Live IOC Feed
103,926 recently reported malicious indicators from the last 7 days. Values are defanged — don't visit them.
| Indicator | Type | Malware / threat | First seen | Source |
|---|---|---|---|---|
| hxxps://ap[.]ajo889[.]org/z8/ | url | Vidar | ThreatFox | |
| hxxps://ap[.]ajo889[.]org/qk/ | url | Vidar | ThreatFox | |
| hxxps://sexmusem[.]com/ | url | WARDENStealer | ThreatFox | |
| hxxps://theracingrep[.]com/ | url | WARDENStealer | ThreatFox | |
| hxxps://ap[.]ajo889[.]org/to/ | url | Vidar | ThreatFox | |
| hxxp://95[.]56[.]232[.]109:52582/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://45[.]90[.]81[.]2:44577/i | url | malware_download | URLhaus | |
| hxxps://ap[.]ajo889[.]org/k8/ | url | Vidar | ThreatFox | |
| hxxp://219[.]155[.]221[.]116:56964/bin[.]sh | url | malware_download | URLhaus | |
| hxxps://ap[.]ajo889[.]org/hi/ | url | Vidar | ThreatFox | |
| hxxps://ap[.]ajo889[.]org/ty/ | url | Vidar | ThreatFox | |
| hxxp://113[.]239[.]245[.]233:45690/i | url | malware_download | URLhaus | |
| hxxp://36[.]89[.]252[.]178:44533/i | url | malware_download | URLhaus | |
| hxxps://topcon-company[.]com/ | url | Unknown malware | ThreatFox | |
| hxxps://www[.]topcargroup[.]it/ | url | Unknown malware | ThreatFox | |
| hxxps://ap[.]ajo889[.]org/o/ | url | Vidar | ThreatFox | |
| hxxps://k1[.]bb69[.]org/d/ | url | Vidar | ThreatFox | |
| hxxps://github[.]com/JoinerCelebrate/MICrOSOft-ACTIVaTiOn-sCRiPts-GIthUB/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/CanaryValley/youtubezapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]9[.]9c[.]rar | url | malware_download | URLhaus | |
| hxxps://github[.]com/CanaryValley/discordzapret/releases/download/1[.]10[.]4/zapret-discord-youtube-1[.]10[.]4[.]rar | url | malware_download | URLhaus | |
| hxxps://ap[.]ajo889[.]org/ig/ | url | Vidar | ThreatFox | |
| hxxps://github[.]com/CanaryValley/discordzapret/releases/download/1[.]10[.]4/zapret-discord-youtube-1[.]10[.]4[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/CanaryValley/zapretdiscord/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]9[.]9c[.]rar | url | malware_download | URLhaus | |
| hxxps://github[.]com/JoinerCelebrate/mICrOSOFt-ACtIVatIOn/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxps://ap[.]ajo889[.]org/pz/ | url | Vidar | ThreatFox | |
| hxxp://103[.]213[.]112[.]247:51386/Mozi[.]m | url | Mozi | ThreatFox | |
| hxxp://105[.]225[.]76[.]225:60373/Mozi[.]m | url | Mozi | ThreatFox | |
| hxxp://222[.]140[.]185[.]220:56186/Mozi[.]m | url | Mozi | ThreatFox | |
| hxxps://github[.]com/CanaryValley/youtubezapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]9[.]9c[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/JoinerCelebrate/mIcroSoFt-kms_ACtivAtIoN-scIpts/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/CanaryValley/zapretdiscord/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]9[.]9c[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/JoinerCelebrate/MIcRosOFt-ActivaTIoN-scrIPtS/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxp://60[.]19[.]47[.]25:39038/i | url | malware_download | URLhaus | |
| hxxp://61[.]52[.]157[.]34:33099/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://45[.]90[.]81[.]2:44577/bin[.]sh | url | malware_download | URLhaus | |
| hxxps://ap[.]ajo889[.]org/ev/ | url | Vidar | ThreatFox | |
| hxxp://115[.]51[.]213[.]91:58227/bin[.]sh | url | malware_download | URLhaus | |
| hxxps://ap[.]ajo889[.]org/sp/ | url | Vidar | ThreatFox | |
| hxxps://ap[.]ajo889[.]org/x2/ | url | Vidar | ThreatFox | |
| hxxp://123[.]189[.]130[.]238:48037/i | url | malware_download | URLhaus | |
| hxxp://113[.]239[.]245[.]233:45690/bin[.]sh | url | malware_download | URLhaus | |
| hxxps://addon-danieltschumicom[.]erinmallon[.]cyon[.]site/ | url | Unknown malware | ThreatFox | |
| hxxps://teddysvillage[.]org/ | url | Unknown malware | ThreatFox | |
| hxxps://a[.]ajo889[.]org/gk/ | url | Vidar | ThreatFox | |
| hxxps://k1[.]bb69[.]org/b/ | url | Vidar | ThreatFox | |
| hxxps://a[.]ajo889[.]org/f/ | url | Vidar | ThreatFox | |
| hxxp://125[.]47[.]85[.]173:57479/i | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/h6/ | url | Vidar | ThreatFox | |
| hxxp://119[.]102[.]81[.]61:43236/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://27[.]213[.]204[.]208:45013/i | url | malware_download | URLhaus | |
| hxxp://196[.]189[.]35[.]226:49819/i | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/u3/ | url | Vidar | ThreatFox | |
| hxxps://raw[.]githubusercontent[.]com/rockacode-web/TutorSystem/refs/heads/master/[.]tools/apache-maven-3[.]9[.]14-bin[.]zip | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/kea/ | url | Vidar | ThreatFox | |
