Live IOC Feed
103,926 recently reported malicious indicators from the last 7 days. Values are defanged — don't visit them.
| Indicator | Type | Malware / threat | First seen | Source |
|---|---|---|---|---|
| hxxps://travertinekurgans[.]info/signin/endpoint-request | url | SmartApeSG | ThreatFox | |
| hxxps://travertinekurgans[.]info/signin/health-service[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://tufacrannog[.]info/principal/router-deploy | url | SmartApeSG | ThreatFox | |
| hxxps://tufacrannog[.]info/principal/session-view[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://sassafrastell[.]org/principal/legacy-client[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://sassafrastell[.]org/principal/router-deploy | url | SmartApeSG | ThreatFox | |
| hxxps://sassafrastell[.]org/principal/session-view[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://tamarackhenge[.]org/proxy/acl-parser[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://tamarackhenge[.]org/proxy/api-cookie | url | SmartApeSG | ThreatFox | |
| hxxps://tamarackhenge[.]org/proxy/signin-controller[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://pumicebarrow[.]info/proxy/api-cookie | url | SmartApeSG | ThreatFox | |
| hxxps://pumicebarrow[.]info/proxy/signin-controller[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://balsamdolmen[.]org/verify/realm-render[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://balsamdolmen[.]org/verify/beta-thread[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://balsamdolmen[.]org/verify/status-response | url | SmartApeSG | ThreatFox | |
| hxxps://tuffcromlech[.]info/verify/beta-thread[.]js | url | SmartApeSG | ThreatFox | |
| hxxps://tuffcromlech[.]info/verify/status-response | url | SmartApeSG | ThreatFox |