domainthings-gap.gl.at.ply.gg
XWorm botnet C2 domain (confidence level: 50%)
domaincpcontacts.bestgamesufabet.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.welovetotogames.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpcalendars.touchufabetgames.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.bottomofbusiness.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpcalendars.sportscasino.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.top5business.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainbestsports.gamesandufabetpro.website
Havoc botnet C2 domain (confidence level: 100%)
domainwebdisk.ufatopgames.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.topbusineszworldk.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpcalendars.homeaddition.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.bookslinedzmod.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.businessnewznetwork.website
Havoc botnet C2 domain (confidence level: 100%)
domaincpcontacts.fstnewmedia.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.textagenai.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.playufabetgames.xyz
Havoc botnet C2 domain (confidence level: 100%)
domaincpanel.textcentrzdmnewz.xyz
Havoc botnet C2 domain (confidence level: 100%)
domainwebmail.ufabets.website
Havoc botnet C2 domain (confidence level: 100%)
domainns.1.3.0o0.foo
Cobalt Strike botnet C2 domain (confidence level: 75%)
domainns.1.4.0o0.foo
Cobalt Strike botnet C2 domain (confidence level: 75%)

Url

ValueDescriptionCopy
urlhttps://soc.ridinggearz.com/iioa7ysfce3tesu2ozxmtsbwfwbl6kufpzh43x0o7cqljudt9imacg8vabaguyxpqzvhacdhnneiqmuni1njfjhgowrczzel0dxvysre6ny8ily7wbw2pk5hd2rlfr9kfpzvgknhm3mgmjbt6/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttps://downloadingsoft.top/ummg5on1tycg3nzalvzpnr9wdnuggdc0judmbbaq0q4o6sgavvr57qbferpsoeymgv1zj1bpxhs8hkk9vlpzrxixcb7evfdhkjzy2awcwdqsdyn3i6kiimlykkol4x0cq9tqih5yehpfzw7al/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttps://ventureengine.lk/wp-content/plugins/z-downloads/?token=aldlnt6h9wexrgz9uplt
Latrodectus payload delivery URL (confidence level: 95%)
urlhttps://pumpcommunity.us
Quasar RAT payload delivery URL (confidence level: 100%)
urlhttps://lnk1man.pages.dev/a.cmd
Quasar RAT payload delivery URL (confidence level: 100%)
urlhttp://87.106.100.210:6001/index.php
Azorult botnet C2 (confidence level: 100%)
urlhttps://soc.ridinggearz.com/sfgeq7ijienzflhx2ywn0pm9cmi5dqa8zikvr9kt8y8jzum1ngdl4ibutpxvav7talil5xcq1odjbwyu7rsyehbd6rwdsmcpx4lkgkwonqbvjgfzwb3ssgo0vxzferormojo96c1taoegu0krj43bf32c/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttps://dvw2oc4fr9ulz.cloudfront.net/mzhg7eki09g86x54hgkdjnrbsbznryjta2zohuhs4idvtqgczmctd83zcps1euwzajsisbtrbqxeieobv7rrpup490ofjwlw1foenoxkn6kq2cy8gelmp1ycbxtodc9q2mmp5l3ajnwfvyo3ldyuim/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttps://dvw2oc4fr9ulz.cloudfront.net/m37egwcirvbachncdy9oqm1irydjivzai5vmdt0uzqji5unjv068erysgxay4wotxpwfz24rgtsbfowg6drtm3nuqrck147fkosdvwoeea92clocnhku5pbza8i01jlsxhzuqtmt3hbw27hbplq9pl/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttps://check.pojon.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://highway-loads.com/update.php
NetSupportManager RAT payload delivery URL (confidence level: 100%)
urlhttps://highway-loads.com/xbe/xbe.vue
NetSupportManager RAT payload delivery URL (confidence level: 100%)
urlhttps://huguenothundred.org/ps/auth/pmexo5iqwlxx7kiyuf5mjkohv5mtj02qzzuzdv0m68k9nlzuhpc3adttgobsdfsapj3pl2ougyvy1491wdsmompcrwnzx9kyzrsjl48twasotixfncqvvtfegice6pu2reh3fnohc/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttp://110.42.111.128:62443/jssm
Cobalt Strike botnet C2 (confidence level: 75%)
urlhttp://soc.ridinggearz.com/sfgeq7ijienzflhx2ywn0pm9cmi5dqa8zikvr9kt8y8jzum1ngdl4ibutpxvav7talil5xcq1odjbwyu7rsyehbd6rwdsmcpx4lkgkwonqbvjgfzwb3ssgo0vxzferormojo96c1taoegu0krj43bf32c/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttp://huguenothundred.org/ps/auth/pmexo5iqwlxx7kiyuf5mjkohv5mtj02qzzuzdv0m68k9nlzuhpc3adttgobsdfsapj3pl2ougyvy1491wdsmompcrwnzx9kyzrsjl48twasotixfncqvvtfegice6pu2reh3fnohc/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttp://soc.ridinggearz.com/iioa7ysfce3tesu2ozxmtsbwfwbl6kufpzh43x0o7cqljudt9imacg8vabaguyxpqzvhacdhnneiqmuni1njfjhgowrczzel0dxvysre6ny8ily7wbw2pk5hd2rlfr9kfpzvgknhm3mgmjbt6/verify
Unknown malware botnet C2 (confidence level: 95%)
urlhttps://check.vudih.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttp://href.li/?https:/en.wikipedia.org/wiki/email
Unknown malware botnet C2 (confidence level: 95%)
urlhttps://check.cuzon.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttp://821518cm.nyanyash.ru/externalpython_securegeoflowertestdownloads.php
DCRat botnet C2 (confidence level: 100%)
urlhttps://bsdw.pages.dev/blink
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://download2327.mediafire.com/dfwyxnkuhzugfgqm3g0snhgri_jlabsa9owuzhsr7mztyh5wzknojt4czqb1iaotipq5ql6rm2_hgbmjhhbxf_27l-b0lmezg2nnldabwlysfoju-kg6bhaqavbug7fdtjdzwjgw_j6na8rydbnvowtbxikrxpvrhzyh_423icbk/y6kcwh026fqe80h/light.mp3
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://check.zixeq.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://check.pidal.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://check.danob.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttp://692218cm.nyanyash.ru/phpjavascriptupdatemultiprotectsql.php
DCRat botnet C2 (confidence level: 100%)
urlhttps://check.gytec.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://api.telegram.org/bot7394412765:aag5arqcpcl2_qrlsneyflfmgrjansma654/sendmessage
AsyncRAT botnet C2 (confidence level: 100%)
urlhttps://nbw49tk2-25505.euw.devtunnels.ms
NjRAT botnet C2 (confidence level: 100%)
urlhttp://zmxzm.com/index.php
Azorult botnet C2 (confidence level: 100%)
urlhttp://a1089604.xsph.ru/db6165dd.php
DCRat botnet C2 (confidence level: 100%)
urlhttps://check.gejop.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://check.wowuk.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://tampermonkey03.top/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://subawhipnator.life/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://tampermonkey08.top/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://tampermonkey02.top/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://smart-living365.top/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://disobilittyhell.live/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://tampermonkey06.top/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://bloodyeleftor.world/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://creativehjub.tech/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://brjightfuture.tech/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://pastedeputten.life/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://blissfttulmoments.top/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://lossfinger.xyz/art.php