| hxxp://182[.]116[.]121[.]119:38150/bin[.]sh | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/wfs/ | url | Vidar | ThreatFox | |
| hxxp://123[.]14[.]99[.]199:41504/i | url | malware_download | URLhaus | |
| hxxp://219[.]155[.]221[.]116:56964/i | url | malware_download | URLhaus | |
| hxxp://78[.]140[.]6[.]217:37103/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://115[.]49[.]24[.]239:57339/i | url | malware_download | URLhaus | |
| hxxp://78[.]25[.]143[.]77:33277/i | url | malware_download | URLhaus | |
| hxxps://raw[.]githubusercontent[.]com/rockacode-web/TutorSystem/refs/heads/master/[.]tools/apache-maven-3[.]9[.]14/lib/httpcore-4[.]4[.]16[.]jar | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/e0c/ | url | Vidar | ThreatFox | |
| hxxps://k1[.]bb69[.]org/s/ | url | Vidar | ThreatFox | |
| hxxps://github[.]com/Grottostready12/fREE-VPn/releases/download/1[.]11[.]2/freevpn[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/HexagonSamuraiPivot/aDgUarD-VPN/releases/download/1[.]7[.]8/adguardvpn[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/Grottostready12/adGUarD-Vpn/releases/download/1[.]11[.]2/adguardvpn[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/Grottostready12/WiNdOw-Vpn/releases/download/1[.]11[.]1/vpnwindow[.]zip | url | malware_download | URLhaus | |
| hxxps://raw[.]githubusercontent[.]com/HertzAnbuSay/PRIzRaK-Box_githUb/refs/heads/main/prizrak-box[.]bat | url | malware_download | URLhaus | |
| hxxps://github[.]com/HighHemomancer/micrOsOfT-ActIvatIoN-sCRipTS/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/HighHemomancer/mIcROsOFT_aCtIvaTION-sCRipTs_githUb/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/HighHemomancer/MIcrosoft-ActIVatIOn/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/HertzAnbuSay/PRIzRaK-Box_githUb/releases/download/v1[.]0[.]20/prizrak-box[.]zip | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/od/ | url | Vidar | ThreatFox | |
| hxxps://github[.]com/Grottostready12/PLaNET_vpN/releases/download/1[.]11[.]1/planetvpn[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/Grottostready12/PRoTOn_VpN/releases/download/1[.]11[.]3/protonvpn[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/HertzAnbuSay/My_rEmnAWAVe/releases/download/v1[.]5/my-remnawave[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/HighHemomancer/mICRosOft-aCtivatIoN_kEY/releases/download/3[.]12/Microsoft-Activation-Scripts[.]zip | url | malware_download | URLhaus | |
| hxxp://116[.]139[.]141[.]197:45921/i | url | malware_download | URLhaus | |
| hxxp://27[.]213[.]204[.]208:45013/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://171[.]104[.]127[.]45:51926/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://125[.]40[.]158[.]222:49775/bin[.]sh | url | malware_download | URLhaus | |
| hxxps://github[.]com/BarbarianMenhir/ADguArD-VPn/releases/download/1[.]8[.]1/adguardvpn[.]zip | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/ai/ | url | Vidar | ThreatFox | |
| hxxps://github[.]com/HexagonSamuraiPivot/aDGuARdforwinDOWs-dOwNlOAd/releases/download/v8[.]0[.]1/AdguardForWindows[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/BackerSurvive/AdgUarDForWIndOws/releases/download/v8[.]0[.]1/AdguardForWindows[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/BarbarianMenhir/adGuArDFOrWiNDoWs/releases/download/v8[.]0[.]1/AdguardForWindows[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/BarbarianMenhir/ADGuArdfORwiNDOwS_DoWNLoAd/releases/download/v8[.]0[.]1/AdguardForWindows[.]zip | url | malware_download | URLhaus | |
| hxxp://123[.]14[.]99[.]199:41504/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://123[.]10[.]230[.]178:56441/bin[.]sh | url | malware_download | URLhaus | |
| hxxp://78[.]25[.]143[.]77:33277/bin[.]sh | url | malware_download | URLhaus | |
| hxxps://github[.]com/HexagonSamuraiPivot/adGuaRDFORWInDowS/releases/download/v8[.]0[.]1/AdguardForWindows[.]zip | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/i08/ | url | Vidar | ThreatFox | |
| hxxps://yebosheji[.]com/ | url | WARDENStealer | ThreatFox | |
| hxxps://a[.]ajo889[.]org/o/ | url | Vidar | ThreatFox | |
| hxxps://github[.]com/CapitalBakerEnhance/PROTon_VPN/releases/download/1[.]8[.]3/protonvpn[.]zip | url | malware_download | URLhaus | |
| hxxps://github[.]com/CapitalBakerEnhance/adgUARD-VPN/releases/download/1[.]8[.]3/adguardvpn[.]zip | url | malware_download | URLhaus | |
| hxxps://a[.]ajo889[.]org/u/ | url | Vidar | ThreatFox | |
| hxxps://k1[.]bb69[.]org/ | url | Vidar | ThreatFox | |
| hxxps://github[.]com/CapitalBakerEnhance/FReE-vpn/releases/download/1[.]8[.]3/freevpn[.]zip | url | malware_download | URLhaus |