Unknown Loader botnet C2 (confidence level: 100%)
urlhttps://befall-sm0ker.sbs/api
Lumma Stealer botnet C2 (confidence level: 75%)
urlhttps://librari-night.sbs/api
Lumma Stealer botnet C2 (confidence level: 75%)
urlhttps://oak-smash.cyou/api
Lumma Stealer botnet C2 (confidence level: 75%)
urlhttps://owner-vacat10n.sbs/api
Lumma Stealer botnet C2 (confidence level: 75%)
urlhttps://bitcoal.icu/art.php
Unknown Loader botnet C2 (confidence level: 100%)
urlhttps://cybgerlaunch.digital/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://printerdiallog.fun/api
Lumma Stealer botnet C2 (confidence level: 100%)
urlhttps://cloudflareapage.pages.dev/a.cmd
Quasar RAT payload delivery URL (confidence level: 100%)
urlhttps://whcms.greendreamcannabis.com/profilelayout
FAKEUPDATES botnet C2 (confidence level: 100%)
urlhttps://check.vykud.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttps://check.bifuh.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttp://www.0u47m9.top/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.2711cuvisoe6.pro/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.75660.mobi/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.8788899.vip/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.ambyr.green/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.bedcapbegaudybegrim.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.belly-fat-removal-de-3215.today/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.brfiyzpa.tokyo/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.casinogoldis.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.christmas-decoration-80176.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.cinematech.today/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.cnzdp.autos/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.dahqxo.info/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.dance-classes-65797.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.danceglobal.store/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.disnestdustbineelboat.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.dreamverse.page/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.duoqia.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.enior-apartments-81739.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.ezapp.net/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.fbvfgb.lol/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.flatterfoetusfreezer.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.food-packing-job-11697.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.foreveralive.store/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.frca02620.live/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.fterledger.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.gassitgawkygigues.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.georgeglutosegravers.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.gg01j7y.pro/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.hahcaa.bid/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.heyfriend.design/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.hh888.cfd/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.ighthold.pro/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.ilostmydogbarter.shop/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.investment-management-kff.today/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.jngck.autos/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.job-offer-72029.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.kingmojok.sbs/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.kinneykoorhmnkranach.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.nodcolnplay.today/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.nursetoy.net/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.online-advertising-17957.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.optime-otech.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.personalbunker.info/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.power-banks-44377.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.primemotors.store/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.pulgadas.net/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.pureay.life/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.qicoxfxv.cyou/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.rehat.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.rinarabu.info/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.satoshigamefi.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.security-service-50960.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.softwaresignal.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.sport-news-66076.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.sport-news-73209.bond/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.suatcelikelgk.fun/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.swissdigitalhotelspass.cloud/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.tirangaa11.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.treatments-dental-find01.today/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.walkethereum.xyz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.watershipdown.net/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.wzdry.autos/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.xbvfbdgdzgxcxfgdgbjlk.website/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttp://www.yent.biz/rupi/
Formbook botnet C2 (confidence level: 50%)
urlhttps://check.kupav.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)
urlhttp://a1089746.xsph.ru/5096497b.php
DCRat botnet C2 (confidence level: 100%)
urlhttps://check.kekid.icu/gkcxv.google
ClearFake payload delivery URL (confidence level: 100%)

Threat ID: 682c7dbde8347ec82d2c7936

Added to database: 5/20/2025, 1:03:57 PM

Last enriched: 6/19/2025, 4:05:06 PM

Last updated: 8/15/2025, 8:29:50 AM

Views: 37

Actions

PRO

Updates to AI analysis are available only with a Pro account. Contact root@offseq.com for access.

Please log in to the Console to use AI analysis features.

External Links

Need enhanced features?

Contact root@offseq.com for Pro access with improved analysis and higher rate limits.

Latest Threats